Sub-processors

When you use dmrabbit, some of your data is handled by other companies that provide parts of the service. Under GDPR these are our sub-processors, and this page lists all of them.

Every entry below corresponds to a service dmrabbit actually integrates with. We do not list partners we do not use, and we do not use partners we have not listed.

1. Core platform

• Meta Platforms (Instagram). The service exists to work with Instagram. Your Instagram profile, your posts, and the comments and messages exchanged with people who contact you all pass through Meta's API. Meta is the source of this data as well as a recipient of the replies you send.
• Cloudflare. Sits in front of dmrabbit.com. It sees the network requests to our site, and tells us which country a visitor is in so we can show prices in the right currency.

2. Payments

dmrabbit never sees or stores your card details. Whichever provider handles your payment collects them directly.

• Razorpay. Processes payments for customers in India, including UPI, cards and bank mandates.
• Polar. Processes payments for customers outside India, and acts as merchant of record for those sales.

3. Communication

• PurelyMail. Delivers our email: sign-in codes, quota warnings, and notifications about your account. It handles your email address and the content of those messages.

4. Content and media

• ImageKit. Stores and serves images you upload for your bio page and profile. Uploads go directly from your browser to ImageKit. Note that Instagram images are not stored here - they are fetched from Instagram each time they are shown.

5. Support and operations

• OpenAI. Powers the assistant that answers the first reply on a support ticket. It receives the text of the ticket you write and information about your plan and usage so it can answer accurately. It does not receive your conversations with the people who contact you.
• Google. Only if you choose to sign in with Google. We receive your name, email address and a permanent account identifier from them; we never receive your Google password.
• Axiom. Stores our application logs, used to diagnose faults. Logs record what the system did and can include your account identifier, not the content of your messages.

6. Hosting

• Our own servers. Your account, your automations, your conversations and your contacts are stored on servers we operate directly, not on a third-party database service.

7. Changes to this list

If we add a sub-processor that handles personal data, we will update this page. If you have a data processing agreement with us and object to a new sub-processor, write to us before it takes effect - the process is set out in the data processing terms within our Terms of Service.

8. Questions

Write to [email protected]. See also our Privacy Policy and how to delete your data.