Sub-processors
The providers that process data on our behalf to run Dinebase.
Version 1.2 · Last updated 2026-09-15
We use the providers below to operate Dinebase. Each is bound by a data processing agreement and may only process data to deliver the service. We give at least 30 days' notice before adding or replacing a sub-processor.
Current sub-processors
| Provider | Purpose | Data processed | Processing location, as published by the provider |
|---|---|---|---|
| Lovable Cloud (application platform) | Application hosting, managed database, file storage, authentication | All account, workspace and reservation data | Hosting region as configured by the platform provider, with global edge delivery; transfers outside the EU/EEA rely on Standard Contractual Clauses or another valid transfer mechanism |
| Resend | Transactional email delivery | Recipient name and email address, message content, delivery status | Primary storage and processing in the United States, with EU sending regions available; transfers rely on Standard Contractual Clauses or another valid transfer mechanism |
| 46elks | SMS delivery, where the restaurant enables SMS | Recipient phone number, message content, delivery status | Sweden (EU), as published by the provider |
| Stripe | Subscription billing, and card holds where a restaurant enables them | Billing contact, card details (held by Stripe, never by us), payment and payout status | Global processing, including in the United States; transfers rely on Standard Contractual Clauses or another valid transfer mechanism |
| Google Maps Platform | Address autocomplete and map display on booking pages | Search text entered by a restaurant user, and technical data when a map loads | Global processing, including in the United States; transfers rely on Standard Contractual Clauses or another valid transfer mechanism |
| Lovable AI Gateway | Optional assistant features inside the application | Only the text a user submits to the assistant | Processing region depends on the model provider routed to, which may be outside the EU/EEA; transfers rely on Standard Contractual Clauses or another valid transfer mechanism |
We also use services that support the product but do not receive guest or account personal data: Open-Meteo for weather forecasts, and Ticketmaster and public event calendars for local event information. They receive a location or a search area only. Because they do not process personal data on our behalf, they are not sub-processors.
Processing locations are stated as published by each provider. Where a provider may process data outside the EU/EEA, transfers rely on the European Commission's Standard Contractual Clauses and the provider's own supplementary measures.
Changes
Restaurant customers can object to a new sub-processor on reasonable data protection grounds within the notice period, as set out in section 4 of the Data Processing Agreement. Write to legal@dinebase.se.
Dinebase AB · Org. no. 559601-9116 · Gröndalsvägen 20, 117 66 Stockholm, Sweden
- Legal, privacy and security
- legal@dinebase.se
- Support and billing
- support@dinebase.se
These are information pages. Acceptance of the terms happens through account creation and use in the application, not on this website.