Legal
Subprocessors
These providers process data on our behalf so that Searva can run. Each one is bound by a data processing agreement.
Last updated 6 September 2026 · Version 2026-09-06
Which subprocessors does Searva use?
Searva uses the providers listed below and no others. Together they cover hosting and the application database, authentication, the AI models that write proposed changes, product analytics, and payment handling. Application data and product analytics are hosted in the EU. Every provider is bound by a data processing agreement, processes data only on our documented instructions, and is listed here with its purpose, the categories of data it handles and where it operates.
Current list
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Lovable (hosting & application platform) | Hosting the Searva application and serving it to users | Account data, request logs | EU / US |
| Supabase (database, authentication, storage) | Storing account data, website data, scans and reports | Account data, website and scan data, integration tokens | EU |
| Google (Search Console API, Analytics Data API) | Reading search and traffic statistics for websites you connect | Google account email, property identifiers, aggregated statistics | EU / US |
| AI model providers via the Lovable AI gateway | Generating optimization proposals from page content | Public page content of the websites you connect | EU / US |
| PostHog (product analytics, EU cloud) | Measuring aggregate product usage — only when you accept analytics cookies | Account identifier, pages visited, feature events, device and browser type | EU (Frankfurt) |
| Paddle (payments) — once billing is switched on | Processing subscription payments and invoicing | Billing name, email, payment and invoice data | EU / US |
Who is the data controller?
Neurosoft, org. nr 971218-4150, Noraskogsgatan 12B, 713 32 Nora, Örebro län, Sweden, is the controller for personal data processed through Searva. The purposes, legal grounds, retention periods and your rights under the GDPR are set out in the Privacy Policy. You can export or delete your account data at any time from your privacy settings.
Do you need a data processing agreement?
Where Neurosoft acts as a processor for data you upload or connect, the processing terms in section 6 of the Terms of Service form the data processing agreement between us, and this page is the agreed list of subprocessors. Email philip@neurosoft.se if you need a separate signed copy.
Frequently asked questions
- What is a subprocessor?
- A subprocessor is a service provider that processes personal data on our behalf so that Searva can run — for example hosting, databases, analytics or payment handling. Each one is bound by a data processing agreement with us.
- Where is customer data stored?
- Application data and the database are hosted in the EU, and product analytics are hosted in the EU. Each provider's location is listed in the table on this page.
- How will I be told about a new subprocessor?
- We update this page before adding a new subprocessor. Email philip@neurosoft.se to be notified of changes or to object to a new provider.
- Who is the data controller?
- Neurosoft, org. nr 971218-4150, is the controller for Searva. The full details and your GDPR rights are set out in the Privacy Policy.
Changes
We update this page before adding a new subprocessor. Email philip@neurosoft.se if you would like to be notified of changes, or to object to a new provider.
The processing terms themselves are in section 6 of the Terms of Service.