Legal
Subprocessors
To provide the HeadshotMarketing marketing & sales platform, we engage a small set of trusted third parties ("subprocessors") that process personal data on our behalf. This page lists them for transparency.
The list below is kept current; the authoritative live list is maintained by Burdenoff and notified per the Data Processing Addendum.
Current subprocessors
The providers we use today to operate the platform.
| Subprocessor | Service / role | Location | Data categories |
|---|---|---|---|
Amazon Web Services (AWS) Amazon Web Services, Inc. | Primary cloud infrastructure — compute, databases, caching, secrets management, application hosting, object storage, and frontend static assets | ap-south-1 (Mumbai, India) | All categories of Customer Data hosted on the service |
Cloudflare Cloudflare, Inc. | CDN, security, DNS, and access control | Global edge | Connection metadata, IPs, request headers; cached static assets |
Amazon Simple Email Service (SES) Amazon Web Services, Inc. | Transactional email delivery | ap-south-1 (Mumbai, India) | Email address, content of transactional emails |
Stripe Stripe, Inc. | International payment processing and marketplace payouts/escrow where enabled | US / EU | Billing identifiers, tokenised card metadata, payout/escrow data |
Razorpay Razorpay Software Pvt. Ltd. | India and regional payment processing and marketplace payouts/escrow where enabled | India | Billing identifiers, tokenised card metadata, payout/escrow data |
Rybbit Self-hosted by Headshot Marketing Private Limited | Privacy-respecting product and website analytics | India | Pseudonymous usage and event metadata |
Apache Answer Self-hosted by Headshot Marketing Private Limited | Support community at community.headshotmarketing.com | India | Community posts and support content |
HeadshotMarketing-operated support tooling Headshot Marketing Private Limited | In-house ticketing and customer success — no third-party SaaS support desk is used | India | Support tickets and customer-success correspondence |
Burdenoff Consultancy Services Burdenoff Consultancy Services Private Limited | Burdenoff Group manpower entity — employs the engineering, support, security and operations personnel that deliver the Service on HeadshotMarketing’s behalf | India | All categories, processed only on HeadshotMarketing’s instructions |
Algoshred Technologies Corp Algoshred Technologies Corp (Delaware, USA) | International payment-processing entity for invoicing | USA | Billing identifiers for international invoicing |
Google Workspace Google LLC | Internal team collaboration only — email, calendar, docs used by Burdenoff Group personnel. Customer Data is not stored in Google Workspace as part of the Service. | US / EU (Google managed) | Internal collaboration; may incidentally receive support-ticket metadata if escalated |
GitHub GitHub, Inc. | Source-code hosting (Algoshred internal); also referenced where customer integrations call it | US | Source code; integration metadata |
Linear Linear Orbit, Inc. | Internal project tracking; may receive support-ticket metadata if escalated | US | Support-ticket metadata |
Conditional subprocessors
These providers are engaged only when your organisation explicitly connects them. The specific platform and location are disclosed at enablement.
| Subprocessor | Service / role | Location | Data categories |
|---|---|---|---|
Ad / social / email / SMS delivery providers Per provider — disclosed at enablement | Campaign, audience, post and message delivery to the platforms you connect (e.g., ad networks, social platforms, email/SMS gateways) | Per provider | Contact/audience data and message content you choose to send through the connected platform |
Being finalised
This provider is core to HeadshotMarketing's functionality. It will be named here, with a DPA executed, as soon as the selection is finalised. We list the role now so there are no surprises.
| Subprocessor | Service / role | Location | Data categories |
|---|---|---|---|
AI model provider To be confirmed To be confirmed | AI inference for content generation, optimization, and the marketing agent | Global | Prompts and content submitted for generation; generated content |
Good to know
- For Enterprise or dedicated-tenant deployments, the subprocessor list may be narrowed in your Order Form (for example, one cloud provider only, India regions only).
- Each referenced contract is identified by its Document ID and incorporated by reference; the version that applies is the one current at your effective date unless an Order Form specifies otherwise.
- Questions about data processing? See our Privacy Policy and Security pages, or contact us.