This page lists the third-party Sub-processors that Hayanlabs uses to deliver StackPilot App, the Site, and related services. It is published in accordance with our obligations under GDPR Art. 28(2) and DPDPA. To be notified of changes, email privacy@stackpilotapp.com and ask to be added to the Sub-processor change-notification list.
What is a Sub-processor?
A Sub-processor is any third-party service provider engaged by Hayanlabs to process personal data on our behalf in connection with StackPilot App or the Site.
Current Sub-processors
Site & infrastructure
- Vercel Inc. - Site hosting, edge delivery, Vercel Analytics, Speed Insights. Country of processing: United States & global edge.
- Cloudflare, Inc. - DNS, edge security, Cloudflare Turnstile (bot protection on forms). Country: United States & global edge.
Payments & payouts
- Razorpay Software Private Limited - payments and royalty payouts for customers worldwide. Country: India.
- PayPal, Inc. - payments and royalty payouts for United States customers only. Country: United States.
Email & communications
- Sendinblue SAS (Brevo) - transactional and marketing email (order receipts, password resets, support replies, partner notifications, contact-list sync). Country: France / European Union.
Error monitoring
- Functional Software, Inc. (Sentry) - application error and exception monitoring. Personal data is limited to user ID, email (where attached), IP address, browser, and request metadata associated with an error event. Country: United States.
Application backend
- Hayanlabs-operated application servers hosting the StackPilot App account dashboard, licence-validation API, and partner dashboard. Country: India (primary hosting provider disclosed on request).
What StackPilot App does NOT use
- No advertising / re-targeting networks (Google Ads, Meta Ads, etc.).
- No session-replay or heatmap tools (Hotjar, FullStory, etc.).
- No third-party customer-relationship-management (CRM) integration for the marketing Site.
- No third-party analytics beyond Vercel Analytics & Speed Insights.
Adding or Changing Sub-processors
We will provide at least 30 days' notice of any new or replacement Sub-processor by updating this page (and notifying subscribers to the change-list). A customer with a written DPA may object on reasonable data-protection grounds; if we cannot agree on a resolution, the customer may terminate the affected services without penalty.
International Transfers
Where Personal Data is transferred outside the EU/EEA, UK, or another restricted jurisdiction to one of the Sub-processors above, the transfer is governed by the appropriate safeguard described in our DPA (Standard Contractual Clauses, UK IDTA, etc.).
Contact
Sub-processor questions: privacy@stackpilotapp.com