Last updated: July 6, 2026
KaiTask engages the following sub-processors to deliver the service. Each is bound by a data-processing agreement and only processes Personal Data on our documented instructions.
| Provider | Purpose | Data categories | Region |
|---|---|---|---|
| Lovable Cloud | Application hosting, database, authentication, file storage. | All Customer Content and account data. | EU (Frankfurt) with global CDN edge |
| Resend | Transactional email (invites, digests, reminders, weekly rollups). | Recipient email, subject, and message body. | EU / US (SCCs) |
| n8n (self-hosted) | Workflow automation for scheduled reminders and vendor-invite flows. | Task metadata and recipient email addresses. | EU |
| Optional Single Sign-On (OAuth 2.0). | Email, name, profile picture URL. | EU / US (SCCs) | |
| Cloudflare | CDN, DDoS protection, edge runtime. | HTTP request metadata (IP, path, headers). | Global edge (EU-preferred) |
We will notify Customers by email and by updating this page at least 14 days before adding or replacing a sub-processor. Customers may object under the terms of the DPA.
Questions or objections: privacy@kaitask.app.