Subprocessors
Table of Contents
The Providers Behind the Product
No CRM is built entirely by the company selling it. This page lists every third party that processes personal data on our behalf so that ViveLead works, what each one does, what it can see, and which region it processes in.
It is referred to in our Terms and Conditions and our Privacy Policy, and it is the list a Data Processing Agreement with us incorporates.
WHAT THIS PAGE IS
A subprocessor is a company we engage that may process personal data you have put into ViveLead, or that we hold about your account, in order to deliver the service.
Listed here: providers that can process personal data on our behalf.
Not listed here: tools that never touch personal data, such as our code repository, our build pipeline, and the schedulers that trigger our own internal jobs without receiving customer records.
We do not sell or rent your data to anyone, and nobody on this list is permitted to use it for their own purposes.
WHERE YOUR DATA LIVES
Your CRM data, files, call recordings and generated invoices are stored in India, on Amazon Web Services in the Mumbai region (ap-south-1).
Some providers on this list operate outside India, so using the feature they power involves a transfer out of India. Those transfers are limited to what the feature needs, and each provider is engaged under terms that require it to protect the data and to process it only on our instructions.
If your organisation or the people in your CRM are in the European Union or the United Kingdom, data reaching us moves to India, which has no adequacy decision. We offer Standard Contractual Clauses, and the UK Addendum where it applies, as part of a Data Processing Agreement. Write to us and we will put one in place.
CORE INFRASTRUCTURE
| Provider | What it does | What it can see | Region |
|---|---|---|---|
| Amazon Web Services | Hosting, database, file storage, call recording storage, generated invoice PDFs | All data you store in ViveLead | India (Mumbai, ap-south-1) |
| Amazon Simple Email Service | Sends transactional email, and marketing email you send from the product | Recipient address and the content of the email | United States, and other AWS regions |
| Google Firebase Cloud Messaging | Delivers push notifications to the ViveLead mobile apps | Device token and the notification text | Global, operated by Google |
CHANNELS YOU SEND THROUGH
These are the channels you use to reach your own customers. Each one is governed by its own provider’s policies as well as ours, which is why our terms make you responsible for consent.
| Provider | What it does | What it can see | Region |
|---|---|---|---|
| Meta Platforms (WhatsApp Business Platform) | Sends and receives WhatsApp messages on your business number | Recipient number, message content, media you send | Global, operated by Meta |
| Meta Platforms (Facebook, Instagram) | Lead ads delivery and social publishing, where you connect a page or account | Lead form submissions, post content you publish | Global, operated by Meta |
| Twilio | Cloud telephony: outbound and inbound calls, and call recordings | Caller and called number, call audio, call metadata | United States, with regional routing |
| MSG91 | Sends SMS and one-time passwords in India | Recipient number, message content | India |
| Social publishing, where you connect an account | Post content you publish | United States |
AI FEATURES
| Provider | What it does | What it can see | Region |
|---|---|---|---|
| OpenAI | Call transcription, call summaries, AI calling, the in-product assistant, knowledge base indexing, drafted replies, web chat, generated social copy and images | Only the content the feature you used needs: a call recording or transcript, message text, or the specific records the feature reads | United States |
Two points that matter:
- We do not train models on your data, and our provider is not permitted to use data sent through our account to train or improve its models.
- If you run AI on your own provider key, the content goes to your provider account under your own agreement with that provider, and we are not the controller of that processing.
AI features are optional. If you do not use them, nothing goes to this provider.
PAYMENTS
| Provider | What it does | What it can see | Region |
|---|---|---|---|
| Razorpay | Collects subscription payments, issues payment links and invoices, operates e-Mandate autopay | Your billing name, email, phone and payment details. We never see or store your full card details | India |
INTEGRATIONS YOU CHOOSE TO CONNECT
Nothing in this section runs unless you connect it yourself, and disconnecting it stops the processing.
| Provider | What it does | What it can see | Region |
|---|---|---|---|
| Google (Calendar, Gmail, Sheets, Drive, Search Console) | Syncs appointments, sends and reads email you authorise, imports spreadsheets you pick, reads search performance | Only the scopes you granted, listed in our Privacy Policy | Global, operated by Google |
NOTICE BEFORE WE ADD ONE
We will give at least 30 days notice by email to active customers before a new subprocessor starts processing personal data, unless it replaces one on this list on materially equivalent terms and you are no worse off.
If you object to a new subprocessor on reasonable data protection grounds, tell us within those 30 days. We will try to offer you a way to keep using the product without it. Where there is no such way and you do not want to continue, you may terminate the affected subscription and we refund the unused prepaid term pro rata.
Changes are recorded below, with dates, so you can see the history rather than take our word for it.
CHANGE LOG
27 September 2026: Page first published, listing the providers in use on that date.
To ask about anything here, or to request a Data Processing Agreement, write to contact@vivelead.com.
Questions About a Provider?
Ask us anything about a provider on this list, what it sees, or where it runs.
Contact Us