Sub-processors
Last updated 29 August 2026.
These are the providers that process personal data on behalf of DinnerBoost when a restaurant uses the platform, together with the provider used for our own subscription billing. Each provider processes data under its own current terms; where a provider processes data outside the EEA, the applicable transfer safeguards are the ones set out in that provider's current terms, which are linked below. The only processing location we state ourselves is the Supabase project region (Frankfurt, eu-central-1). We notify restaurants by email at least 30 days before a new sub-processor starts processing their data, and a restaurant may object during that period.
| Provider | Purpose | Data | Processing location & transfers |
|---|---|---|---|
| Supabase | Database, authentication, file storage and realtime | Menu content, orders, reservations, staff accounts, menu images | Frankfurt, Germany (eu-central-1) — the region this project is provisioned in · provider policy |
| Lovable | Application hosting and the AI gateway | Requests to the application; menu text and images submitted for extraction or translation | Processing locations and transfer safeguards depend on the provider's current terms · provider policy |
| Google (Gemini, via the Lovable AI gateway) | Menu extraction, translation, insights and the website assistant | Menu text and images, aggregated operational metrics, assistant messages | Processing locations and transfer safeguards depend on the provider's current terms · provider policy |
| Stripe (Stripe group companies) | Subscription checkout, recurring billing, invoices, payment-method management, fraud prevention and financial compliance | Business contact and billing details, VAT id, subscription and invoice data, payment-method and transaction data, device/IP data collected by Stripe | Processing locations and transfer safeguards depend on the provider's current terms · provider policy |
| Resend | Transactional email (invites, password resets, daily reports) | Staff email addresses and message content | Processing locations and transfer safeguards depend on the provider's current terms · provider policy |
Stripe processes the DinnerBoost subscription paid by the restaurant to „ПИМАКС“ ООД. DinnerBoost does not process the bill your guests pay and is not your POS or payment acquirer. See the Stripe privacy policy and the Stripe data processing agreement.
Data processing agreement · Privacy notice · Terms of service