Sub-processors

Last updated: 2026-08-13

Negotio uses carefully selected third-party providers to operate, secure, and improve the Services. Most of these providers act as sub-processors and process Personal Data only as necessary to perform services on our behalf, under appropriate contractual, privacy, and security obligations. Payment providers are listed here for transparency, but their legal role differs: a payment provider may act in its own right as a regulated payment institution or, in Paddle's case, as the authorised reseller and Merchant of Record for the relevant purchase.

Managed database, authentication, and object storage powering the Negotio application.

Processing role

Sub-processor (processes data on Negotio's behalf)

Categories of Personal Data

  • Account identifiers (user ID, email)
  • Authentication metadata
  • Agreement and negotiation content
  • Application audit logs

Primary hosting region

Singapore (AWS ap-southeast-1)

Lovable AI Gateway

Privacy Policy ↗

AI model routing and inference for Negotio's AI-assisted features (summaries, action items, insights).

Processing role

Sub-processor (processes data on Negotio's behalf)

Categories of Personal Data

  • Agreement content submitted for AI processing
  • Prompt and response metadata

Primary hosting region

Global (routed via provider infrastructure)

Processing of subscription payments made in Indian rupees (INR), including payment collection, subscription and transaction management, provider-side fraud and risk checks, refunds, and related billing operations.

Processing role

Payment gateway / payment aggregator for INR payments. Razorpay collects payment credentials directly in its own payment flow and processes payment data in its own right as a regulated payment provider in India; Negotio does not receive or store raw card, bank, or UPI credentials.

Categories of Personal Data

  • Name and email address
  • Billing/contact details provided at checkout
  • Payment method and payment instrument details collected directly by Razorpay (not shared with Negotio)
  • Transaction data (amount, currency, plan, order/payment and subscription identifiers, status)
  • Technical data collected by Razorpay during payment (for example IP address, device/browser data)

Primary hosting region

India (as described in Razorpay's privacy documentation)

Sale and processing of subscriptions purchased in US dollars and other non-INR currencies, including checkout, payment processing, invoicing, transaction tax determination and remittance, provider-side fraud and risk checks, refunds, and related billing operations.

Processing role

Authorised reseller and Merchant of Record for non-INR purchases — not a sub-processor for those transactions. You purchase the subscription from Paddle, and Paddle determines and handles payment and applicable transaction tax obligations in its own right under its Buyer Terms. Payment credentials are collected directly by Paddle; Negotio does not receive or store raw card or bank credentials.

Categories of Personal Data

  • Name and email address
  • Billing address and country/location details
  • Financial account and payment information collected directly by Paddle (payment method, cardholder or account holder name, card payment identifiers)
  • Transaction and subscription data (amount, currency, tax amounts, invoice and transaction identifiers, status)
  • Technical data such as IP address (used by Paddle for location/tax estimation and fraud prevention)

Primary hosting region

Provider-dependent / as described in Paddle's privacy documentation

Transactional email delivery (invitations, notifications) and customer communications.

Processing role

Sub-processor (processes data on Negotio's behalf)

Categories of Personal Data

  • Recipient email address
  • Sender/recipient names
  • Email content and delivery metadata

Primary hosting region

India / Global (Zoho regional data centres)

Domain registration and DNS management for letsnegotio.com.

Processing role

Sub-processor (processes data on Negotio's behalf)

Categories of Personal Data

  • Domain registration records (registrant contact information)

Primary hosting region

United States / Global

We may update this list from time to time as our service providers change. Material updates will be reflected here and, where appropriate, in our Privacy Policy.