Genbays Software Private Limited
Sub-processors
These are the companies that handle data for us, what each one does and where it holds data. Form submissions from this site go to a database in Mumbai. WhatsApp messages travel through Meta. Client project data goes only where the DPA says, which can be a cloud account you own. We give 30 days' notice before adding anyone to this list.
- 01
This website and our own business
Provider What it does for us Where data is held Their terms Vercel Inc. Hosts and serves the site Primary in the United States, served from a global edge vercel.com/legal/dpa Cloudflare, Inc. DNS, edge caching, bot protection and the form's bot check Global edge network, with India points of presence cloudflare.com/cloudflare-customer-dpa Supabase Pte. Ltd. Stores contact-form submissions Mumbai, India (AWS ap-south-1) supabase.com/legal/dpa Meta Platforms, Inc. (WhatsApp Business Platform, Cloud API) Carries our WhatsApp messages with people who give us a number Meta's data centres, mainly the United States whatsapp.com/legal/business-data-processing-terms Email and calendar provider Email, calendar and the workflow-review booking To be confirmed To be confirmed Google LLC (Google Analytics) Visit counts and traffic sources, only for visitors who agree United States and Google's other data centres business.safety.google/adsprocessorterms - 02
Client projects
Sub-processors for a project are listed in Annex 3 of that project's DPA, because they depend on where you want your data and which services the software needs. Typical ones are a cloud provider in the region you choose (AWS, Google Cloud or Azure), a transactional email service, a monitoring service, and Meta's WhatsApp Business Platform where the software sends WhatsApp messages. We name each, with its region, before work starts. If we build into an account you own, the providers are your own and this list doesn't apply.
Client data isn't sent to third-party AI services unless the DPA names the service, the data and the region.
- 03
Changes to this list
Before we add or replace a provider we update this page and email every client whose data the change affects, at least 30 days ahead. You have 10 business days to object in writing. If we can't resolve the objection, either of us can end the affected work and we refund fees prepaid for work not yet done. Removals are posted without notice. The date of the last change is shown below, and earlier versions are available on request.
Last changed: 14 September 2026.
- Legal name
- Genbays Software Private Limited
- Contact
- [email protected]
- Version
- 0.1
Questions people ask us
Can we get an email when this list changes?
Yes. Every client with a signed DPA is emailed automatically. Anyone else can ask to be added to the list at [email protected].
Why is the site hosted in the US if the form data is in Mumbai?
The hosting serves pages, which hold no personal data. The form submission goes straight to the Mumbai database. If you'd rather your project data stayed in one country, the DPA can require it.