Lumen AILumen AI
Subprocessors
Last updated: November 4, 2026
Lumen AI uses the following providers to deliver the service. Those marked optional only process data when the account enables that feature.
| Provider | Function | Data processed | Country / region |
|---|---|---|---|
| Supabase | Database, authentication and file storage (e.g. white-label logos) | Account and profile data, companies, prompts, results, metrics, integration connections | US (us-east-2, Ohio, on AWS) |
| Vercel | Hosting, application functions, web analytics (Analytics and Speed Insights) | Site traffic (IP, browser, approximate country) and content in transit | US (functions in cle1, Cleveland) |
| Sign-in (OAuth), Gemini, Search Console and GA4 (optional, read-only), Places | Profile name, email and photo; prompt text sent to Gemini; Search Console/GA4 data for accounts that connect them; place searches | United States and other regions where Google operates | |
| OpenAI | Running prompts on ChatGPT and analyzing the answers | Prompt text (brand, competitors, city) and the answers obtained | United States |
| DataForSEO | ChatGPT and Gemini answers and Google AI Overviews read from the web, and keyword research | Prompt text, query country and domain | Estonia (DataForSEO OÜ); uses cloud infrastructure in the United States and Germany |
| Perplexity (optional) | Running prompts on Perplexity, only on accounts that enable it | Prompt text and answers | United States |
| Reddit (optional) | Searching public threads for the Reddit opportunities action (read-only) | Search queries derived from the brand or topic; no personal user data is sent | US |
| Resend | Sending transactional and lifecycle email from mail.getlumen.lat | Recipient email and name, message content, delivery and bounce events | United States |
| ImprovMX | Forwarding inbound email for hola@getlumen.lat | Emails you send us and their content | United States and European Union |
| MercadoPago | Subscription billing | Email, plan, payment status and transaction ID; card data is processed by MercadoPago | Argentina; part of its infrastructure may be in other countries |
| Stytch (optional) | OAuth authorization for the read-only MCP server, only on accounts that enable it | User identifier and permissions granted to connected apps | United States |
| Google Ads | Advertising campaign conversion measurement (gtag.js tag) | Cookie identifiers and conversion events (signup, checker use). No email or domain is sent | Global (as determined by Google) |
| Microsoft Bing and IndexNow (optional) | Notifying URLs to search engines, when the user connects the integration | Bing Webmaster API key and customer URLs | United States (Microsoft) |
Notes
The location shown is that of the provider or of the region we use; AI providers process in the regions they determine.
Changes to this list
We will notify agencies by email 30 days in advance before adding or replacing a subprocessor that processes customer data, under the DPA, and we will update this page.
Contact
Subprocessor inquiries: contact@getlumen.lat.