LEGAL
Sub-processors
Who receives personal data to operate MindPolar, what each receives and where, and the payment providers used to take payment. This list is part of the Data Processing Agreement.
Document status
1
Who receives data to operate the service
| Recipient | Role | What it receives | Where |
|---|---|---|---|
| Cloud infrastructure provider | Hosting, database, file storage, email delivery and security filtering for the service. | Account identity data (MindPolar as controller); Employee-directory data (MindPolar as processor, on the customer organization's instructions); Technical and security data (session tokens, pseudonymised rate-limit signals) | India. Security filtering of web traffic and certificate management run in the United States; no database, file storage or cache is located there. |
| Push-notification delivery provider | Delivers notifications to the MindPolar mobile app. | The device's push token; The notification's title and text, which can include workspace message content and the names of people in it | The provider's own infrastructure, in locations MindPolar does not choose. |
| Amazon Web Services (AWS) and OpenAI | AWS hosts the AI model service, and its models are provided by Amazon and OpenAI. Used for Polaris only, and only when a member uses Polaris. | The member's message, name, role, job position, department, team and location, basic workspace details, and the conversation's name; The workspace records Polaris reads to answer, limited to what that member is already allowed to see | AWS may process a Polaris request in any region where it offers the model service, which can include countries outside India, and the request travels encrypted. MindPolar stores Polaris's replies with the rest of the workspace's data, in India. |
No analytics, advertising, error-tracking, or session-replay third party is integrated into the product.
A customer organization can ask for the current named list of sub-processors at any time by writing to hello@mindpolarai.com; we send it without undue delay and tell organizations in advance of any change.
2
Payment providers
| Provider | Role | What MindPolar sends |
|---|---|---|
| Stripe, Inc. | Payment provider and independent controller of payment data. Collects the payer's payment details on its own checkout. | The organization's reference, the plan and billing period being bought; Discount-code details applied to the purchase |
| Razorpay | Payment provider and independent controller of payment data. Collects the payer's payment details on its own checkout. | The organization's reference, the plan and billing period being bought; Add-on purchase details |
Stripe and Razorpay are payment providers, not sub-processors. Each is an independent controller of the payment data a payer gives it and handles that data under its own terms and privacy policy.
3
Where data is handled
| Country | What happens there |
|---|---|
| India | Customer data is stored and processed in India: the database, file storage, cache and application servers. Polaris requests are the one exception, described below. |
| United States | Security filtering of web traffic and certificate management run here. The filter inspects web requests, including IP addresses and request headers, before they are passed on. No database, file storage or cache is located there. |
| Varies | When a member uses Polaris, AWS can process the request in any region where it offers the model service, which can include countries outside India. MindPolar stores nothing of its own there. |
| Varies | Push notifications are delivered through the push provider's own infrastructure, in locations MindPolar does not choose. |
4
How changes are notified
A new recipient is added to this page, and to the Data Processing Agreement, before it goes live in production. Customer organizations are notified in advance and may object on reasonable data-protection grounds, per the DPA's own terms.
5
Contact
Questions about sub-processors: hello@mindpolarai.com.
Version history
- v1.0.0October 7, 2026
Published.
- v1.2.0October 16, 2026
An AI model service, used only when a member uses Polaris: Amazon Web Services and OpenAI.