Subprocessors
Last updated: September 29, 2026
These are the third-party service providers that process personal data on Baljia's behalf to run the platform. Each one only receives the data it needs for its job. Our Privacy Policy explains what we collect, and our Data Processing Addendum explains how we handle data we process for your business.
Used for every account
| Provider | What it does for Baljia | Data involved | Location |
|---|---|---|---|
| Render | Hosts the Baljia app, API and background workers | All platform data | United States (Oregon) |
| Neon | Main platform database | All platform data | United States |
| Cloudflare | Stores and serves the websites, apps and files Baljia creates; DNS and network security | Website and app files, uploaded and generated media, visitor requests | Global network (United States company) |
| Convex | Backend database for the apps Baljia builds | Data your app and its users store | United States |
| Redis Cloud | Short-lived cache and rate limiting | Temporary counters and cached results | India (Mumbai) |
| Postmark | Sends and receives email | Email addresses and email content | United States |
| Sentry | Error monitoring | Error reports and technical data | United States |
| OpenAI, Anthropic, Amazon Web Services (Bedrock), Google (Gemini), OpenRouter | AI models that power the agents | The content and context each task needs | United States |
| Alibaba Cloud (Qwen), Zhipu AI (GLM), Moonshot AI (Kimi), MiniMax, DeepSeek | AI models that power the agents, used directly or through OpenRouter | The content and context each task needs | China |
| Razorpay | Plans and credit packs, in rupees in India and in US dollars elsewhere | Payment and billing data | India |
| Stripe | Some older plans and some ad-spend charges | Payment and billing data | United States |
| IPinfo | Estimates your location from your IP address, to show the right currency and to set up your company | IP address | United States |
| ipstack | Backup for IPinfo when it cannot answer | IP address | Austria |
| Google Analytics | Website analytics, only if you accept analytics cookies | Usage data and cookie identifiers | United States |
| PostHog | Product analytics: sign-up, task and purchase events for every account, and website analytics only if you accept analytics cookies | Company and account IDs and event details; with cookie consent, usage data, cookie identifiers, and the name and email of signed-in users | United States |
Which AI model handles a given request depends on how we route work for quality, availability and cost.
Used only when you connect or use that feature
| Provider | What it does for Baljia | Data involved | Location |
|---|---|---|---|
| Meta Platforms | Instagram automation, Baljia on WhatsApp, Facebook and Instagram publishing, Meta ads | Messages, comments, profile details, ad and hashed audience data | United States |
| Composio | Connects your business apps (such as Gmail, Google Calendar, Google Analytics, HubSpot) and X, Reddit, Facebook and Instagram publishing | Connection tokens, and the data read from or sent to those apps | United States |
| Unipile | LinkedIn messages, invitations, profile visits and engagement | LinkedIn account access, messages and profile details | France |
| Browserbase, TinyFish | Cloud browsers for the browser agent | Pages visited and website logins used for your tasks | United States |
| Blaxel | Secure sandboxes that run code for a task | The code and data that task needs | United States |
| Deepgram | Transcribes voice notes | Voice notes | United States |
| fal.ai, HeyGen | Image and video generation | Prompts, scripts and images you provide | United States |
| Tavily, Parallel, Perplexity, Firecrawl | Web search, crawling and research | Search queries and web addresses | United States |
| Apollo, Explorium | Find prospects that match your ideal customer | Search criteria and business contact details of prospects | United States |
| Hunter | Finds and verifies business email addresses | Names, company domains and email addresses | France |
| Apify | Collects public web and social data | Search criteria and public profile and post data | Czech Republic |
| GitHub | Stores app code when you connect GitHub | Your app source code | United States |
Some tools only receive public web addresses, search terms or public page content, not your account data: ScreenshotOne and Jina (reading and capturing public web pages), NodeMaven (a proxy network used to reach websites), DataForSEO (search keyword data), Serper (web search), Pexels (stock images), and ScrapeCreators, TikHub and Monid (public social and company data).
Platforms you connect, such as LinkedIn, X, Reddit, Google and Slack, also receive what Baljia posts or sends there for you, and send Baljia the messages and data you use it for there (for example, messages sent to Baljia in your Slack workspace). They act under their own terms and privacy policies, not as our subprocessors.
Changes to this list
This list may change as we add, replace or remove providers. When it does, we update this page and the date above. Business customers who want advance notice can email privacy@baljia.ai to receive change notices; we aim to send them at least 14 days before a new subprocessor starts processing their personal data, and they can object as described in our DPA.