Subprocessors

TumiFlow uses a limited set of providers to operate the service and enables customers to connect providers they independently choose. This page distinguishes TumiFlow infrastructure subprocessors from customer-selected integrations. The exact data processed depends on the features a customer uses.

Lovable / Lovable Cloud

Application hosting, managed backend services, authentication infrastructure, database, storage, and related platform operations. Data may include account data, workspace records, application content, files, technical logs, and service configuration needed to operate TumiFlow.

Stripe

TumiFlow subscription checkout, card payment processing, recurring billing, payment status, and related billing records. Stripe handles card details directly; TumiFlow receives payment and subscription references and status information.

Google

Google OAuth, Gmail, and related Google services when a customer voluntarily connects an account. Data may include connection authorization, mailbox identifiers, message and thread information, sender/recipient details, timestamps, and content required for authorized Inbox features.

Google is used only when the customer enables the relevant integration. Disconnecting stops new provider access; previously synchronized TumiFlow records may remain under applicable retention rules.

The following providers are not bundled AI services supplied by TumiFlow. A workspace owner independently chooses a provider, supplies that workspace's credential, selects a model, and instructs TumiFlow to send content required for an AI-assisted request. Provider usage fees are paid under the customer's provider account.

OpenAI

Customer-selected AI processing for requested TumiFlow AI-assisted features.

Google Gemini

Customer-selected AI processing for requested TumiFlow AI-assisted features.

Anthropic

Customer-selected AI processing for requested TumiFlow AI-assisted features.

TumiFlow may update this page before adding or replacing a provider that processes customer personal data, with notice where required by contract or applicable law. A provider is not necessarily used for every customer. Questions about subprocessors may be sent to tumiflow.support@gmail.com.