KaryaGati Software
Sub-processors
Every outside company that touches your data, and what each one sees.
Last updated 15 September 2026
The short version
- Four companies: payments, file storage, WhatsApp delivery, outbound email.
- No analytics vendor, no ad network, no data broker, no AI provider.
- Each one has a written data-protection contract with us.
- Connect your own WhatsApp provider and it is yours, not ours.
- New sub-processor means 30 days’ notice. Object, and you can cancel with a refund.
The wording below is what counts legally. This summary is here so you know what it says.
The list
Four companies, and no others.
| Company | What it does | What it sees | Where |
|---|---|---|---|
| Razorpay Software Pvt. Ltd. | Payments, mandates and refunds | Billing name, email, phone, payment references. Card details go to Razorpay directly and never reach us. | India |
| Amazon Web Services India | File storage for attachments and uploads | Any file a user uploads, plus its metadata. | India (ap-south-1) |
| Maytapi | WhatsApp delivery, where you have not connected your own provider | Recipient phone number and message content. | Outside India |
| Google (Gmail SMTP) | Outbound email — notifications, codes and invoices | Recipient address, subject and message content. | Outside India |
Your own providers
Connect your own WhatsApp Business account and that provider becomes your sub-processor, chosen by you. We send messages using the credentials you give us, and we encrypt them at rest. The relationship is between you and them.
What we require
- A written contract covering data protection.
- Use of your data only to provide us the service, never their own.
- Security at least as strong as ours.
- Prompt notice to us of any breach affecting customer data.
We review the list when a contract renews, and when a vendor changes what it does. Our own measures are in Security.
Data that leaves India
Razorpay and AWS run in India. Maytapi and Gmail sit outside it, so an outgoing message or email travels abroad with its recipient and content. Connecting your own WhatsApp provider puts that part back under your control.
If this list changes
Before a new sub-processor handles personal data, we update this page and email workspace owners at least 30 days ahead.
Have a reasonable data-protection objection? Write to privacy@karyagati.in within those 30 days. We look for an alternative — and if there is none, you can cancel with a refund of the unused period, as set out in Cancellation & Refunds.