SUB-PROCESSORS
Sub-processors
Every third party that can touch data while running Cosalyx, what each one does, and where it sits.
01 What a sub-processor is
A company we use to deliver Cosalyx that may handle personal data in doing so. The Privacy Policy says we share data only with providers who need it. This is the list, so that can be checked rather than taken on trust. Each one is bound to protect the data and use it only for the service it provides us.
02 Current sub-processors
| Provider | What it does | What it can see | Where |
|---|---|---|---|
| Meta Platforms | WhatsApp Business Platform, Lead Ads | Phone numbers, message content, profile names, lead submissions | Global |
| Supabase | Database and file storage | All application records and uploaded files | Singapore |
| Railway | Application hosting | Data in transit and in process; application logs | Singapore |
| Resend | Transactional email | Recipient address and message content | United States |
| Sheets, Calendar, Drive, only if connected | Only the specific file or calendar you select | Global |
03 Payments
Card payments are handled by our payment provider, which receives your billing details directly. We never store full card numbers. The provider is named on your invoice and at checkout.
04 A note about Meta
Meta is different from the rest of this list; it is not a supplier we chose on your behalf. It operates the WhatsApp Business Platform you connected and processes your messages under its own terms with you, billing you directly for conversations.
Why that matters for deletion
We can delete what Cosalyx holds and revoke our access, but nothing from Meta’s own systems; that request has to go to Meta directly.
05 Changes to this list
We update this page when a provider is added or removed. To be told in advance, email [email protected] and we will add you to the notice list.
Questions about this document?
Write to [email protected] and we will answer. Cosalyx is operated by MATalogics, Lahore, Pakistan.