Subprocessor Inventory
Last updated: 30 October 2026
MimmoBook relies on a small number of carefully selected subprocessors to deliver the service. Each one is bound by a written data processing agreement that requires the same level of protection we owe to you under GDPR. Transfers outside the European Economic Area are covered by the European Commission Standard Contractual Clauses (SCCs).
| Subprocessor | Purpose | Data categories | Region |
|---|---|---|---|
| Supabase (via Lovable Cloud) | Database, authentication, file storage, edge functions | All application data, account credentials, uploaded files | European Union (Frankfurt) |
| Resend | Transactional and notification email delivery | Recipient email, subject, message body | European Union and United States (SCCs in place) |
| Stripe | Subscription billing and payments | Billing name, address, payment method metadata (no card data ever reaches MimmoBook) | European Union and United States (SCCs in place) |
| Google (Search Console, Analytics 4, Tag Manager) | Aggregated traffic analytics and SEO | Anonymised page views, device, country (loaded only after analytics consent) | European Union and United States (SCCs in place) |
| Lovable AI Gateway | Optional AI features inside the product | Only the prompts the user explicitly submits | European Union and United States |
| Lovable (hosting and CDN) | Static site hosting and CDN delivery | HTTP request metadata | Global edge network |
Notifications of changes
We notify customers by email at least 30 days before adding or replacing a subprocessor that handles personal data. If you want to receive these notifications, email our privacy contact and ask to be added to the subprocessor change list. The address is hidden from automated crawlers and revealed on click, so please use the button rather than guessing it.