Legal
Sub-processors
Thrivio uses the third-party providers below to deliver the service. Optional integrations (Shopify, WooCommerce, CallTrackingMetrics) only process data if you explicitly connect them. Analytics providers only load with your consent — see our Cookie policy.
| Provider | Purpose | Region | Data categories |
|---|---|---|---|
| Lovable Cloud (Supabase) | Application hosting, database, authentication, storage. | EU / US | All account and workspace data. |
| Lovable AI Gateway (Google Gemini) | AI inference for audits, analysis, and content generation. | US | Prompts and content you submit for AI processing. Not used to train the underlying model. |
| Firecrawl | Fetches and parses public web pages for audits and competitor snapshots. | US | URLs you submit for crawling. |
| Microsoft Clarity | Product analytics and session replay (loaded only with consent). | US | Anonymised interaction events, page URLs, viewport. |
| Google Analytics 4 | Aggregate usage analytics (loaded only with consent). | US | Pseudonymous event data, referrer, device metadata. |
| Shopify | Optional integration — reads store data when you connect a Shopify workspace. | US / EU | Product, order, and customer metadata you authorise. |
| WooCommerce | Optional integration — reads store data when you connect a WooCommerce site. | Depends on your host. | Product, order, and customer metadata you authorise. |
| CallTrackingMetrics | Optional integration — ingests call transcripts and metadata. | US | Call recordings, transcripts, caller metadata. |
We will give reasonable prior notice of new sub-processors so you can object.