Sub-processors
Last updated: September 23, 2026. We give at least 30 days' notice of any change via in-app notification and email.
Next Day Sales (Four49 Media LLC) engages the following sub-processors to deliver the Service. Each is bound by a data processing agreement with terms no less protective than our customer DPA.
| Sub-processor | Purpose | Location | Transfer mechanism | DPA |
|---|---|---|---|---|
| Supabase (Powered by AWS) | Database hosting, authentication, file storage, edge function runtime | United States | EU SCCs + UK IDTA | View |
| Stripe, Inc. | Payment processing (Merchant of Record for subscriptions); customer billing data | United States | EU SCCs + UK IDTA | View |
| Lovable AI Gateway (Google, OpenAI models) | AI inference for content generation and guided search | United States | EU SCCs | View |
| Mailgun Technologies, Inc. | Transactional email delivery (lead notifications, auto-replies, account emails) | United States | EU SCCs + UK IDTA | View |
| Cloudflare, Inc. | CDN, DDoS protection, and edge caching for hosted sites and widgets | United States (global edge) | EU SCCs + UK IDTA | View |
| Firecrawl (Mendable, Inc.) | Reads the brand's public website pages to build its answer index. No visitor data is sent. | United States | EU SCCs | View |
| Perplexity AI, Inc. (via Lovable AI Gateway) | Research and fact-checking for drafted marketing content. Receives only public site content and keywords; no visitor or lead data. | United States | EU SCCs | View |
| Parallel Web Systems, Inc. (via Lovable connector) | Web research for drafted marketing content. Receives only public site content and keywords; no visitor or lead data. | United States | EU SCCs | View |
| DataForSEO | Keyword and search-result data. Receives only keywords and the brand's domain; no visitor or lead data. | European Union (Ukraine-operated, EU entity) | N/A / EU SCCs | View |
To object to a sub-processor on reasonable data-protection grounds, contact privacy@nextdaysales.com.