Legal · Subprocessors

Subprocessors

Last updated: 7 October 2026.

The service runs on our own servers in India, so no hosting company holds your data. These are the companies MeshArc uses to run the service that may process personal data on your behalf — your account, your workspace, or the pages you crawl. Each is bound by a written contract to protect that data at least as well as the data processing addendum requires, and to use it only for the job below.

SubprocessorWhat forWhat it processesWhere
Cloudflare, Inc.Delivers the site and the API, and protects them from attackIP addresses, the country they resolve to, and the requests madeGlobal network; company in the United States
Razorpay Software Pvt. Ltd.Payments and subscriptionsName, email, plan, and the payment details you give Razorpay directlyIndia
Zoho ZeptoMail (Zoho Corporation)Account email: verification codes, resets, invitations, run emails, digests, newsletter confirmationsEmail address and the messageIndia
Functional Software, Inc. (Sentry)Error reportsStack traces, release, browser or server, URL without its query stringUnited States
Google LLC (Tag Manager, Analytics)Analytics on the marketing site, where allowedPages viewed, a few events, browser, approximate locationUnited States
Bright Data, ScrapingBee, ZenRowsReaching pages that refuse a plain requestThe URLs a crawl fetches through them and the pages that come back; never your accountGlobal networks

What is not on this list#

  • Your own destinations and models. A warehouse, bucket or vector store you connect, and a language model or embeddings endpoint you configure with your own key, are your providers, not ours: MeshArc sends data there because you told it to, under your agreement with them.
  • The sites you crawl. They receive requests, not your data.

Changes#

We post a new subprocessor here at least 30 days before it starts processing personal data, and move the date at the top. To be emailed about changes, or to object to one, write to [email protected]; an objection is handled as the data processing addendum says.