Processors & Sub-Processors
Updated on July, 30,2020
Information about processors and sub-processors utilized by Wingify
Wingify Software Pvt Ltd. (“Wingify”) makes use of selected sub-processors to assist in providing the Services as defined in our Terms & Condition (“Terms”) while ensuring privacy and security as described in our Privacy Policy. Terms used on this page but not defined have the meaning set forth in our Terms.
A sub-processor is a third-party data processor retained by Wingify, who has or potentially will have access to Service data i.e. visitor of Wingify’s Customer’s website or application (which may contain Personal Information) while providing Services on our behalf. Wingify engages different types of sub-processors to perform various functions as explained in the tables below.
Wingify also collects some data from its Customers as outlined in our Privacy Policy as a Controller and uses processors as mentioned here.
Wingify uses a commercially reasonable selection process to evaluate the security, privacy and confidentiality practices of such Processors and sub-processors. Additionally, Wingify ensures that its Processors and sub-processors satisfy contractual obligations as those required by Wingify (as a Controller or Processor as may be applicable) through requisite Data Protection Addendum (“DPA”).
Wingify provides this list of processors and sub-processors to enable Users and Customers to stay informed about the scope of processors and sub-processes associated with the Services.
1. Infrastructure
Wingify owns or controls access to the infrastructure that Wingify uses to host and process Service data submitted to the Services, and access to Service data is permitted only to Wingify employees. Currently, Wingify production systems used for hosting Service data for the Services are located in location facilities in the United States and in the infrastructure sub-processors listed below. The following table describes the countries and legal entities engaged by Wingify in the storage of Service data. Wingify also uses additional services provided by these sub-processors to process Service data as needed to provide the Services.
Infrastructure Sub-Processors- Service data Storage and Processing |
||
Entity Name |
Purpose |
Location |
IBM Softlayer |
Cloud Hosting Services (SOC 2 Type 2, SOC 3 audited, ISO 27001, 27017, 27018 Certified) |
United States |
Google Cloud Platform |
Cloud Hosting Services (SOC 2 Type 2, SOC 3 audited, ISO 27001, 27017, 27018 Certified) |
United States |
2. Content Delivery
Wingify may use content delivery networks (“CDNs”) for security purposes as well as to optimize content delivery and speed up data transmission. CDNs do not have access to Service data but are commonly used systems of distributed services that deliver content based on the geographic location, device information, telecommunication provider of the individual accessing the content and the origin of the content provider. Website content served to website visitors and domain name information may be stored with a CDN to expedite transmission, and information transmitted across a CDN may be accessed by that CDN to enable its functions.
Content Delivery Networks to optimize content delivery |
||
CDN Provider |
Description of CDN Services |
CDN Location |
Amazon Web Services |
Cloudfront for Library served for legacy VWO Customers. |
Global |
Cloudflare, Inc. |
For VWO Engage. |
Global |
3. Service Providers
Wingify utilizes third parties to provide specific functionality to facilitate the Services. These providers are the processors set forth below. In order to provide the relevant functionality, these processors may have access to Service data. Their use is limited to the indicated Services.
Service Specific Processors |
||
Entity Name |
Service Description |
Location |
Cloudflare, Inc. |
Cloudflare, Inc. (“Cloudflare”) provides content distribution, security and DNS services for web traffic transmitted to and from the Services. OR Secure and manage traffic to the Services, with access to URL interactions and IP addresses. |
United States |
Salesforce.com, Inc |
Customer relationship management (CRM) platform, with access to name, email, role, and affiliation. |
United States |
Outreach |
Sales engagement platform |
United States |
Aircall |
Customer calling platform |
United States |
LinkedIn Sales Navigator |
Social selling platform |
United States |
Zoom Info |
Database of Information about business people and companies to sales,marketing and recruiting professionals |
United States |
Front App |
Shared/collaborative inbox for sales team |
United States |
Getfeedback |
Real time customer feedback platform |
United States |
Wingman |
Conversation and Real time sales coaching intelligence tool |
United States |
Lusha |
B2B lead enrichment tool |
United States |
G-Suite |
Email communication and Internal productivity platform |
India |
Marketo |
Marketing automation platform and database |
United Kingdom |
Zendesk, Inc. |
Cloud-based Customer Support Services, with access to name, email, role and contact information. |
United States |
Intercom |
Customer messaging platform, with access to name, email, IP address, and integration data. |
Ireland |
Clearbit |
CRM insight tool. APIHub, Inc. (“Clearbit”) is a third party marketing data engine. The primary service data processed by Clearbit includes lead name, lead email address, lead company name, lead company website, contact name, contact email address, contact company name, and contact company address. |
United States |
Zapier, Inc. |
Interconnection of customer name, email and contact information. |
United States |
Segment |
Event tracking for applications for service improvement and support |
United States |
Sentry.io |
Error and bug detection |
|
NS1 |
Provides DNS services |
United States |
Slack |
Messaging platform for internal notifications |
India |
Google Meet |
Video communication service for internal and external video calls |
India |
Gotowebinar |
Webinar and online conference tool |
India |
Calendly |
Online appointment scheduling software |
India |
2Checkout |
Payment gateway |
United States |
Docusign |
Digital Transaction Management |
United States |
Open AI |
Generating Variation Suggestion in VWO Editor |
United States, European Union, Taiwan |
4. Due Diligence
Wingify undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed processors and sub-processors.
5. Contractual Safeguards
Wingify generally requires its processors sub-processors to satisfy equivalent obligations required from Wingify (as a Processor or a Controller) as set forth in applicable Data Protection Addendum and Data Protection laws.
6. Process to Engage New Sub-processors
For all Customers who have executed Wingify’s standard DPA, Wingify will provide notice of updates to the list of sub-processors that are utilized or which Wingify proposes to utilize to deliver its Services. Wingify undertakes to keep this list updated regularly to enable its customers to stay informed of the scope of sub-processing associated with the VWO Services.
Pursuant to the DPA, a Customer may object in writing to the processing of its Personal Information by a new sub-processor within ten (10) days following the update of this policy and such objection shall describe Customer’s legitimate reason(s) for objection. If the Customer does not object during such a time period, the new sub-processor(s) shall be deemed accepted.
7. Updates
Wingify will keep this list updated by adding the names of new or replacement sub-processors.
If you have any questions or concerns regarding our Sub-processor or a processor, please send us a detailed message to privacy@vwo.com, and we will try to resolve your concerns.