Legal
Subprocessors
To provide the Kadaikodi cart & commerce management platform, we engage a small set of trusted third parties ("subprocessors") that process personal data on our behalf. This page lists them for transparency.
The list below is published from our DPA Annex 3 and is kept current; the authoritative live list is maintained by Burdenoff and notified per the Data Processing Addendum.
Current subprocessors
The providers we use today to operate the platform.
| Subprocessor | Service / role | Location | Data categories |
|---|---|---|---|
Amazon Web Services Amazon Web Services, Inc. | Primary cloud infrastructure — compute, databases, caching, secrets management, application hosting, and frontend static assets | ap-south-1 (Mumbai, India) | All categories of Customer Data hosted on the service |
Cloudflare Cloudflare, Inc. | CDN, WAF, DNS, and Zero Trust | Global edge | Connection metadata, IPs, request headers; cached static assets |
Amazon Simple Email Service (SES) Amazon Web Services, Inc. | Transactional email delivery | ap-south-1 (Mumbai, India) | Email address, content of transactional emails |
Razorpay Razorpay Software Pvt. Ltd. | Payment processing (India and regional) and payouts | India | Billing identifiers, tokenised UPI/card data, settlement data |
Stripe Stripe, Inc. | International payment processing (PCI-DSS processor) | US / EU | Billing identifiers, tokenised card data |
Shared Burdenoff platform services Headshot Marketing Pvt. Ltd. (Burdenoff Group) | Auth / RBAC, conversations, files, tags, tenant, billing, and notifications on the shared platform | India | All categories, as intra-group processing on the shared platform |
Apache Answer (self-hosted) Headshot Marketing Pvt. Ltd. (Burdenoff Group) | Support community at community.kadaikodi.com | India | Community profile and post content |
Kadaikodi support tooling Headshot Marketing Pvt. Ltd. | In-house ticketing and customer success | India | Support content |
Algoshred Technologies Corp Algoshred Technologies Corp (Delaware, USA) | International payment-processing entity invoicing via Stripe | USA | Billing identifiers for international invoicing |
Being finalised
These providers are core to Kadaikodi's functionality and will be named and have a DPA executed before they are engaged. We list the roles now so there are no surprises.
| Subprocessor | Service / role | Location | Data categories |
|---|---|---|---|
Maps / geolocation provider To be confirmed To be confirmed | Geocoding, routing, ETA, and live tracking | Global / India | Location/coordinate data, addresses |
SMS / push provider To be confirmed To be confirmed | Transactional SMS and push notifications (TRAI DLT-compliant) | India / global | Mobile number, device push token, message content |
KYC / verification provider To be confirmed To be confirmed | PAN / bank / ID verification for merchants, workers, and investors | India | Identity, KYC documents, verification results |
Escrow / nodal-account partner To be confirmed To be confirmed | Segregation of investor funds for the investment marketplace, where lawful | India | Investor identifiers, contributions, settlement data |
Good to know
- For Enterprise or dedicated-tenant deployments, the subprocessor list may be narrowed in your Order Form (for example, that provider only, India regions only).
- Each referenced contract is identified by its Document ID and incorporated by reference; the version that applies is the one current at your effective date unless an Order Form specifies otherwise.
- Questions about data processing? See our Privacy Policy and Security pages, or contact us.