Legal / Sub-processors
Sub-processors
Every third party that processes data on our behalf, what for, and where.
Version 1.3 · last updated 2 October 2026
This is the complete list of processors we use to run Top Billing. It forms part of the Data Processing Addendum, and we give at least 30 days of notice before adding one that would process your data.
Infrastructure and platform
| Processor | What it does | Data it sees | Location |
|---|---|---|---|
| Google Cloud Platform | Runs the gateway, the web application and the background jobs; holds our secrets; stores our logs; provides the cache. | Everything the Service processes, as the hosting layer: account and billing data at rest, usage metadata, request logs, and request content in memory while a request is in flight. | Mumbai, India (asia-south1) |
| Supabase, Inc. | Managed PostgreSQL and the authentication service. | Account data, the authentication record, billing profile, ledgers and usage metadata. | Mumbai, India (AWS ap-south-1) |
Payments
| Processor | What it does | Data it sees | Location |
|---|---|---|---|
| Cashfree Payments India Private Limited | Collects payment for credits and tells us the outcome. | Your name and email, the order amount, and the instrument you pay with. It holds the card, UPI or bank details; we never receive them. | India |
| Processor | What it does | Data it sees | Location |
|---|---|---|---|
| Resend | Sends transactional email: sign-in links, receipts, low-balance warnings, incident and policy notices. | Your email address and the content of the message we send you. | United States |
SMS
| Processor | What it does | Data it sees | Location |
|---|---|---|---|
| SMS sender for mobile verification | Delivers the one-time code that verifies a mobile number. Not yet in service: mobile verification is switched off until a sender is registered, and this row will name the provider and its location before a single code is sent. | Your mobile number and the verification code. | India, once appointed |
AI model providers
A model provider receives the content of the requests routed to its models, and nothing else: no account identity, no email address, no payment data. We identify ourselves to the provider, not you.
| Provider | Status | Data it sees | Location |
|---|---|---|---|
| Third-party AI model providers | In service. Not named publicly, for commercial confidentiality. A customer that needs a provider’s identity for its own data-protection compliance can ask support and receive it under a confidentiality agreement. | The content of requests routed to its models. | May be outside India |
Not sub-processors
Our domain registrar and DNS provider handle no personal data of yours beyond the fact of a DNS lookup. Our source-code host and our development tooling hold no customer data. We use no analytics, advertising, session-recording, chat-widget or customer-data-platform service on any Top Billing surface.
Other documents
- Terms of Service — The agreement between you and VD Enterprises for using Top Billing.
- Acceptable Use Policy — What you may not do with the Service, and what happens if you do.
- Privacy Policy — What personal data we process, why, where it goes, how long we keep it, and your rights.
- Cookie Policy — The only cookies we set are the ones that keep you signed in.
- Data Processing Addendum — The processor terms that apply when you route personal data you are responsible for through the Service.
- Credits, Refunds and Cancellation Policy — How prepaid credits work, what is charged, and when money comes back.
- Service Delivery Policy — Nothing is shipped. What you buy is available within minutes, and usually at once.
- Referral Programme Terms — Invite someone, and when they top up you get credits. The exact rules.
- Service Level and Support Policy — What we aim for on availability and response, stated as targets rather than promises.
- Grievance Redressal Policy — How to complain, what we must do about it, and where to go if we fail you.
- Responsible Disclosure Policy — Report a vulnerability in good faith and we will not come after you.
- About and business details — The registered identity behind Top Billing, as the e-commerce disclosure rules expect.
- Contact — How to reach us, and what to include so the first reply is a useful one.