The third parties we engage to operate the platform.
We process operator and recipient data with the help of a small number of third-party providers. Each provider below is contractually bound to process data only on our instructions, subject to the controls referenced. We notify customers at least 30 days before activating a new sub-processor.
Last updated: 25 May 2026
| Sub-processor | Purpose | Region |
|---|---|---|
Meta Platforms, Inc. (WhatsApp Business Platform) Region: Global (Meta-managed) Meta WhatsApp Business Solution Terms — direct contract between you (the operator) and Meta. Our role is to relay sends and receive status events on your behalf. | Delivery of outbound WhatsApp messages and receipt of inbound messages on the Cloud API. We send message envelopes (recipient phone number, template id, content) to Meta; Meta routes them to recipients. | Global (Meta-managed) |
Microsoft Azure Region: India (South India region; failover to Central India) Microsoft Online Services DPA + Indian data-residency commitment. | Cloud infrastructure hosting — application servers, databases, object storage, message queues. All customer data is stored encrypted at rest in Indian data centres. | India (South India region; failover to Central India) |
PayU India (or successor payment processor) Region: India PayU India merchant agreement + PCI-DSS Level 1 attestation. | Processing platform-subscription payments. Card and UPI details are collected by PayU directly — we never see them. Only the transaction id, amount, and status are returned to our systems for invoice reconciliation. | India |
Resend (or successor transactional email provider) Region: EU (data in transit only) Standard DPA — content and metadata of email only. | Sending transactional email — account verification, password reset, billing receipts, security alerts, grievance acknowledgements. We do not use this provider for marketing email. | EU (data in transit only) |
Sentry (error monitoring) Region: EU Standard DPA + PII scrubbing configuration. | Capturing application errors for debugging. PII is scrubbed before transmission via Sentry SDK denylist rules; payloads include stack traces, request paths, and anonymised user ids only. | EU |
Data Processing Agreement
A Data Processing Agreement (DPA) covering DPDP Act 2023 and the contractual terms with our sub-processors is available on request to enterprise customers. Email privacy@sahayogione.com to request the current DPA.
Notice of changes
When we add a sub-processor, we publish the change here with the activation date and notify workspace owners by email at least 30 days in advance. Operators with a signed DPA have a right to object during the notice window.
See also our Privacy Policy (§4 — Sharing, §5a — WhatsApp message data handling) and Terms of Service.
Chat with Sahayogi is operated by Sahayogi One Private Limited, an Authorised WhatsApp Business Solution Provider under Meta’s Tech Provider programme. WhatsApp is a trademark of Meta Platforms, Inc. All product and company names referenced are trademarks of their respective owners.