Legal
Subprocessors
Headshot Marketing Pvt Ltd uses the processors below to deliver EventfullyManaged. For each one we list what it does, where it processes data and which personal data it may handle. This page is the same list as Annex 3 of our Data Processing Addendum (EM-LEGAL-003C), and we give at least 30 days' notice before adding or replacing a processor that handles personal data.
Last updated: October 28, 2026
Cloud infrastructure
| Processor | Purpose | Location | Personal data |
|---|---|---|---|
| Amazon Web Services Amazon Web Services, Inc. | All application hosting: compute (Amazon EKS), databases (Amazon RDS for PostgreSQL), cache (Amazon ElastiCache), object storage (Amazon S3), static asset delivery (Amazon CloudFront), secrets and backups. | India (ap-south-1, Mumbai) | All customer data hosted on the service |
Content delivery, security and DNS
| Processor | Purpose | Location | Personal data |
|---|---|---|---|
| Cloudflare Cloudflare, Inc. | DNS, CDN, web application firewall, Zero Trust access, and routing of inbound email to our mailboxes. | Global edge network | IP addresses, request metadata, cached static content, inbound email |
Transactional email
| Processor | Purpose | Location | Personal data |
|---|---|---|---|
| Amazon Simple Email Service (SES) Amazon Web Services, Inc. | Sending transactional email such as sign-in links, confirmations, reminders and notifications. | India (ap-south-1, Mumbai) | Recipient email address and message content |
Payments and invoicing
| Processor | Purpose | Location | Personal data |
|---|---|---|---|
| Stripe Stripe, Inc. | Card payments outside India (billed by Algoshred Technologies Corp) and marketplace payouts where enabled. Stripe is PCI DSS Level 1; we never see full card numbers. | United States / European Union | Billing name and email, tokenised card details, payout details |
| Razorpay Razorpay Software Pvt. Ltd. | Card, UPI and net-banking payments in India (billed by Headshot Marketing Pvt Ltd) and marketplace payouts where enabled. | India | Billing name, email and phone, tokenised payment details, payout details |
| Zoho Books Zoho Corporation Pvt. Ltd. | Issuing invoices and GST e-invoices for subscription purchases. | India (Zoho India data centre) | Billing name, email, address and tax identifiers; invoice line items |
Analytics
| Processor | Purpose | Location | Personal data |
|---|---|---|---|
| Rybbit Rybbit (rybbit.com, managed cloud) | Cookieless website and product usage analytics. IP addresses and user agents are hashed; no advertising or cross-site tracking. | Germany (European Union) | Pages viewed, referrer, device and browser type, hashed IP address |
Internal operations and support
| Processor | Purpose | Location | Personal data |
|---|---|---|---|
| Google Workspace Google LLC | Staff email, calendar and documents, including the support and privacy mailboxes that receive your messages. Customer data from the service is not stored here. | United States / European Union | Correspondence you send us (name, email address, message content) |
| GitHub GitHub, Inc. | Source code hosting and engineering issue tracking. Holds personal data only when you raise an issue with us on GitHub. | United States | GitHub username and issue content you choose to share |
| Linear Linear Orbit, Inc. | Internal engineering and support issue tracking when a support request is escalated. | United States | Contact name and email, and the details of an escalated request |
Burdenoff Group companies
| Processor | Purpose | Location | Personal data |
|---|---|---|---|
| Burdenoff Consultancy Services Burdenoff Consultancy Services Pvt. Ltd. | Engineering, support, security and operations personnel who run the service on our instructions. | India | All categories, only as needed to operate and support the service |
| Algoshred Technologies Algoshred Technologies Corp (Delaware, USA) | Contracting and billing entity for customers outside India, invoicing through Stripe. | United States | Billing identifiers of international customers |
Notes
- Optional delivery integrations: if you connect an email, SMS, WhatsApp or push provider to send messages to your attendees, that provider processes the attendee details and messages you send. We name the provider when you enable it.
- Mobile in-app purchases: purchases made inside our iOS or Android apps are processed by Apple or Google as the seller of record under their own terms; they are not our subprocessors.
- Services you contract directly, such as your own payment processor, CRM, identity provider or accounting system, are your vendors and not our subprocessors.
- Support and the public answers library are run on our own infrastructure; we do not use a third-party help-desk tool.