Legal
Sub-processors
The third-party services we use to run Autonomiqa, what they do and where they process data.
Last updated: 6 October 2026
A sub-processor is a third-party service provider that processes personal data for Autonomiqa, or for our customers when we act as their Data Processor. Each provider listed here is bound by written terms covering confidentiality, purpose limitation, security and deletion. Read this together with our Privacy Policy and Terms of Service.
Where your data lives: Our main database and application servers are in India (Mumbai); our AI reply assistant runs in the United States. Some specialist providers below process data outside India, as shown. These transfers follow applicable Indian law.
1. Infrastructure
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database and authentication | Account, campaign and prospect data | India (Mumbai) |
| Google Cloud Platform | Application hosting | Data processed by our application | India (Mumbai) |
| Google Cloud Platform | AI reply assistant hosting | Message threads, including prospect replies | United States |
| Google Firebase Hosting (Google LLC) | Serving our public website (autonomiqa.co) from Google's global edge network | Website visitors' technical data, such as IP address, browser type and pages requested | Google global infrastructure |
2. Data sourcing and research
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Apollo.io | Finding and enriching business contacts | Search criteria; business contact data returned | United States |
| AI Ark | Finding and enriching business contacts | Search criteria; business contact data returned | United States |
| Serper | Company research | Search queries and public search results | United States |
| Apify | Collecting public business information | Public web data, which may include business contact details | United States |
3. Communications
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Unipile | Sending and receiving LinkedIn and email messages from connected accounts | Account tokens, account identifiers, message content and metadata | European Union |
| Resend | Account and notification emails | Recipient email address, message content and delivery data | United States |
| Google Workspace (Gmail) | Email hosting, including contact-form notifications | Emails we send and receive, including the name, email, company, topic and message from contact form submissions | Google global infrastructure |
4. AI
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Google (Gemini API) | Writing messages and scoring prospects | Prospect business details and your messaging instructions | Google global infrastructure |
5. Payments
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Razorpay | Payment processing | Billing details and transaction records | India |
Razorpay is a PCI-DSS compliant payment aggregator regulated by the Reserve Bank of India. We never receive or store full card numbers, CVV or UPI credentials.
6. Changes to this list
We add new sub-processors to this page before they start processing personal data. Customers with a Data Processing Addendum get advance notice as set out in that addendum and may object on the terms it specifies. To be told about changes, write to support@autonomiqa.co with the subject "Sub-processor updates".
7. Questions
Autonomiqa
Privacy and sub-processor questions: support@autonomiqa.co
Data Processing Addendum requests: support@autonomiqa.co, subject "DPA request"