Subprocessors

This page lists third parties that may process personal data on WRKZY's behalf to provide the service. A listed provider applies only when the corresponding service or feature is used. References to provider locations include the provider's own infrastructure and published subprocessors; they do not mean that every location is used for every client.

Banks, payment networks, professional advisers, authorities, and a client's independently selected communication platforms are not WRKZY subprocessors merely because they receive data in their own role.

Supabase, Inc.

ServiceApplication database, authentication, and object storageDataAccount, workspace, customer-operations, message, attachment, authentication, and operational data.LocationThe configured primary project region; limited support, security, and infrastructure processing may occur in other published provider locations.

Vercel Inc.

ServiceWebsite and application hosting, delivery, logs, and Web AnalyticsDataWebsite, account, request, device, network, usage, and operational data needed to deliver and protect the service.LocationGlobal edge network and the locations used by Vercel and its published subprocessors.

Cloudflare, Inc.

ServiceTurnstile bot and abuse preventionDataBrowser, device, network, request, and challenge signals from protected public and account surfaces.LocationCloudflare's global network and its published subprocessor locations.

Plus Five Five, Inc. (Resend)

ServiceTransactional and product email deliveryDataRecipient and sender addresses, service-message content, delivery events, and related email metadata.LocationUnited States and the locations used by Resend and its published subprocessors.

OpenAI OpCo, LLC

ServiceAI-assisted processing when enabledDataThe selected conversation or workspace context, submitted business-card images and extracted contact fields, user instructions, anonymous website pricing questions and bounded session context, technical fields, generated output, and operational metadata needed for the requested result. WRKZY requests store:false and does not retain pricing-adviser transcripts in its database; OpenAI's default abuse-monitoring retention may still apply for up to 30 days.LocationUnited States and the locations used by OpenAI and its published subprocessors under the applicable API data controls.

Chargebee Inc.

ServiceSubscription and billing management when paid plans are enabledDataAccount, organization, contact, plan, entitlement, invoice, tax, subscription, and payment-status data.LocationThe configured Chargebee site region and the locations used by Chargebee and its published subprocessors.

Razorpay Payments Private Limited

ServicePayment processing for supported paid subscriptionsDataPayer, billing, transaction, payment-method, status, fraud-prevention, and reconciliation data. WRKZY does not receive complete payment-card details.LocationIndia and the locations used by Razorpay's authorized service providers and payment network participants.

Feature-dependent providers do not receive client personal data unless the client enables or uses the related feature. Legal entities shown are current as of the date above. If a provider changes the entity serving WRKZY, WRKZY will update this page; eligible clients may request current contractual details through the privacy contact.

Meta and WhatsApp Business, Google Workspace and Gmail, Microsoft 365 and Outlook, client-selected SMTP providers, and other supported communication services may process data when a client connects its own provider account. These platforms are governed by their own terms and ordinarily act as the client's provider or independent controller rather than as a WRKZY subprocessor.

WRKZY sends and receives only the information needed for the client-enabled connection and does not use one client's connected-channel data for another client.

Primary application data region: <actual production application/database region>. Provider support, delivery, security, and feature-dependent processing may still occur in other locations described below.

WRKZY is operated from India. Provider processing may also occur in the United States, the European Economic Area, Singapore, and other countries in which the relevant provider maintains infrastructure or support operations. The precise region can depend on the configured account, service, availability, and client-connected provider.

Before a regulated transfer, clients may request the current primary data region and applicable transfer documentation at privacy@wrkzy.com. WRKZY does not represent that every listed jurisdiction is used for every client.

WRKZY will update this page before a material new subprocessor begins processing client personal data, with reasonable advance notice where practicable. Clients may raise a reasonable, documented data-protection objection through the privacy contact. WRKZY will work in good faith to address the objection, including through a commercially reasonable alternative where available. A client may request email notice of material subprocessor changes by writing to privacy@wrkzy.com.