Sub-processors
These are every third-party service that can see data held in BillMyBusiness. If a provider is not on this list, it does not receive your data.
Where the service runs
Our database, application and backups are hosted in Singapore (AWS ap-southeast-1). Your data is therefore stored outside India, which is lawful — no Indian requirement obliges this data to be held domestically, and no notification restricts transfers to that country. We publish it because you should know where your records physically are.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Neon | Managed PostgreSQL — the primary database | All application data, including business records and contact details | Singapore |
| Render | Application hosting and runtime logs | Requests in transit, application logs, IP addresses | Singapore |
| Razorpay | Subscription payments | Order reference, amount and billing contact. Card and bank credentials are entered on Razorpay’s own checkout and never reach us. | India |
| Resend | Transactional email — verification, password reset, invoice delivery | Recipient email address, message content, any attached document | United States |
| Google (Firebase Cloud Messaging) | Push notifications to the mobile apps | Device token and notification content | United States |
| Google (Sign-in) | Optional sign-in with a Google account | Email address and basic profile, only if you choose this method | United States |
| MSG91 / Twilio | Transactional SMS, where enabled | Mobile number and message content | India / United States |
| Meta (WhatsApp Business Cloud API) | Sending invoices and reminders over WhatsApp, where enabled | Recipient number and message content | United States |
What is deliberately absent
There is no analytics provider, no advertising network, no session-recording tool and no data broker on this list, because there are none in the product. We do not run third-party trackers and we do not sell data.
Some of the providers above are only engaged if you turn the corresponding feature on — SMS and WhatsApp in particular. If you never enable them, they never receive anything.
Changes
We will update this page before adding a provider that would receive customer data. If you need advance notice of changes for your own compliance, tell us and we will arrange it in writing.