Yes - but of course, it is not Lovable data that was downloaded. It's not them who would sue.

That said, I think that OP didn't cross the line in relation to each company, but IANAL.

Lovable is a processor, and definitely has responsibilities towards the data subjects.