Vendor & Subprocessor List

1. Introduction

Oye Creators ("we," "us," "our") uses a number of trusted third-party service providers (collectively, "Vendors") and, in turn, those Vendors may engage additional subprocessors. We publish this list for transparency—so that Brands, Creators and Enterprise Clients ("you") know where and how your data is handled.

2. Definitions

Vendor: Any external company or service engaged directly by Oye Creators to process data or provide infrastructure (hosting, email, analytics, payments etc.).
Subprocessor: Any third party engaged by a Vendor to perform part of that Vendor's services (e.g., a hosting provider's CDN partner).

3. Scope

This list covers all Vendors and their known subprocessors as of the date above. We review and update it at least quarterly or whenever we add/remove a Vendor.

4. List of Vendors & Subprocessors

Vendor / Service ProviderCategoryData ProcessedLocation(s)Known Subprocessors (examples)Amazon Web Services (AWS)Cloud Hosting & StorageApplication data, media files, backupsIndia, USA, EuropeAkamai (CDN); Verizon; Zayo (network transit)CloudflareCDN & DDoS ProtectionWeb traffic, IP addressesGlobalVarious local PoP operatorsGoogle AnalyticsWeb & App AnalyticsUsage metrics, device identifiersUSA, EuropeGoogle Cloud Platform (data processing)SendGrid (by Twilio)Email DeliveryTransactional emails, email metadataUSAAmazon SES (fallback email routing)StripePayment ProcessingPayment tokens, transaction recordsUSA, EUMastercard, Visa (payment networks)PayPalPayment ProcessingPayment details, billing addressesUSA, EuropeBank partners (e.g., JPMorgan Chase, Barclays)TwilioSMS & OTP ServicesPhone numbers, SMS contentUSA, IndiaLocal telco partners (e.g., Airtel, Jio)IntercomCustomer MessagingSupport conversations, user IDsUSAAmazon AWS (hosting); SendGrid (email notifications)Google Cloud StorageMedia StorageVideo/images uploaded by CreatorsUSA, AsiaGoogle's own network partnersFirebase AuthenticationUser Auth & IdentityHashed credentials, login metadataUSAGoogle Cloud Platform subprocessorsOptimizelyA/B Testing & PersonalizationUser behavior, experiment resultsUSA, EUAkamai (CDN); Cloudflare (web delivery)

5. Legal & Compliance

International & Indian Law: All data transfers and processing comply with the EU GDPR (where applicable), India's Information Technology Rules and DPDP Act, and other relevant laws.
Data Security: Each Vendor and Subprocessor is contractually bound to implement industry-standard safeguards (encryption at rest/in transit, access controls, regular audits).

6. Indemnification & Liability

Vendor Responsibility: Vendors and their subprocessors remain fully liable for any breach or misuse of your data under their own terms and applicable law.
Oye Creators' Role: We exercise due diligence when selecting Vendors and audit their compliance periodically. However, Oye Creators and its employees shall not be held liable for losses arising from a Vendor's or Subprocessor's negligence or breach, unless directly caused by our own failure to perform due diligence.
Your Remedies: In case of any data incident attributable to a Vendor, you may seek remedy directly from that Vendor under their published terms. We will, of course, cooperate fully with any investigations or claims.

7. Changes & Updates

We reserve the right to update this list at any time. Whenever feasible, we will notify registered users of material changes by email or in-app notification.

8. Questions & Contacts

If you have any questions about our Vendor & Subprocessor List, or about how your data is processed, please reach out to:

Data Protection Officer
TTL Media Private Limited / Oye Creators
Email: privacy@oyecreators.com