Subprocessors
What is a subprocessor?
When a merchant uses StoreHippo, the merchant is the data controller for the personal data of its customers, and StoreHippo acts as the merchant's data processor. A subprocessor is a third party that StoreHippo engages to process that personal data on StoreHippo's behalf so that we can provide the Services, for example the cloud provider that hosts the platform or the email provider that delivers order confirmations.
StoreHippo requires each subprocessor to protect personal data under written terms that are at least as protective as our Data Processing Addendum (DPA), and we remain responsible to merchants for the work our subprocessors perform.
The subprocessors that StoreHippo uses for the performance of the Services under the Terms are listed below.
StoreHippo affiliated subprocessors
| Subprocessor | Service provided | Corporate headquarters | Data that may be processed |
|---|---|---|---|
| Hippo Innovations Pvt. Ltd. | Provision and operation of the StoreHippo platform, support and billing | India | Merchant and merchant customer personal data as needed to provide platform functionality |
Third-party subprocessors
Infrastructure and hosting
| Subprocessor | Service provided | Headquarters | Processing location | Data that may be processed |
|---|---|---|---|---|
| Google LLC Google Cloud Platform | Cloud hosting, compute, file storage, log storage and analysis, serverless functions, error reporting | USA | India (Mumbai) | All platform data |
| Amazon Web Services, Inc. | File storage, content delivery (CDN), image processing | USA | India (Mumbai, ap-south-1) | All platform data |
| MongoDB, Inc. MongoDB Atlas | Managed database hosting and search | USA | India (Mumbai) | All platform data |
| Cloudflare, Inc. | DNS, SSL certificates for custom domains, CDN, DDoS protection, edge computing and storage | USA | Global edge network | All platform data |
Monitoring
| Subprocessor | Service provided | Headquarters | Processing location | Data that may be processed |
|---|---|---|---|---|
| New Relic, Inc. | Application performance monitoring | USA | EU Data Center | Technical and usage data, which may include personal data contained in request metadata |
Email, SMS and notifications
| Subprocessor | Service provided | Headquarters | Processing location | Data that may be processed |
|---|---|---|---|---|
| Twilio Inc. SendGrid | Transactional email delivery | USA | USA | Personal data as necessary to provide messaging functionality (name, email address, message content) |
| Zoho Corporation Pvt. Ltd. ZeptoMail | Transactional email delivery | India | India | Personal data as necessary to provide messaging functionality |
| Amazon Web Services, Inc. Amazon SES, Amazon SNS | Email and notification delivery | USA | India (Mumbai, ap-south-1) | Personal data as necessary to provide messaging functionality |
| Walkover Web Solutions Pvt. Ltd. MSG91 | SMS and OTP delivery | India | India | Personal data as necessary to provide messaging functionality (mobile number, message content) |
| Google LLC Firebase Cloud Messaging | Mobile app push notifications | USA | USA | Device identifiers and notification content |
| Apple Inc. Apple Push Notification service | iOS app push notifications | USA | USA | Device identifiers and notification content |
Artificial intelligence
| Subprocessor | Service provided | Headquarters | Processing location | Data that may be processed |
|---|---|---|---|---|
| Google LLC Vertex AI / Gemini, Cloud Vision, Speech, Translation | AI assistants, chatbots, content generation, image and voice processing, translation | USA | India (Mumbai) | Personal data if input to or included in a response by StoreHippo AI features |
| Anthropic PBC | Conversational AI for automation flows | USA | USA | Personal data if input to or included in a response by StoreHippo AI features |
Payments and billing
| Subprocessor | Service provided | Headquarters | Processing location | Data that may be processed |
|---|---|---|---|---|
| Razorpay Software Pvt. Ltd. | StoreHippo subscription billing; payment aggregation for merchants using StoreHippo's aggregated payments | India | India | Personal data as necessary to process payments |
| PayU Payments Pvt. Ltd. | Payment aggregation for merchants using StoreHippo's aggregated payments | India | India | Personal data as necessary to process payments |
| Infibeam Avenues Ltd. CCAvenue | Payment aggregation for merchants using StoreHippo's aggregated payments | India | India | Personal data as necessary to process payments |
| Zoho Corporation Pvt. Ltd. Zoho Subscriptions, Zoho Books | Merchant subscription management and invoicing | India | India | Merchant account and billing data |
Identity and business verification
| Subprocessor | Service provided | Headquarters | Processing location | Data that may be processed |
|---|---|---|---|---|
| Sandbox sandbox.co.in | Aadhaar (DigiLocker), PAN and bank account verification | India | India | Identity and bank details submitted for verification |
| Vayana Network Services Pvt. Ltd. | Bank account and Udyam verification, GST e-invoicing | India | India | Business identity, bank and invoice data |
| Protean eGov Technologies Ltd. | PAN and KYC verification | India | India | Identity details submitted for verification |
| Cookiejar Technologies Pvt. Ltd. Finvu | Account aggregator for ONDC financial services | India | India | Financial data shared with the customer's consent |
Maps, security and support
| Subprocessor | Service provided | Headquarters | Processing location | Data that may be processed |
|---|---|---|---|---|
| Google LLC Google Maps Platform, reCAPTCHA | Address geocoding; bot and abuse protection | USA | USA | Addresses; device and interaction data |
| Geoapify GmbH | Address geocoding | Germany | Germany | Addresses |
| Zoho Corporation Pvt. Ltd. Zoho CRM, Zoho Desk | Merchant relationship management and customer support | India | India | Merchant contact details and support conversations |
Integrations enabled by merchants
StoreHippo also connects to many third-party services that a merchant chooses to enable with its own account, such as:
Payment gateways
Stripe, PayPal, Cashfree, PhonePe
Shipping carriers
Delhivery, Blue Dart, Shiprocket, FedEx
Marketplaces
Amazon, Flipkart
Other services
WhatsApp, SMS and email providers, analytics tools, ERP systems
These providers are not StoreHippo subprocessors. The merchant has a direct relationship with them, and their processing is governed by the merchant's own agreement with that provider. StoreHippo only transfers data to them when the merchant turns on the integration.
Changes to this list
StoreHippo may add or replace subprocessors as the platform evolves. We will update this page before a new subprocessor begins processing personal data, and we will notify merchants so that they can raise objections as described in the DPA.