Legal Centre
Third parties that process your data
Subprocessors
We use the providers below to deliver Buried Beneath. Each is bound by a data-processing agreement under UK GDPR Article 28. Transfers outside the UK rely on UK IDTA or EU Standard Contractual Clauses with appropriate safeguards.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU (Ireland) |
| Stripe Payments Europe | Card payments, subscriptions, Connect payouts | EU + UK |
| Cloudflare | Edge hosting, DDoS protection, DNS | Global edge |
| Firebase Cloud Messaging | Push notifications | US (Google) |
| Resend | Transactional email | EU/US |
| Lovable AI Gateway | AI features (text, image) | EU/US |
We notify users of material changes to this list before they take effect. Contact us to object via the in-app support channel.