Finora← Back to home
Finora · Legal centre

Providers & Subprocessors

The services verified in Finora’s website, dashboard, AI and payment flow.

Last updated · 26 September 2026

How to read this list

Finora uses Framer for its marketing website and contact form, Lovable Cloud for the application and related services, Google Gmail for contact enquiries, and Paddle for checkout purchases. The roles differ: a provider handling merchant records on instructions is not the same as a company handling its own billing or account administration.

The provider Trust Centers below publish their broader downstream lists and locations. Those lists cover their services generally; they do not mean every listed provider receives every Finora customer’s information. A customer-specific processing arrangement must cover the features and personal data that customer actually uses.

Framer — marketing website

Framer B.V. hosts the marketing website and provides its built-in site analytics. Website requests and the public contact form are handled within that service. Contact submissions are delivered by email to Finora’s private service inbox. Framer’s processor arrangements and infrastructure providers are described in its published documentation.

Lovable — application and account services

Lovable Labs Incorporated provides Lovable Cloud for the hosted application, database, authentication and related backend functions. The verified checkout flow also uses Lovable’s email infrastructure for welcome and authentication messages. Relevant information includes account identifiers, purchase email and status, workspace records and service communications.

This project’s database location is Europe (Zurich, Switzerland). Application delivery, email and AI processing may involve other locations. Lovable Cloud uses Supabase’s open-source foundation; this does not establish a separate direct hosting contract between Finora and Supabase. Downstream infrastructure providers and transfer arrangements are governed by the applicable provider agreements.

Lovable’s published downstream list includes Google Cloud Platform, AWS, Cloudflare and Supabase for infrastructure or account services, Mailgun for transactional email, and OpenAI and OpenRouter for AI-related processing. Their listed locations include Europe, the United States and global infrastructure. The current Finora NORA route selects an OpenAI model; model selection does not establish the location of every gateway or monitoring operation.

AI processing through Lovable

Finora routes NORA requests through Lovable’s AI gateway to its configured model provider. The reviewed NORA configuration uses an OpenAI model. Prompts and relevant conversation history are transmitted to produce answers.

AI services are used only when the feature is requested; the provider and retention terms applicable to each feature must be included in the customer’s processing arrangement. Browser session storage and an API non-storage setting do not establish zero retention throughout the provider chain.

Google Gmail — contact enquiries

Finora uses Gmail to receive contact-form submissions and manage replies. This includes the submitted name, reply email, subject, topic and message, together with email delivery information. Google’s Privacy Policy describes its handling of information in its services.

Please send only information needed for the request. Do not include passwords, login links or full payment-card details. The receiving inbox address is not published on this website.

Paddle — Merchant of Record

The Paddle entity identified by the applicable Buyer Terms acts as Merchant of Record for checkout purchases. Paddle handles payment processing, billing, tax, receipts and related fraud and buyer-support activities under its own responsibilities. Finora receives information needed to activate and manage the purchased subscription.

Paddle is not described here as a processor acting solely on Finora’s instructions for all purchase activities.

Updates and enquiries

Only integrations that are actually enabled participate in delivering the service. New providers and changes to instructed processing are assessed and notified in accordance with the applicable processing agreement. Contact details are in the Legal Notice.