Legal
Subprocessors.
These are the third parties that may process personal data on our behalf when you use Architectt. Each is bound by written terms, and business customers are notified before a new one starts processing. This list is referenced by the Data Processing Agreement and the Privacy Policy.
- Last updated
- 20 September 2026
- Version
- 2.0
- Applies to
- architectt.com and all Architectt subdomains
In plain language
- —Your database, files and accounts live in the EU.
- —AI providers receive only what is needed to produce the output you asked for, and may not train on it.
- —Social platforms receive our own editorial posts — never member project data.
- —Analytics runs only if you consent.
This summary is for orientation only. The numbered sections below are the binding text.
01Platform and infrastructure
| Provider | Purpose | Data involved | Location & safeguard |
|---|---|---|---|
| Lovable (Lovable Labs Incorporated) | Application hosting, deployment, managed email delivery and AI request gateway | Account data, project data, email addresses and message content, AI prompts and outputs | EU / USA — SCCs |
| Supabase | Managed database, authentication and file storage | All account, project, message and file data | EU (Frankfurt) — primary data residence |
| Cloudflare, Inc. | Edge delivery, DNS, TLS termination and denial-of-service protection | Request metadata, IP addresses, page content in transit | Global edge / USA — SCCs |
02Payments and payouts
| Provider | Purpose | Data involved | Location & safeguard |
|---|---|---|---|
| Stripe, Inc. / Stripe Payments Europe | Card payments, subscriptions, invoicing, reviewer payouts and tax calculation | Name, email, billing address, VAT number, payment and payout records | EU / USA — SCCs; independent controller for fraud and compliance |
03AI generation and assessment
| Provider | Purpose | Data involved | Location & safeguard |
|---|---|---|---|
| OpenAI | Text and image generation for editorial and Blueprint outputs | Prompts and reference material submitted for generation | USA — SCCs; no training on submitted data |
| Google (Gemini models) | Secondary image generation engine and text generation | Prompts and reference material submitted for generation | USA / EU — SCCs; no training on submitted data |
| Anthropic | Text generation and editorial quality assessment | Prompts, drafts and assessment inputs | USA — SCCs; no training on submitted data |
| Perplexity | Source research for editorial fact-checking | Research queries only — no member project data | USA — SCCs |
04Publishing and measurement
| Provider | Purpose | Data involved | Location & safeguard |
|---|---|---|---|
| Meta Platforms (Instagram) | Publishing Architectt's own editorial posts and stories | Our own published images, captions and post metadata | USA / EU — SCCs; no member data sent |
| LinkedIn (Microsoft) | Publishing Architectt's own editorial posts | Our own published content and post metadata | USA / EU — SCCs; no member data sent |
| Google Analytics 4 and Search Console | Aggregate website measurement and search performance | Consented, pseudonymised web analytics events; aggregate search statistics | USA / EU — SCCs; loaded only after analytics consent |
05Changes and objections
We update this page before a new subprocessor begins processing and email business account holders at least 14 days ahead. If you reasonably object on data-protection grounds, write to hello@architectt.com; the remedy is set out in the Data Processing Agreement.
Controller: Architectt, Bredgade 45 B, 1260 København K, Kingdom of Denmark, VAT 45438031.