Pre-launch draft · November 13, 2026
Service providers
This operational inventory distinguishes installed services from planned commercial billing. It is not a verified contractual subprocessor register; legal entities, processing locations and agreements need confirmation before launch.
Lovable
Hosting, authentication, project database and file storage; cookie-free visitor analytics and error reporting; configured transactional email services; and the optional server-side anomaly-review AI function. Depending on the service, data includes account/contact details, projects, files, message contents, submitted roof data and anonymous visit/error information. Privacy policy.
Maps JavaScript, Places address suggestions, Solar building information and roof-mask requests, and authorized Static Maps report photos. Address/coordinate requests, connection information, imagery and roof data are involved. Google OAuth operates when chosen for sign-in. Google Fonts loads the website fonts. Google may act under its own controller/service terms rather than solely as our processor. Privacy policy.
Stripe — payment preparation
Test payment products and administrator financial/refund tools are configured. Commercial subscription checkout is not yet implemented. When enabled, Stripe will process payment and billing information; raw card numbers should remain with Stripe’s hosted payment flow. Verify applicable PCI responsibilities, agreements and tax configuration before launch. Privacy policy.
Not currently installed
No CRM integration, SMS notification service, advertising pixel, retargeting tag, or separate third-party behavioral analytics tool was found in the current app. No SOC 2 or ISO 27001 certification, enterprise SLA, or employee permission-management offering is claimed. New vendors and data uses require a revised disclosure and any necessary consent/contract review.