Sub-Processors

Version 1.0|Effective: July 2, 2026|Last Updated: July 2, 2026

1. Introduction

This page lists the third-party sub-processors that 1bi0 Technologies LLP ("Company", "we", "our", "us") engages to process personal data on behalf of users and customers of the 1bi0 platform. A sub-processor is a third-party company to whom we have granted access to personal data in order to deliver our services. We are committed to transparency about these relationships. We do not sell personal data to any third party.

2. Our Own Infrastructure

The core 1bi0 platform — including your business data, contact records, messages, conversations, invoices, course content, and workspace settings — is hosted and processed on infrastructure operated directly by 1bi0 Technologies LLP. Our backend services run on servers located in India (DigitalOcean Mumbai). We maintain full control over this infrastructure and do not use any managed database or compute services from hyperscale cloud providers for core data storage. This means the majority of personal data processed through the platform stays within our own infrastructure.

3. Current Sub-Processors

The following third-party companies are engaged as sub-processors. Their engagement is limited to the specific purpose described, and they process personal data only to the extent necessary to fulfil that purpose.

Razorpay Software Private Limited

Purpose: Payment processing — handling subscription payments, order creation, and payment verification for 1bi0 module subscriptions
Data processed: Cardholder name, billing address, email address, payment instrument details (card number is processed directly by Razorpay and is never transmitted to or stored by 1bi0)
Location: India
Legal basis: Processing necessary for the performance of a contract (subscription payment)
Privacy Policy: https://razorpay.com/privacy
Terms of Service: https://razorpay.com/terms

Meta Platforms, Inc.

Purpose: Messaging API access — enabling WhatsApp Business messaging (via WhatsApp Business Cloud API), Instagram Direct Messaging (via Instagram Graph API), and Facebook Messenger (via Messenger Platform API)
Data processed: Message content (text and media), sender and recipient identifiers (phone numbers, Page-scoped IDs, Instagram-scoped IDs, Business-scoped IDs), message timestamps, delivery and read receipts, business profile information, and Meta API access tokens
Location: United States (with global infrastructure)
Legal basis: Processing necessary to provide the messaging integration service you have enabled
Privacy Policy: https://www.facebook.com/privacy/policy
Platform Terms: https://developers.facebook.com/terms/
Note: Meta acts as an independent data controller for data processed through their platforms. 1bi0 acts as a data processor only for data stored in our own systems.

Google LLC (Firebase Cloud Messaging)

Purpose: Push notification delivery — sending real-time push notifications to the 1bi0 mobile app (Android and iOS) for events such as new messages, order alerts, payment confirmations, and lead alerts
Data processed: Firebase device registration tokens (FCM tokens), notification payload (title and body text of the notification, and identifiers needed to route the notification to the correct account)
Location: United States (with global delivery infrastructure)
Legal basis: Processing necessary to deliver the mobile notification feature
Privacy Policy: https://firebase.google.com/support/privacy
Note: FCM tokens are stored encrypted and are not shared with any party other than Google Firebase for delivery purposes. If you do not use the 1bi0 mobile app or have not granted notification permission, no data is sent to Firebase.

Third-Party AI Providers (BYOK — Conditional)

Purpose: AI language model inference — generating AI responses for chatbot, auto-reply, and AI agent features when you have connected your own API key (Bring Your Own Key)
Data processed: Query text (user messages or prompts), relevant business context excerpts from your knowledge base, and conversation history needed to generate a contextually accurate response
Location: Varies by provider — United States for all providers listed below
Legal basis: Processing based on your explicit action of connecting your own API key and enabling BYOK AI features
Applicable providers and their policies:
— OpenAI, L.L.C.: https://openai.com/privacy (applicable only when you connect an OpenAI API key)
— Anthropic, PBC (Claude): https://www.anthropic.com/privacy (applicable only when you connect an Anthropic API key)
— Google LLC (Gemini): https://policies.google.com/privacy (applicable only when you connect a Google AI API key)
— Groq, Inc.: https://groq.com/privacy-policy/ (applicable only when you connect a Groq API key)
IMPORTANT: Third-party AI providers are only engaged as sub-processors when you explicitly configure a BYOK API key in your AI settings. If you use the default self-hosted AI models, no data is sent to any of these providers.

4. No Sale of Personal Data

1bi0 Technologies LLP does not sell, rent, or trade personal data to any third party. Sub-processors listed on this page are engaged solely to deliver specific features of the platform and are contractually restricted from using personal data for any purpose other than providing the service described.

5. International Data Transfers

Some sub-processors listed above are located outside India, including in the United States. When personal data is transferred internationally through these sub-processors, such transfers are governed by the sub-processor's own data protection commitments and applicable law. Core platform data remains on our India-based infrastructure. Third-party sub-processor engagement involves only the specific data required for the service described (e.g., payment instrument data for Razorpay, message payloads for Meta APIs, notification tokens for Firebase, query text for BYOK AI providers).

6. Updates to This List

We will update this sub-processor list when we engage new sub-processors or discontinue relationships with existing ones. Material changes (addition of a new sub-processor that processes significant personal data) will be communicated by updating this page and updating the "Last Updated" date. We may also send email notification to workspace owners for significant changes. You can check this page at any time for the current list.

7. Questions

If you have any questions about our sub-processors or how we handle your personal data, please contact us at: 1bi0 Technologies LLP, Email: support@1bi0.com, Phone: +91 7305036776

Questions about this policy? Contact us at support@1bi0.com