Updated on July, 30,2020
Information about processors and sub-processors utilized by Wingify

Wingify Software Pvt Ltd. (“Wingify”) makes use of selected sub-processors to assist in providing the Services as defined in our Terms & Condition (“Terms”) while ensuring privacy and security as described in our Privacy Policy. Terms used on this page but not defined have the meaning set forth in our Terms.

A sub-processor is a third-party data processor retained by Wingify, who has or potentially will have access to Service data i.e. visitor of Wingify’s Customer’s website or application (which may contain Personal Information) while providing Services on our behalf. Wingify engages different types of sub-processors to perform various functions as explained in the tables below.

Wingify also collects some data from its Customers as outlined in our Privacy Policy as a Controller and uses processors as mentioned here.

Wingify uses a commercially reasonable selection process to evaluate the security, privacy and confidentiality practices of such Processors and sub-processors. Additionally, Wingify ensures that its Processors and sub-processors satisfy contractual obligations as those required by Wingify (as a Controller or Processor as may be applicable) through requisite Data Protection Addendum (“DPA”).

Wingify provides this list of processors and sub-processors to enable Users and Customers to stay informed about the scope of processors and sub-processes associated with the Services.

1. Infrastructure

Wingify owns or controls access to the infrastructure that Wingify uses to host and process Service data submitted to the Services, and access to Service data is permitted only to Wingify employees. Currently, Wingify production systems used for hosting Service data for the Services are located in location facilities in the United States and in the infrastructure sub-processors listed below. The following table describes the countries and legal entities engaged by Wingify in the storage of Service data. Wingify also uses additional services provided by these sub-processors to process Service data as needed to provide the Services.

Infrastructure Sub-Processors- Service data Storage and Processing
Entity Name	Purpose	Location
IBM Softlayer	Cloud Hosting Services (SOC 2 Type 2, SOC 3 audited, ISO 27001, 27017, 27018 Certified)	United States
Google Cloud Platform	Cloud Hosting Services (SOC 2 Type 2, SOC 3 audited, ISO 27001, 27017, 27018 Certified)	United States

2. Content Delivery

Wingify may use content delivery networks (“CDNs”) for security purposes as well as to optimize content delivery and speed up data transmission. CDNs do not have access to Service data but are commonly used systems of distributed services that deliver content based on the geographic location, device information, telecommunication provider of the individual accessing the content and the origin of the content provider. Website content served to website visitors and domain name information may be stored with a CDN to expedite transmission, and information transmitted across a CDN may be accessed by that CDN to enable its functions.

Content Delivery Networks to optimize content delivery
CDN Provider	Description of CDN Services	CDN Location
Amazon Web Services	Cloudfront for Library served for legacy VWO Customers.	Global
Cloudflare, Inc.	For VWO Engage.	Global

3. Service Providers

Wingify utilizes third parties to provide specific functionality to facilitate the Services. These providers are the processors set forth below. In order to provide the relevant functionality, these processors may have access to Service data. Their use is limited to the indicated Services.

Service Specific Processors
Entity Name	Service Description	Location
Cloudflare, Inc.	Cloudflare, Inc. (“Cloudflare”) provides content distribution, security and DNS services for web traffic transmitted to and from the Services.  OR Secure and manage traffic to the Services, with access to URL interactions and IP addresses.	United States
Salesforce.com, Inc	Customer relationship management (CRM) platform, with access to name, email, role, and affiliation.	United States
Outreach	Sales engagement platform	United States
Aircall	Customer calling platform	United States
LinkedIn Sales Navigator	Social selling platform	United States
Zoom Info	Database of Information about business people and companies to sales,marketing and recruiting professionals	United States
Front App	Shared/collaborative inbox for sales team	United States
Getfeedback	Real time customer feedback platform	United States
Wingman	Conversation and Real time sales coaching intelligence tool	United States
Lusha	B2B lead enrichment tool	United States
G-Suite	Email communication and Internal productivity platform	India
Marketo	Marketing automation platform and database	United Kingdom
Zendesk, Inc.	Cloud-based Customer Support Services, with access to name, email, role and contact information.	United States
Intercom	Customer messaging platform, with access to name, email, IP address, and integration data.	Ireland
Clearbit	CRM insight tool. APIHub, Inc. (“Clearbit”) is a third party marketing data engine. The primary service data processed by Clearbit includes lead name, lead email address, lead company name, lead company website, contact name, contact email address, contact company name, and contact company address.	United States
Zapier, Inc.	Interconnection of customer name, email and contact information.	United States
Segment	Event tracking for applications for service improvement and support	United States
Sentry.io	Error and bug detection
NS1	Provides DNS services	United States
Slack	Messaging platform for internal notifications	India
Google Meet	Video communication service for internal and external video calls	India
Gotowebinar	Webinar and online conference tool	India
Calendly	Online appointment scheduling software	India
2Checkout	Payment gateway	United States
Docusign	Digital Transaction Management	United States
Open AI	Generating Variation Suggestion in VWO Editor	United States, European Union, Taiwan

4. Due Diligence

Wingify undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed processors and sub-processors.

5. Contractual Safeguards

Wingify generally requires its processors sub-processors to satisfy equivalent obligations required from Wingify (as a Processor or a Controller) as set forth in applicable Data Protection Addendum and Data Protection laws.

6. Process to Engage New Sub-processors

For all Customers who have executed Wingify’s standard DPA, Wingify will provide notice of updates to the list of sub-processors that are utilized or which Wingify proposes to utilize to deliver its Services. Wingify undertakes to keep this list updated regularly to enable its customers to stay informed of the scope of sub-processing associated with the VWO Services.

Pursuant to the DPA, a Customer may object in writing to the processing of its Personal Information by a new sub-processor within ten (10) days following the update of this policy and such objection shall describe Customer’s legitimate reason(s) for objection. If the Customer does not object during such a time period, the new sub-processor(s) shall be deemed accepted.

7. Updates

Wingify will keep this list updated by adding the names of new or replacement sub-processors.

If you have any questions or concerns regarding our Sub-processor or a processor, please send us a detailed message to privacy@vwo.com, and we will try to resolve your concerns.