In delivering ViralDM, we engage carefully vetted third-party service providers ("sub-processors") that may process personal data on our behalf. This page is maintained for transparency in accordance with our Data Processing Agreement, the EU GDPR, and India's DPDP Act 2023.
Data Fiduciary / Controller: Vyzonek Technology Private Limited (CIN: U58201DC2026PTC473496), Patel Nagar West, New Delhi, Central Delhi – 110008, India. ViralDM is operated by this entity, which is the controller for all personal data described here. Every provider listed below acts as a sub-processor on its instructions. ViralDM began as Kings 11, the founder’s sole proprietorship (MSME UDYAM-RJ-07-0010091), and some third-party platform accounts — including the Meta Business Account behind our Instagram API integration — are still registered to it while they are transferred. It does not process personal data on ViralDM’s behalf.
Current Sub-processors
| Service Provider | Purpose | Data Type | Region |
|---|---|---|---|
| Google Cloud Platform | Application hosting, cron jobs, primary data storage (PostgreSQL) | Account data, subscribers, messages, automations, service logs | India (Mumbai) |
| Hostinger International Ltd. | Hosts the server that runs our own AI gateway, which forwards AI requests to the providers below | Message/prompt text, payment screenshot images and AI responses passing through the gateway | India (Mumbai) |
| Cloudinary Ltd. | Media upload, transformation, content delivery | User-uploaded images and videos for posts/reels | Global CDN |
| Razorpay Software Pvt Ltd | Payment processing, subscription billing, webhooks | Billing email, payment status, plan information | India |
| Google Play Billing | In-app subscription billing for the Android app, purchase notifications | Purchase token, order id, plan, purchase state | Global |
| Telegram FZ-LLC | Internal operator alerts (new signup, payment, cancellation) | Account id, masked email (j***@gmail.com), plan name, amount, sign-up source | Global |
| Browser push services (Google FCM, Apple, Mozilla) | Delivering the browser notifications you opt in to | Push subscription endpoint and keys, notification text | Global |
| Cloudflare Inc. | CDN, DDoS protection, DNS | IP addresses, request metadata (cached briefly for security) | Global |
| Google AI (Gemini API) | AI inference — fallback for auto-replies, humanizer, captions and translations when our AI gateway is unavailable; first choice for the in-app AI assistant | Message/prompt text and generated AI responses | US |
| Amazon Web Services (Bedrock) | AI inference — last-resort fallback when our AI gateway and Gemini are both unavailable | User prompts and generated AI responses (not retained by AWS) | US |
| Meta Platforms Inc. | Official Instagram Graph API and Messaging API integration | Instagram OAuth tokens, profile data, messages (sent on user's behalf) | US |
| Meta Platforms Ireland Ltd. / Meta Platforms, Inc. | Advertising measurement for ViralDM's own website: Meta Pixel (public pages, only after cookie consent) and Conversions API (sign-up and plan-payment events) | SHA-256-hashed email and account id, IP address, browser user agent, Meta ad-click ids (_fbc / _fbp), event name, id and amount | US |
| Google LLC | Google Workspace email, OAuth sign-in, Search Console analytics | Email metadata, signup OAuth identity | US |
| Resend | Delivering account email (verification, password reset, receipts, alerts) | Recipient email address, email content | US |
| Amazon Web Services — Kiro (AI models such as Anthropic Claude, run by AWS), reached through an AI gateway we host ourselves | First choice for AI text (auto-replies, humanizer, captions, translations, intents) and for reading UPI payment screenshots for the payment check | Message/prompt text and AI responses; payment screenshot image, expected amount and payee | US |
| ElevenLabs | AI voice calls and voice-note replies — only when a creator switches those on | The lead's phone number, the call script, the conversation audio and transcript | US |
| Vapi | Backup provider for AI voice calls, used only if ElevenLabs is switched off | Same as ElevenLabs | US |
| Exotel | Indian phone numbers and call routing for the voice features | Phone numbers, call metadata | India |
| Cloudflare Turnstile | Bot detection (CAPTCHA replacement) | IP address, browser fingerprint (signup/login only) | Global |
Optional integrations
The following third-party services are activated only when a customer explicitly connects them inside their dashboard. Data is sent to these providers based on that customer's specific configuration:
| Service | Activated when customer |
|---|---|
| Google Sheets | Enables Google Sheets export integration |
| Shopify | Connects their Shopify store to ViralDM |
| Notion | Configures Notion database sync |
| Airtable | Configures Airtable base sync |
| Slack | Connects a Slack workspace for alerts |
| Discord | Connects a Discord server for alerts |
| Mailchimp / ConvertKit | Connects an email list for lead sync |
| n8n | Installs the n8n-nodes-viraldm community node |
| WhatsApp (wa.me deep links) | Enables WhatsApp Bridge feature with their number |
Compliance commitments
All sub-processors listed above:
- Have appropriate data processing agreements or standard contractual clauses in place with ViralDM where required
- Maintain industry-recognized security certifications (SOC 2, ISO 27001, or equivalent)
- Are reviewed annually for compliance with our security and privacy standards
- Are bound by confidentiality obligations and engaged only for the purposes described above
For more details on how we handle personal data, please review our Privacy Policy and Data Processing Agreement. Questions: [email protected].