Docs › Declarations › Sub-processors and Third Parties

Sub-processors and Third Parties

Last updated 18 September 2026 · Operated by PARINUUT FASSHION (I) PRIVATE LIMITED

These are the companies whose systems handle member data on our behalf, and what each one receives. None of them may use the data for its own purposes, and none of them is paid with your data.

Infrastructure

• Google Firebase (Google LLC) — phone-number sign-in and one-time codes, storage of uploaded images, real-time updates and abuse protection (App Check). Receives your phone number, the images you upload and the technical signals Google needs to deliver a verification code.
• Vercel Inc. — hosts the website and the API. Sees the data the app or your browser sends to our servers, plus standard request logs (IP address, timestamps) kept for security.
• MongoDB Atlas (MongoDB Inc.) — our database, where accounts, listings, inquiries and the other records described in the Privacy Policy are stored, encrypted at rest.
• Cloudflare Inc. — DNS and the network layer in front of daisybellee.com; processes IP addresses to serve and protect the site.

Payments (website only)

• PayU Payments Pvt. Ltd. — processes plan purchases made on daisybellee.com. Receives your name, phone number, the plan and the amount, and returns a payment status to us. We never see or store card, UPI or bank details. The mobile apps do not talk to PayU at all.

Distribution

• Google Play (Google LLC) and the App Store (Apple Inc.) deliver the apps and, if you rate or review the app there, hold that review under their own terms.

Only when enabled

• Sentry (Functional Software, Inc.) — error and crash reporting. Switched off in the current release. If we enable it, it would receive technical crash data with personal identifiers removed, and this page, the Privacy Policy and both store declarations would be updated first.
• A dedicated SMS gateway (MSG91 or Twilio) — only if we move one-time-code delivery off Firebase; it would receive the phone number and the code text, nothing else.

What is not on this list

• No advertising networks, attribution or retargeting partners.
• No analytics vendors (no Google Analytics, Firebase Analytics, Mixpanel, Amplitude or similar in the apps).
• No data brokers, no resale, no "partners" receiving lists.

Questions about any processor: info@daisybellee.com.