Subprocessors
Last updated: 4 May 2026
This page lists the third-party service providers ("subprocessors") that Importify Limited ("Lilie") uses to operate the Lilie service. Each subprocessor has access only to the data necessary for their function and is contractually obligated to protect your data.
For details on how we handle your data overall, see our Privacy Policy.
Current subprocessors
| Provider | Purpose | Data processed | Location | Website |
|---|---|---|---|---|
| Google LLC | Google Sign-In, Google Takeout (user-initiated export) | Account email, Sign-In session | USA | google.com |
| OpenAI, L.L.C. | LLM inference for draft generation, voice extraction, knowledge base analysis | Voice profiles, knowledge base chunks, draft inputs | USA | openai.com |
| Supabase Inc. | Authentication, database hosting, file storage | Account data, Sign-In session tokens (encrypted), application data, knowledge base chunks and embeddings | USA (AWS us-west-1, Oregon) | supabase.com |
| Cloudways (DigitalOcean, LLC) | Application hosting and infrastructure | Application data in transit | USA | cloudways.com |
What is a subprocessor?
A subprocessor is a third-party company we use to help operate Lilie. Subprocessors have access only to the specific data they need to perform their function. We have data processing agreements with each subprocessor that require them to:
- Use your data only to provide their service to us
- Implement appropriate technical and organizational security measures
- Not transfer or sell your data to others
- Comply with applicable data protection laws
What we don't use
For transparency, we want to be explicit about what is not in our subprocessor stack:
- No third-party analytics providers in production (Google Analytics, Mixpanel, Amplitude, Plausible, etc.)
- No error tracking or behavioral telemetry (Sentry, Datadog, Bugsnag, Rollbar, FullStory, LogRocket, Hotjar, etc.)
- No advertising networks (Google Ads, Meta Ads, etc.)
- No data brokers of any kind
- No CRM or marketing automation tools that ingest user data (HubSpot, Salesforce, Mailchimp, etc.)
The PostHog SDK is bundled in our application but disabled in production. If we enable it in the future, this page and our Privacy Policy will be updated.
Cross-border data transfers
Importify Limited is incorporated in Hong Kong. All our subprocessors are based in or process data in the United States. If you access Lilie from the European Economic Area, the United Kingdom, or other regions with data protection laws:
- Your data is transferred to the United States for processing and storage
- We rely on Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable
- Each of our subprocessors maintains their own SCCs and DPA arrangements with us
You can request a copy of our SCCs by contacting support@lilie.app.
Notification of changes
We may add or change subprocessors as Lilie evolves. When we do:
- This page is updated to reflect the current list
- The "Last updated" date at the top of this page is updated
- For material changes (e.g. adding a new category of subprocessor), we will notify users by email at least 30 days before the change takes effect, where reasonably possible
If you have specific concerns about a new subprocessor, you can object by contacting support@lilie.app before the change takes effect. If we cannot reasonably accommodate your objection, you may terminate your use of the Service.
Contact
For questions about our subprocessors:
Importify Limited Unit 1603, 16th Floor, The L. Plaza 367–375 Queen's Road Central Sheung Wan, Hong Kong
Email: support@lilie.app