1. Subprocessors
The table below identifies the Subprocessors currently used by the Services, the purpose for which they are engaged, the categories of data that may be processed, and the applicable processing location.
| Subprocessor | Purpose | Categories of Data Processed | Processing Location |
|---|---|---|---|
| Amazon Web Services, Inc. (AWS) | Cloud infrastructure and object storage, including AWS S3 for storing customer-uploaded documents and generated artifacts | Customer-uploaded files, documents, PDFs, images, JSON artifacts, generated outputs, file metadata, storage object identifiers, and access logs where enabled | Asia Pacific – Mumbai (ap-south-1), where the applicable S3 bucket is configured in that region |
| E2E Networks Limited | Cloud GPU and server infrastructure for hosting application backends, APIs, AI workloads, databases, and application services | User account data, application data, AI requests and responses, uploaded-file references, database connections, logs, and technical metadata | India |
| Google LLC | Gmail SMTP and Google Calendar/Google Meet integrations | User email addresses, names, email content and notifications, meeting details, calendar events, and scheduling information | Global / applicable Google service region |
| Paddle.com Market Limited | Merchant of Record services, subscription billing, checkout, invoicing, and payment management | Customer name, email address, billing information, transaction IDs, subscription details, payment status, and invoices | United Kingdom / Global |
2. Subprocessor Responsibilities
Each Subprocessor is engaged only to the extent necessary to provide the relevant services described above. Depending on the service involved, Subprocessors may process Personal Data in accordance with our instructions and applicable contractual and data-protection requirements.
We seek to ensure that our Subprocessors maintain appropriate technical and organizational measures designed to protect Personal Data against unauthorized access, disclosure, alteration, or destruction.
3. Changes to Subprocessors
We may update this list from time to time as our service providers, infrastructure, or business requirements change.
Where required by applicable data-protection law or our agreements with customers, we will provide notice of material changes to our Subprocessors and allow applicable customers to exercise any rights available to them under their agreement with us.
4. International Data Transfers
Some Subprocessors may process Personal Data outside the country in which the customer or data subject is located. Where applicable, such transfers are subject to appropriate safeguards under applicable data-protection law, which may include contractual safeguards, adequacy decisions, or other legally recognized transfer mechanisms.
The actual processing location may depend on the configuration of the applicable service, account, infrastructure, or integration.
5. Contact
Questions regarding our Subprocessors or data-processing practices can be directed to our privacy or data-protection contact.
Privacy Contact
privacy@echnotek.com