Sub-processors
The companies that handle our clients’ data while we run the platform for them.
When a business uses Pixelvile, it decides what data goes in, and we process it on its behalf. To do that, we use the companies below. Each one only gets the data it needs for its part of the job.
| Company | What they do for us | Data they handle | Where |
|---|---|---|---|
| Cloudflare, Inc. | Hosting the platform, dashboard, booking pages and client websites, with the database, stored email attachments and support screenshots, email routing, bot checks on forms, and the language model behind the optional chat assistant. | Everything a business keeps in the platform: bookings, customers, invoices, enquiries, email, messages and staff accounts. | Cloudflare’s global network. Data can be processed outside India. |
| Zoho Corporation (ZeptoMail) | Sending email: replies written in the dashboard, booking and invoice emails, password reset codes and support replies. | Recipient name and address, and the email itself. | India (Zoho’s Indian data centre). |
| Meta Platforms (WhatsApp Business Platform) | Sending and receiving WhatsApp messages: confirmations, reminders, alerts to owners, sign-in codes and, for businesses with their own number, their chats. | Customer and staff phone numbers, names and message text. | Meta’s global infrastructure. Data can be processed outside India. |
| Google LLC | Website audits and the free Google check: page speed tests and looking up a business’s public Google listing. Also Google Search Console figures, when a business connects it. And "Sign in with Google" for people who choose it. | Public web addresses and business listing details. For sign-in: the person's name, email address and Google account ID. No customer data. | Global. |
| GitHub, Inc. (Microsoft) | Keeping the weekly database backup, encrypted before it leaves Cloudflare, for 90 days. | An encrypted copy of the database. GitHub can’t read it: the key is held only by Pixelvile, offline. | Global. |
| Browser push services (Google, Apple, Mozilla, Microsoft) | Delivering dashboard notifications to the devices of staff who turn them on. Which one is used depends on the person’s browser. | The device’s notification address and the notification, encrypted by Pixelvile before it is sent, so the push service can’t read it. | Global. |
| Razorpay Software Pvt Ltd | Collecting autopay payments (UPI AutoPay, card or bank mandates) from businesses that pay Pixelvile by autopay. Not live yet: listed in advance. | The paying business’s name, contact details and payment reference. Card and bank details are typed only into Razorpay’s page. | India. |
When this list changes
We update this page before a new company starts handling client data, and we tell clients by email at least 14 days before, so a client can raise an objection. The date at the top shows the last change.
Other tools we use
Some tools only ever see our own business data, not our clients’ (for example our own email and accounts). They aren’t listed here because they never handle client data. Optional services a business switches on itself, such as an SMS provider, are named in its agreement when they are used.
Our data processing agreement explains how we look after client data, and our privacy policy covers the people whose data it is. Questions: support@pixelvile.com.