Subprocessors
Service providers, their roles and current processing information. Updated 23 September 2026.
Nikali Ltd. uses the providers below to operate WeekBuffer. Supabase, Lovable and Resend perform service processing; each can also process its own account, security or legal data. Google provides the separately authorized calendar service. For covered paid purchases, Stripe Managed Payments / Link is the merchant of record identified at checkout and on your receipt. These providers are not all subprocessors for every purpose.
Supabase
Database and authentication · Configured database and authentication
Data: Account identifiers, family planning data, encrypted integration credentials and operational evidence
Configured region/location: Database in Ireland (eu-west-1), verified 21 September 2026; support and onward processing may occur elsewhere.
Lovable Labs Incorporated
Application hosting and deployment · Public hosting in use; Business DPA applies
Data: Web requests, application delivery and operational diagnostics; end-user processing governed by the applicable Business DPA
Configured region/location: See current provider information; no EU-only processing promise.
User-authorized Calendar connection · Optional Calendar connection available in your account
Data: Selected calendar identifiers and necessary busy timing/status; optional Protected Busy Blocks
Configured region/location: See current provider information; no EU-only processing promise.
Stripe
Hosted Checkout and intended Managed Payments · TEST only; intended covered sales use Stripe Managed Payments / Link
Data: Billing/customer/payment references and covered transaction information; no card data stored by WeekBuffer
Configured region/location: See current provider information; no EU-only processing promise.
Resend
Email transport and delivery events · Transactional email enabled; optional email reminders require your choice
Data: Recipient address and the minimal rendered transactional message; delivery metadata
Configured region/location: See current provider information; no EU-only processing promise.
Supabase and Resend publish data-processing agreements with EU standard contractual clauses and UK transfer provisions. WeekBuffer uses Lovable Business, whose standard DPA applies automatically to the upgraded workspace. The published DPA names Lovable Labs Incorporated and governs its processing of end-user data on our behalf. See the Lovable Data Processing Agreement and the current provider list linked above. Applicable contractual terms and actual processing determine the safeguards. Contact privacy@weekbuffer.com for current safeguards and retention information.
Owner: Nikali Ltd.. New vendors, changed data categories, locations or onward processors require a recorded privacy/security review before activation. Material notice changes must be versioned and communicated as applicable. Microsoft is dormant; no advertising or analytics vendor is active. Contractual coverage, technical configuration and actual provider safeguards are reviewed separately.