Last updated: 17 August 2026
AZLIN LLP uses the service providers below to run CommentsPickerPro. Each one processes personal data only on our instructions, under a data processing agreement, and only for the purpose listed. We publish this list so you never have to ask who touches your data.
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
Railway Infrastructure | Runs the application and background workers | Everything the service processes, in transit through the application | United States |
Supabase (PostgreSQL) Infrastructure | Primary database | Account data, giveaways, winners, invoices, fetched comments | United States (us-east-2) |
Redis Cloud Infrastructure | Cache, job queues and short-lived fetch state | Cached comment pages and giveaway state, held 1–6 hours | United States (us-east-1) |
Vercel Infrastructure | Hosts and serves the website | Request metadata (IP address, user agent) in server logs | Global edge network |
Paddle Payments | Payments and merchant of record outside India | Name, email, billing country, payment instrument, transaction records | United Kingdom / European Union |
Razorpay Payments | Payments in Indian rupees | Name, email, billing details, tax identifier, transaction records | India |
Google (Gmail SMTP) Communications | Sends transactional email — verification, receipts, retention warnings | Email address, name, message contents | United States |
Google Analytics 4 Ads / analytics | Aggregate usage analytics | Pseudonymous usage events, device and approximate location | United States |
Google AdSense Ads / analytics | Advertising shown to free-plan visitors | Advertising identifiers and browsing signals | United States |
DataImpulse Infrastructure | Proxy network used when reading public comments from platforms without an official API | Outbound requests only — no account or personal data of our users is sent | Global |
We operate from India and most of the providers above hold data in the United States. For personal data protected by the GDPR or UK GDPR we rely on the European Commission's Standard Contractual Clauses, incorporated into our agreement with each provider, together with encryption in transit and at rest. Details of the safeguards for a specific provider are available on request. See section 9 of our Privacy Policy.
This page is updated before a new sub-processor begins processing personal data. Business customers with a signed data processing agreement are notified by email at least 14 days beforehand and may object. To be added to that notification list, or to request our DPA, email us.
commentspickerpro@gmail.com