Sub-processors
Third-party providers that help us operate Maximora ChurchHub.
Last updated: 20 June 2026
We use the providers below to deliver and operate the Service. Each is bound by contract and applicable data protection law. Where a provider is optional or region-specific, it is only engaged when the relevant feature is enabled for your church.
| Provider | Purpose | Data | Region |
|---|---|---|---|
| Lovable Cloud (Supabase) | Primary cloud database, authentication, file storage, edge runtime. | All Customer Data: members, giving, attendance, media, audit logs. | Global cloud regions |
| Cloudflare Workers | Serverless runtime that powers the application server functions and SSR. | Request metadata, ephemeral processing of in-flight requests. | Global edge |
| Mailgun (via Lovable Emails) | Transactional email delivery for auth, invitations, governance and invoice emails. | Recipient email, subject, rendered HTML, delivery and bounce events. | EU / US |
| Safaricom M-Pesa (Daraja API) | Mobile money collection: STK Push, receipts, callbacks. | Payer phone, amount, M-Pesa receipt number, transaction reference. | Kenya |
| Paddle | Card and alternative-payment processing for international subscriptions (where enabled). | Billing contact, payment instrument tokens, invoice metadata. | EU / UK / US |
| Google (Sign-in) | Optional social sign-in for administrators and members. | Google account ID, email, profile name and avatar (when used). | Global |
Changes to this list
We will post updates here and notify churches’ billing contacts in advance of material additions or replacements that process Customer Data, so controllers can object on legitimate grounds as described in the Data Processing Terms.
Maximora Global
P.O. Box 49 – 30500 Lodwar, Kenya
+254 720 341894 · info@maximoraglobal.com · www.maximoraglobal.com