Lovable
Provider privacy information- Purpose
- Application platform, build/deployment infrastructure and production hosting/runtime.
- Typical data
- Application and service data required to operate the deployed Billflow service.
Data protection
Billflow subprocessors
These are the core third-party service providers currently used to operate Billflow where they may process personal data in connection with the service.
Last updated 16 August 2026
Supabase
Provider privacy information- Purpose
- Cloud database and authentication infrastructure.
- Typical data
- Business accounts, customers, invoices, payment-status records, settings and configured AI/admin records.
- Purpose
- Billflow subscription billing and connected online invoice-payment processing.
- Typical data
- Account, billing and payment information required for the Stripe services used by Billflow and connected businesses.
- Purpose
- Transactional invoice/reminder email and inbound email processing when reply receiving is configured.
- Typical data
- Email addresses, email metadata and message content required to send or receive the configured communication.
Why these providers are listed
A provider is listed here when it forms part of the operational service and may process personal data for Billflow or for a Billflow customer. Developer tooling that does not need production customer records is not automatically treated as a production-data subprocessor.
Changes to subprocessors
Billflow may update this list as the product develops. Before introducing a provider that will materially process customer personal data, Billflow reviews the purpose, data required, security/privacy information, contractual terms and relevant international-transfer safeguards.
Customers with a contractual notice requirement can contact hello@billflowinvoicing.com to discuss subprocessor-change notifications.
International processing
Some providers may process data outside the UK. Where UK data-protection rules require a restricted-transfer mechanism, Billflow assesses the provider terms and the applicable transfer safeguard before relying on that processing for production customer data.