Sub-Processor List
Third-Party Data Handlers
Effective: February 1, 2025Last updated: January 2025
About Sub-Processors
This page lists the third-party service providers (sub-processors) that process personal data on behalf of ZINFI.AI. This list is referenced in our Data Processing Agreement and Privacy Policy.
| Sub-Processor | Purpose | Location | Data Types |
|---|---|---|---|
| Supabase (AWS) | Database hosting, authentication, file storage | United States | Account data, user content, authentication tokens |
| Vercel | Frontend hosting and edge delivery | United States | Static assets, session data |
| Lovable (GPT Engineer) | AI-assisted development platform | European Union | Application code and configuration |
| OpenAI | AI content generation and search | United States | Query content for AI processing |
| Plausible Analytics | Privacy-focused website analytics | European Union | Anonymized usage statistics |
Change Notifications
We will notify customers of any changes to this list at least 30 days before a new sub-processor begins processing personal data. Enterprise customers with a Data Processing Agreement may object to new sub-processors within this notification period.
Data Transfer Mechanisms
For transfers outside the EEA, we rely on:
- EU-U.S. Data Privacy Framework (where applicable)
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
Questions
For questions about our sub-processors or data processing practices, contact [email protected].