Legal

Sub-processors

The providers we use to run Dropplink. Each may use the data only to provide its service to us, under terms that protect it at least as much as our DPA.

Effective 27 October 2026 · Dropp Services Private Limited (CIN U62099HR2026PTC146867)

Current list

Provider	What it does for us	Data it handles	Location
MongoDB, Inc. (MongoDB Atlas)	Database for accounts, links, installs, events and reports	Brand accounts and end-user data	India
Microsoft (Azure)	Cloud servers that run Dropplink	Brand accounts and end-user data	India
Cloudflare, Inc.	DNS, TLS certificates and traffic for link domains; tells us a visitor's country, region and city	Brand accounts and end-user data	Global edge network; United States (company)
Vercel Inc.	Hosting for this website and the dashboard	Brand accounts and end-user data	Global edge network; United States (company)
Resend	Sending account emails, such as sign-up codes	Brand accounts	United States
Razorpay Software Private Limited	Payments and subscriptions	Brand accounts	India
Cloudinary	Storing images brands upload, such as logos	Brand accounts	United States

“End-user data” is the data our SDKs collect for brands, described in part B of our privacy policy. “Brand accounts” means brands' account, team and billing details only.

Changes

We give at least 30 days' notice before adding or replacing a sub-processor that handles brands' end-user data, by updating this page and emailing account owners. To object, write to [email protected] within that period, as set out in section 5 of the DPA.