Legal document
Sub-processors
Who processes personal data on our behalf, and where.
Last updated: 29 September 2026 · Sunbots Innovations LLP
How we work with these providers
Each provider below is bound by a written contract that limits processing to the purpose shown, requires confidentiality and security measures, and — for our AI providers — prohibits using your content to train their general-purpose models. Where a provider is outside India, section 12 of our Privacy Policy explains the safeguards for international transfers.
We update this page when a provider is added or replaced. For material changes affecting your data we notify you in the app or by email before the change takes effect, wherever that is practicable.
| Provider | Purpose | Data involved | Region | When used |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Hosting, databases, file storage and backups | All account data, user content processed by our servers, request logs | India (Mumbai, ap-south-1) | Always |
| Webyne Data Centre Pvt Ltd | GPU and cloud servers that run our self-hosted AI models (Gemma) and internal services | Prompts, images and transcribed speech sent to MIRA; data handled by those internal services | India (Noida / Mumbai) | When you use MIRA and other AI features |
| Hostinger | VPS hosting for internal services | Data handled by the services hosted there | Global (Hostinger) | As part of running the service |
| Google Cloud — Gemini / Vertex AI, Cloud Vision | AI image description, OCR (including disability-certificate OCR for dating verification), document understanding, MIRA reasoning | Images and camera frames, documents, text prompts, transcribed speech | United States / global | When you use AI features |
| Google Firebase (Analytics, Crashlytics, Performance, Cloud Messaging) | Crash reports, performance monitoring, push notifications, opt-in usage analytics | Device identifiers, app version, crash traces, opt-in usage events, push token | United States / global | Crash reports always; analytics only when enabled in Settings → Privacy and data |
| Google Translate API | Translating recognised text and assistant responses | Text to be translated | United States / global | When you use translation |
| Google Maps Platform | Geocoding and nearby places for navigation and delivery addresses | Location while the app is in use, search text | United States / global | When you use location features |
| Anthropic (Claude) | Writing scripts for SMARTON audio series, book adaptations and news | Content text and prompts | United States | When audio content is produced |
| ElevenLabs | Narration voices and sound effects for SMARTON audio content | Script text to be narrated | United States | When audio content is produced |
| Apple | Sign in with Apple; App Store in-app purchases and subscriptions | Apple ID token, purchase receipts | Global (Apple) | iOS users |
| Google Play | Sign in with Google; Play Billing subscriptions | Google account token, purchase tokens | Global (Google) | Android users |
| Razorpay | Card, UPI and net-banking payments and invoices | Name, email, phone, payment metadata (card details are handled by Razorpay only) | India | When you pay through Razorpay |
| PostHog (self-hosted by Sunbots at analytics.sunbots.in) | Opt-in product analytics | Usage events, pseudonymous user ID, device information | India (Sunbots-operated) | Only when you enable analytics in Settings → Privacy and data |
| Brevo | Transactional and marketing email | Email address, name, message content | European Union | Email notifications |
| Mailchimp Transactional / Mandrill (Intuit) | Transactional and marketing email | Email address, name | United States | Email notifications |
| MSG91 | SMS one-time passcodes and notifications | Phone number, OTP message | India | Phone verification and account-deletion codes |
| Whistle (whistle.mobi) | SMS one-time passcodes for Indian (+91) phone numbers | Phone number, OTP message | India | Sign-in, phone verification and account-deletion codes |
| Swiggy | Food ordering and delivery (independent data fiduciary / controller for its own service) | Name, phone, delivery address, order details | India | Only when you link your Swiggy account and place an order |
| Google Analytics 4, Hotjar, Meta Pixel (website only) | Website analytics and campaign measurement | Cookie identifiers, pages viewed, anonymised IP | United States / global | Only after you accept the category in the cookie banner |
Questions: support@sunbots.in. See also our Privacy Policy and Cookie Policy.