Draft for legal review
Subprocessors
Only providers confirmed to be in use are listed. Processing locations are being confirmed with each provider and will be documented before public launch.
Effective date: To be confirmed before public launch
Last updated: 28 July 2026
Version: Draft 0.1
Status: Draft for legal review
Operated by: Mohammad Asif, trading as PublicVoiceShield, United Kingdom
This document is provided for information only. It is not legal advice and no guarantee of compliance is given. Designed to support UK GDPR compliance, subject to organisational use, configuration and legal review.
Lovable / Lovable Cloud
Purpose: Application hosting, managed database, authentication and transactional authentication email delivery.
Type of data: Account details, organisation records, submitted posts and threads, AI analyses, human decisions, authentication and security logs.
Processing location: Not confirmed — to be documented from the provider before launch.
Provider terms / DPA: [Provider terms / DPA link — TO BE CONFIRMED]
Status: Active
OpenAI
Purpose: Server-side analysis of submitted posts and discussion threads to produce categories, scores and suggested replies.
Type of data: The original post text and pasted discussion text submitted for analysis, plus the selected platform and tone. No account credentials are sent.
Processing location: Not confirmed — to be documented from the provider before launch.
Provider terms / DPA: [Provider terms / DPA link — TO BE CONFIRMED]
Status: Active
Changes
New subprocessors will be added to this page. Questions or objections: [Privacy contact email — TO BE CONFIRMED].