Data Processing Addendum

Overview

This addendum describes how zmail.foo processes personal data on behalf of its users. It supplements our Privacy Policy.

Subprocessors

• Lovable — application hosting and platform.
• Lovable Cloud (Supabase-backed) — authentication, database (Postgres), storage, and realtime messaging.
• Lovable Emails — managed transactional and authentication email delivery via notify.zmail.foo.

We update this list before adding new subprocessors that materially affect user data.

Security measures

• Encryption in transit (TLS) for all client and server traffic.
• Row-level security policies restricting access to authorized users.
• Private storage buckets with signed, short-lived URLs for attachments and verification documents.
• Administrative access limited to designated staff.

Data location

Data is hosted in the regions selected by our platform providers. Contact us if regional details are required for compliance.

Data subject requests

Requests to access, correct, export, or delete personal data can be sent to the address listed in Settings.