Sub-processors
Last updated:
These are the companies that process personal data for YOM, as described in our Data Processing Addendum and Privacy Policy. Each is bound by written data-protection terms.
Our group companies
YOM is run by three companies in the same group. Which one you deal with depends on where you are. For a business account, that is the country of the business's billing address.
- India: Aapastech Private Limited (CIN U72900DL2022PTC395508; registered office 8/3, 2nd Floor, Roop Nagar, Delhi 110007, India). It is the data fiduciary for your personal data under Indian law.
- European Union and United Kingdom: Aapastech OÜ (registry code 16453146, VAT EE102489493, Tornimäe tn 3 // 5 // 7, 10145 Tallinn, Estonia). It is the controller of your personal data under the GDPR and the UK GDPR.
- Everywhere else: 14818032 Canada Inc. (Burlington, Ontario, Canada). It is the controller of your personal data.
The three companies share engineering, hosting and support, and each processes personal data for the others under a written intra-group agreement. In this document “YOM”, “we” and “us” mean whichever of them you deal with.
The three companies share engineering, hosting and support under a written intra-group agreement. Aapastech Private Limited and 14818032 Canada Inc. do the processing: each is the other’s sub-processor, and both are sub-processors of Aapastech OÜ, which contracts with customers in the European Union and the United Kingdom.
| Provider | What it does for YOM | Data involved | Location |
|---|---|---|---|
| Aapastech Private Limited | Group company. Engineering, hosting operations, support and billing for YOM. Sub-processor for customers who contract with 14818032 Canada Inc. or Aapastech OÜ | Customer Data and Account Data, as each task needs | India (registered office 8/3, 2nd Floor, Roop Nagar, Delhi 110007) |
| 14818032 Canada Inc. | Group company. Engineering, hosting operations, support and billing for YOM. Sub-processor for customers who contract with Aapastech Private Limited or Aapastech OÜ | Customer Data and Account Data, as each task needs | Canada (Burlington, Ontario) |
| Aapastech OÜ | Group company. Contracting party for customers in the European Union and the United Kingdom, and their processor; 14818032 Canada Inc. and Aapastech Private Limited do the processing for it | Customer Data and Account Data of customers in the EU and the UK | Estonia (Tornimäe tn 3 // 5 // 7, 10145 Tallinn; registry code 16453146) |
Service sub-processors (Customer Data)
| Provider | What it does for YOM | Data involved | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting and compute (Workers, Pages, Durable Objects), databases (D1), object storage (R2), queues, key-value storage, analytics storage, DNS, TLS, custom domains for client portals, and AI inference for optional AI features (Workers AI) | All Customer Data and Account Data | Global network; United States and other countries |
| Resend | Transactional email: scheduled reports, alerts, verification, password reset and billing notices | Recipient email addresses and the content of those emails, which for scheduled reports includes report data | United States |
Account, billing and operations
These process information about account holders, not our customers’ analytics data.
| Provider | What it does for YOM | Data involved | Location |
|---|---|---|---|
| Stripe, Inc. and affiliates | Payment processing and billing (outside India) | Billing contact name, email, payment details and invoices | United States and other countries |
| Razorpay Software Private Limited | Payment processing for customers billed in India | Billing contact name, email, payment details and subscriptions | India |
| Google LLC | Google sign-in, only if you choose it | Your Google account email, name and identifier | United States and other countries |
| Slack Technologies, LLC | Internal operational alerts to our team | Error messages and request paths; not intended to contain Customer Data | United States |
This website and enquiries
Our contact form runs on Tyashin, our own website platform. It relies on these providers.
| Provider | What it does for YOM | Data involved | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting this website and the Tyashin platform that runs our contact form and serves its scripts | Contact-form enquiries; technical request data, including visitors’ IP addresses | Global network |
| MongoDB, Inc. (Atlas) | Database for the Tyashin platform, which stores contact-form enquiries | Name, email, company, message | United States or other regions |
| Twilio Inc. (SendGrid) or Resend | Emails our team about new enquiries and sends any auto-reply | Name, email and message | United States |
Destinations you choose are not sub-processors
When you connect a destination or connector, such as a webhook, Meta, Google Analytics, Google Cloud Storage, Amazon S3, BigQuery, Snowflake, Shopify, WooCommerce or Looker Studio, we send data there on your instructions. Those services are your own providers, governed by your agreements with them.
Changes and notice
We will give at least 30 days’ notice before a new sub-processor starts processing Customer Data, by updating this page and its date. To receive these notices by email, write to contact@aapastech.com with the subject “Sub-processor notices”. You may object as section 6 of the DPA describes.