These are the service providers that may process personal data on our behalf when you use Uncorked Together. Each one is bound by a written data processing agreement that limits them to processing data on our instructions, and each provides Standard Contractual Clauses for transfers out of the EU/UK.
Current subprocessors
Lovable (app hosting & delivery)
Hosts and serves the Uncorked Together web app.
Data: Standard request logs (IP address, device, pages viewed).
Processed in United States
Supabase (database, authentication & file storage)
Stores accounts, taste profiles, wine submissions, reviews, and uploaded photos.
Data: Email, display name, taste quiz answers, wine activity, uploaded label photos.
Processed in United States
Google (Gemini AI, via the Lovable AI Gateway)
Reads wine label photos you scan and generates plain-English tasting notes.
Data: The label photo you submit. Photos are sent for processing only; no account identifiers are attached.
Processed in United States
Resend (transactional email delivery)
Sends account, security, and moderation emails.
Data: Email address and message contents.
Processed in United States
Google Workspace (business email)
Receives and stores support and privacy correspondence.
Data: Anything you include in an email to us.
Processed in United States
Changes to this list
We update this page when we add or remove a subprocessor. Business customers and partner wineries with a signed Data Processing Agreement can email us to be notified of changes in advance.
Questions
Email privacy@uncorkedtogether.com.