Subprocessors
Last updated
OCCULTLAB CODE PRIVATE LIMITED uses a small number of third parties to run the Occult API. This page names each of them, what they do, and what data actually reaches them.
1. What a subprocessor is
When you send us data, you are the controller and we are the processor. A subprocessor is anyone we in turn rely on who could access that data. Naming them, and telling you before the list changes, is an obligation under our Data Processing Agreement.
Worth stating plainly, because it shortens most security reviews: an astrology calculation never leaves our own infrastructure. A birth date, time and place sent to an endpoint is computed against ephemeris data on our servers and returned. It is not forwarded to any third party, and we do not store it after the response is sent.
2. Current subprocessors
| Subprocessor | Purpose | What reaches them | Location |
|---|---|---|---|
| Razorpay Software Private Limited | Payment processing for credit purchases | Name, email address and payment instrument details, which are collected by Razorpay directly. We never receive or store card numbers. | India |
| Cloudinary | Hosting and delivery of images used on the website | None. Only our own static assets; no customer or end-user data is sent. | United States / EU |
| OpenAI | Optional AI assistant features | Only the text of a message sent to an assistant feature, when a customer uses one. Not used by any astrology calculation endpoint. | United States |
3. Still being documented
These are infrastructure providers we certainly use. We are publishing the entries before the details are finalised rather than omitting them, because an incomplete list is the thing a security review is looking for. If you need the specifics before signing, ask us at mridul.kabra23@gmail.com and we will confirm in writing.
- Runs the API and stores accounts, keys, usage and ledger records — All account and usage data described in the Privacy Policy, at rest and in transit.
- Sends verification, password reset and billing emails — Name and email address, and the content of those emails.
4. Changes
We will update this page before a new subprocessor begins handling customer data. If you have an account, you can object to an addition; write to us and, if we cannot resolve it, you may terminate and receive a refund of any unused credits under our refund policy.