Sub-processors
Lyfos uses the following sub-processors. Each is bound by a data processing addendum and (where applicable) Standard Contractual Clauses. Last updated 28 May 2026.
| Provider | Purpose | Location | Personal data handled |
|---|---|---|---|
| Supabase | Auth, Postgres, Storage, Edge Functions | Mumbai (ap-south-1) | Email, hashed password, encrypted vault blobs, billing metadata, push tokens |
| Razorpay | Subscription payments + invoicing | India | Name, address, GSTIN, payment instrument metadata |
| Resend | Transactional email | United States | Email address, alert content (no vault data) |
| MSG91 | SMS for release alerts | India | Phone number, short alert text |
| Meta Platforms | WhatsApp Cloud API for release alerts | Ireland / Singapore | Phone number, alert template content |
| Expo | Push notification delivery | United States | Opaque push token |
| Apple | iOS push delivery (APNs) | United States | Opaque push token |
| Android push delivery (FCM) | United States | Opaque push token | |
| Vercel | Static hosting for the web app | Global edge | IP address + request metadata only |
We give existing customers 30 days notice before adding a new sub-processor. Subscribe to updates at legal@lyfos.signorvale.com.