Legal

Sub-processors & data processing terms

Last updated 1 November 2026

This page lists the companies that process personal data for Sensoreal Brand Protocol, and sets out the data processing terms that apply when you put personal data into your workspace. It forms part of our Terms & Conditions and Privacy Policy.

1. Sub-processors

ProviderWhat it does for usData involvedLocation
Cloudflare, Inc.Hosting, application runtime, database, content delivery, securityAll data in the ServiceGlobal edge network; provider is US-headquartered
Razorpay Software Pvt. Ltd.Payment processing, recurring-payment mandates, refundsName, email, payment status and identifiers (card/bank details go to Razorpay, not us)India
Zoho CorporationSending transactional email (codes, invitations, receipts, invoices)Recipient email, name, message contentIndia
Google LLC“Sign in with Google”, only if you choose itName, email, profile pictureGlobal; provider is US-headquartered
Meta Platforms, Inc. (Meta Pixel)Measures ad campaigns and sign-ups, only with marketing consentCookie identifier, pages viewed, sign-up eventGlobal; provider is US-headquartered
Google LLC (Google tag / Ads)Measures ad campaigns and sign-ups, only with marketing consentCookie identifier, pages viewed, sign-up eventGlobal; provider is US-headquartered
PostHog, Inc.Product analytics and session recordings, only if you accept analyticsPseudonymous usage events; masked session recordingsEuropean Union

Marketing tools below run only for visitors who allowed marketing cookies, only on our public marketing and sign-up pages. A tool is listed here before it is switched on. We will update this list before we add a sub-processor that handles your workspace content, and notify workspace owners by email. You may object on reasonable grounds by writing to support@sensoreal.in; if we cannot accommodate the objection you may close your account.

2. Data processing terms

These apply where you put personal data about other people (for example colleagues, clients, or people shown in photographs) into your workspace.

  • Roles. For that content, you (or your organisation) decide why and how personal data is processed and are the data fiduciary / controller. Sensoreal Enterprises is the data processor and acts only on your documented instructions, which are the Terms, your use of the Service, and your settings.
  • Your responsibility. You must have a lawful basis, and where required consent or notice, for the personal data you upload, and must not upload personal data of children without the consent the law requires.
  • Confidentiality. Only people who need access to provide the Service or support have it, and they are bound by confidentiality. Support staff access to a workspace is logged and visible to its owners.
  • Security. We apply reasonable security safeguards, including encryption in transit, hashed passwords, access controls and audit logging.
  • Sub-processors. We use only those listed above, under written terms that give equivalent protection.
  • Assistance. We help you respond to requests from the people whose data you hold, using the export and deletion tools in the Service or on request.
  • Breach. We tell the affected workspace owners without undue delay after confirming a personal-data breach affecting their content, with what we know and what we are doing, and make any notifications the law requires of us.
  • Return and deletion. Before you close a workspace or your account you can export your content from the Service. When you delete it, we remove it from our live systems immediately and from backups as they expire (up to 30 days), unless the law requires us to keep something.
  • Transfers. Processing may take place in the places shown above. We do not transfer personal data to any country the Government of India has restricted.
  • Audit. On reasonable written request, once a year, we will give you the information needed to show we meet these terms.

Questions or requests for a signed copy: support@sensoreal.in. See also the Privacy Policy.