Sub-processors
List version 1.2 · updated 27 August 2026
These are the providers that may process personal data on behalf of Daryl Edwards trading as Buildflow. Providers marked optional only process data if you switch that feature or integration on — that includes the AI gateway, which receives nothing unless somebody uses an AI feature. Providers marked planned are listed for transparency only: the connection is not built, cannot be switched on, and processes nothing today. We update this page and increase the version number before adding a new sub-processor. Email privacy@buildflow.builders to be told in writing when it changes. Our data processing agreement is available to download.
| Provider | Purpose | Processing location | Status |
|---|---|---|---|
| Supabase (managed database, authentication and file storage) | Hosts the application database, sign-in records and uploaded documents and photos. | United Kingdom / European Union region selected for this workspace | Always used |
| Cloudflare | Serves the application, terminates TLS and provides edge security and request handling. | Global edge network — requests are handled at the edge location nearest the visitor, so processing is not limited to one country | Always used |
| Stripe | Takes subscription payments and stores the billing contact and invoices where billing is in use. Card numbers are handled by Stripe, not by us. If your workspace has no paid subscription or payment feature switched on, Stripe processes nothing for you. | European Union / United States | Optional — only if you use it |
| Lovable AI Gateway (routing to OpenAI and Google model providers) | Processes only the specific content you submit to an AI feature — a drawing, quotation or enquiry email — to return an analysis. If nobody in your workspace uses an AI feature, no content reaches it. | United States | Optional — only if you use it |
| Google / Google Workspace (Gmail, Calendar and Drive) | Only where your workspace connects it. Gmail enquiry scanning and Gmail-sent transactional email are in pilot with workspaces we support directly; Calendar sync is available once configured; Drive document sync requires setup with us. Buildflow sends outbound email through the connected Google account, so a workspace with no Google connection sends no email through this route. | Global Google infrastructure, including the United States | Optional — only if you use it |
| Twilio | Sends SMS escalation alerts where your workspace enables them. | United States | Optional — only if you use it |
| Xero / Sage | Would exchange invoice and payment records with your accounting system. This connection is not built and cannot be switched on today, so neither provider processes any Buildflow data at present. We will raise the list version before it does. | Not applicable — no data is processed today | Planned — not built, processes nothing today |
Transfers outside the UK/EEA rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses with the relevant provider.