Subprocessors

Last updated: August 9, 2026

Wapikit Technologies Private Limited engages the third parties below to help deliver and operate the Wapikit platform. Each one processes data on our behalf, is bound by contract to our instructions, and is held to confidentiality and security obligations consistent with our Privacy Policy.

Core platform

Engaged for every customer. Without these the platform cannot run, so they cannot be opted out of individually.

Microsoft Azure - compute, database, object storage, managed cache

India and other Azure regions
Legal entity:
Microsoft Corporation
Purpose:
Hosting the application and background workers, storing the database, files and knowledge base documents, and caching.
Data processed:
All platform data, including account data, contacts, conversations, commerce data, uploaded files and billing records

Azure OpenAI Service

United States / European Union
Legal entity:
Microsoft Corporation
Purpose:
Generating AI replies, summaries and suggestions from the knowledge base and conversation context. Prompts are not used to train foundation models.
Data processed:
Knowledge base content, conversation context, business rules and configured prompts

Azure Communication Services - Email

Global
Legal entity:
Microsoft Corporation
Purpose:
Delivering platform email: sign-in, invitations, alerts, billing notices and low-balance reminders.
Data processed:
Authorised User name, email address and message content

WhatsApp Business Platform

United States and global
Legal entity:
Meta Platforms, Inc.
Purpose:
Sending and receiving WhatsApp messages, managing templates and reporting delivery status.
Data processed:
Recipient phone numbers, message content and media, delivery and read status, conversation categories

CDN, DNS, WAF and Turnstile

Global edge network
Legal entity:
Cloudflare, Inc.
Purpose:
Content delivery, DNS resolution, DDoS and bot protection, and human verification on forms.
Data processed:
IP address, request metadata, device and browser information

Google Sign-In (OAuth)

United States and global
Legal entity:
Google LLC
Purpose:
Authenticating Authorised Users who choose to sign in with Google.
Data processed:
Name, email address and profile image

Website hosting and edge delivery

Global edge network
Legal entity:
Vercel Inc.
Purpose:
Serving the wapikit.com marketing website.
Data processed:
IP address and request metadata of website visitors

Payments, invoicing and tax

Engaged for every paying customer, to take payment and to issue compliant tax documents.

Payment gateway

India
Legal entity:
Razorpay Software Private Limited
Purpose:
Collecting wallet recharges and invoice payments, and notifying us of disputes and chargebacks. Card and bank credentials are handled by Razorpay and never reach our systems.
Data processed:
Billing contact details, transaction amount and status, payment method metadata

Zoho Books

India
Legal entity:
Zoho Corporation Private Limited
Purpose:
Accounting system of record. Issues official invoices, credit notes and receipt vouchers, and hosts the payment links shown on unpaid invoices.
Data processed:
Organisation legal name, billing address, GSTIN, billing contact, invoice line items and payment records

Product analytics and internal operations

Used to understand product usage and to run our own business. These do not receive your end customers’ conversation content.

Product analytics

United States
Legal entity:
PostHog, Inc.
Purpose:
Understanding which features Authorised Users use inside the application so we can improve them.
Data processed:
Pseudonymised user and organisation identifiers, feature interaction events, device and browser information

Microsoft Clarity

United States
Legal entity:
Microsoft Corporation
Purpose:
Website usage analytics and heatmaps on wapikit.com.
Data processed:
IP address, page interactions, device and browser information

Vercel Analytics and Speed Insights

United States
Legal entity:
Vercel Inc.
Purpose:
Aggregated traffic and performance measurement for wapikit.com.
Data processed:
Aggregated page view and performance data

Internal team communication

United States
Legal entity:
Slack Technologies, LLC (Salesforce, Inc.)
Purpose:
Internal engineering, finance and support alerting. Operational alerts may reference an organisation name or invoice reference.
Data processed:
Internal notifications and operational metadata

CRM and marketing

United States / European Union
Legal entity:
HubSpot, Inc.
Purpose:
Managing sales conversations, demo requests and marketing communication with business contacts. Not used for end customer data.
Data processed:
Business contact name, work email, company and correspondence history

Integrations you choose to connect

These process data only if you authorise the integration in your workspace. Connecting one is your instruction to exchange data with that provider, and your relationship with it is governed by that provider’s own terms.

Shopify (Engage and Sales apps)

Canada / United States
Legal entity:
Shopify Inc.
Purpose:
Syncing customers, products, carts and orders, and triggering commerce automations.
Data processed:
Customer contact details, product catalogue, cart and order data

Cashfree - one-click checkout and payment gateway

India
Legal entity:
Cashfree Payments India Private Limited
Purpose:
Checkout and payment recovery flows initiated from a conversation.
Data processed:
Cart and order references, transaction and payment status

Razorpay Magic Checkout

India
Legal entity:
Razorpay Software Private Limited
Purpose:
Checkout links and payment recovery for your own storefront.
Data processed:
Cart and order references, transaction and payment status

GoKwik checkout

India
Legal entity:
GoKwik Technologies Private Limited
Purpose:
Checkout, cart recovery and RTO signals.
Data processed:
Cart and order data, delivery risk signals

Shopflo checkout

India
Legal entity:
Shopflo Commerce Private Limited
Purpose:
Checkout and cart recovery events.
Data processed:
Cart and order data

ClickPost logistics

India
Legal entity:
Clickpost (Ambar Enterprises Private Limited)
Purpose:
Shipment tracking and delivery status notifications.
Data processed:
Order and shipment references, delivery status, recipient contact details

Shiprocket logistics

India
Legal entity:
Shiprocket Limited
Purpose:
Shipment tracking and delivery status notifications.
Data processed:
Order and shipment references, delivery status, recipient contact details

Judge.me reviews

Hong Kong / European Union
Legal entity:
Judge.me Limited
Purpose:
Requesting and syncing product reviews after purchase.
Data processed:
Order references, reviewer contact details and review content

Calendly scheduling

United States
Legal entity:
Calendly LLC
Purpose:
Booking and syncing meetings from a conversation.
Data processed:
Invitee name, email address and booking details

Cal.com scheduling

United States / European Union
Legal entity:
Cal.com, Inc.
Purpose:
Booking and syncing meetings from a conversation.
Data processed:
Invitee name, email address and booking details

Custom HTTP integration and webhooks

Determined by you
Legal entity:
Provider you configure
Purpose:
Sending events to, or receiving events from, an endpoint you specify. You control the destination and the payload.
Data processed:
Whatever the event you configure contains

Changes and objections

We update this page when we add or remove a subprocessor. If you have a signed data processing agreement with us that includes a right to object to a new subprocessor, that right applies on the terms of that agreement. Otherwise, write to [email protected] with any concern and we will discuss alternatives where they exist.

Questions about this page, or about how a specific provider handles your data, go to [email protected]. See also our Terms and Conditions and Privacy Policy.