Lylu engages the third-party subprocessors below to provide the Service. Each processes personal data on our behalf under contractual data-protection obligations. Our handling of personal data is described in our Privacy Policy.
| Subprocessor | Purpose | Data categories | Location |
|---|---|---|---|
| Vercel | Application hosting & edge network | All data in transit; logs | USA / global |
| Supabase | Primary database & storage | Account, billing metadata, lead data | USA |
| Clerk | Authentication & user management | Name, email, auth credentials | USA |
| Stripe | Payment & subscription processing | Billing contact, payment metadata | USA / global |
| Apify | Google Maps business scraping | Business listing data (lead data) | USA / EU |
| Bouncer | Email verification | Business email addresses | EU |
| Instantly.ai | Outbound email sending & inbox | Recipient business contacts, message content | USA |
| OpenAI | AI generation of outreach drafts | Prompt content (may include lead context) | USA |
| Anthropic | AI generation of outreach drafts | Prompt content (may include lead context) | USA |
| Resend | Transactional email delivery | Recipient email, message content | USA |
| Google (Gmail / Sheets APIs) | Inbox connection & data export | Customer-authorized mailbox / sheet data | USA / global |
We may update this list as our subprocessors change. To be notified of changes to this list, or with any questions, contact support@lylu.ai.