Sub-processors
In delivering ViralDM, we engage carefully vetted third-party service providers ("sub-processors") that may process personal data on our behalf. This page is maintained for transparency in accordance with our Data Processing Agreement, the EU GDPR, and India's DPDP Act 2023.
Data Fiduciary / Controller: Vyzonek Technology Private Limited (CIN: U58201DC2026PTC473496), Patel Nagar West, New Delhi, Central Delhi – 110008, India. ViralDM is operated by this entity, which is the controller for all personal data described here. Every provider listed below acts as a sub-processor on its instructions. ViralDM began as Kings 11, the founder’s sole proprietorship (MSME UDYAM-RJ-07-0010091), and some third-party platform accounts — including the Meta Business Account behind our Instagram API integration — are still registered to it while they are transferred. It does not process personal data on ViralDM’s behalf.
Last updated: August 12, 2026
Current Sub-processors
| Service Provider | Purpose | Data Type | Region |
|---|---|---|---|
| Google Cloud Platform | Application hosting, cron jobs, primary data storage (PostgreSQL) | Account data, subscribers, messages, automations, service logs | India (Mumbai) |
| Cloudinary Ltd. | Media upload, transformation, content delivery | User-uploaded images and videos for posts/reels | Global CDN |
| Razorpay Software Pvt Ltd | Payment processing, subscription billing, webhooks | Billing email, payment status, plan information | India |
| Cloudflare Inc. | CDN, DDoS protection, DNS | IP addresses, request metadata (cached briefly for security) | Global |
| Google AI (Gemini API) | AI inference for auto-reply generation, humanizer, captions, DM agent — first choice in our AI fallback chain | Message/prompt text and generated AI responses | US |
| DeepSeek | AI inference — used only when Gemini is unavailable | Message/prompt text and generated AI responses | China |
| OpenAI | AI inference — used only when Gemini and DeepSeek are unavailable | Message/prompt text and generated AI responses | US |
| Amazon Web Services (Bedrock) | AI inference — last-resort fallback when Gemini, DeepSeek and OpenAI are all unavailable | User prompts and generated AI responses (not retained by AWS) | US |
| Meta Platforms Inc. | Official Instagram Graph API and Messaging API integration | Instagram OAuth tokens, profile data, messages (sent on user's behalf) | US |
| Google LLC | Google Workspace email, OAuth sign-in, Search Console analytics | Email metadata, signup OAuth identity | US |
| Cloudflare Turnstile | Bot detection (CAPTCHA replacement) | IP address, browser fingerprint (signup/login only) | Global |
Optional integrations
The following third-party services are activated only when a customer explicitly connects them inside their dashboard. Data is sent to these providers based on that customer's specific configuration:
| Service | Activated when customer |
|---|---|
| Google Sheets | Enables Google Sheets export integration |
| Shopify | Connects their Shopify store to ViralDM |
| Notion | Configures Notion database sync |
| Airtable | Configures Airtable base sync |
| Slack | Connects a Slack workspace for alerts |
| Discord | Connects a Discord server for alerts |
| Mailchimp / ConvertKit | Connects an email list for lead sync |
| n8n | Installs the n8n-nodes-viraldm community node |
| WhatsApp (wa.me deep links) | Enables WhatsApp Bridge feature with their number |
Compliance commitments
All sub-processors listed above:
- Have appropriate data processing agreements or standard contractual clauses in place with ViralDM where required
- Maintain industry-recognized security certifications (SOC 2, ISO 27001, or equivalent)
- Are reviewed annually for compliance with our security and privacy standards
- Are bound by confidentiality obligations and engaged only for the purposes described above
For more details on how we handle personal data, please review our Privacy Policy and Data Processing Agreement. Questions: info@viraldm.app.