CardToDeal Sub-processors

1. What is a sub-processor?

A sub-processor is a third party that Quiamo Digital Market Services LLP engages to help process personal data on your behalf when you use CardToDeal. Under our Data Processing Addendum, Quiamo is your processor; the services below are our sub-processors. We keep the list deliberately short, and we only use a sub-processor where it is needed to deliver the service reliably and securely.

2. Current sub-processors

For each sub-processor we describe its purpose, the personal data it handles, and the region in which it operates. Names refer to well-known service providers; we do not list their full legal entities here.

• AI OCR providers (Groq, Google Gemini) — convert the uploaded card image into structured text fields. Data handled: the card image and the extracted contact fields, processed in memory at request time and not retained by us afterwards. Region: United States / global.
• Cloud hosting / VPS — runs the CardToDeal application and database that back the website. Data handled: request metadata (IP, timestamp, user agent) and any data you choose to export. Region: primarily India.
• Email delivery (SMTP provider) — sends transactional messages, including magic-link sign-in and account emails. Data handled: recipient email address and message content. Region: global, depending on the provider.
• Google AdSense — serves the advertising that keeps CardToDeal free. Data handled: ad-serving signals such as cookies and approximate location, loaded only with your consent. Region: global. See our Cookie Policy for details.
• VynDeal (Quiamo) — receives contacts only when you explicitly connect and export to the VynDeal CRM pipeline. Data handled: the contact records you choose to send. Region: India / global. Operated by the same studio, Quiamo.

3. How we hold sub-processors to account

Each sub-processor is engaged under terms that impose data-protection obligations no less protective than those in our Data Processing Addendum. We use only what is necessary to run the service, apply the principle of least privilege, and remain responsible to you for each sub-processor's performance. Card images are processed in memory and are not stored by us once a scan completes.

4. Changes to this list

This list may change as we add, replace or remove services. When we intend to add or replace a sub-processor that handles personal data, we will update this page and give reasonable notice so that customers acting as controllers can object on reasonable data-protection grounds, as set out in the DPA. The effective date at the top reflects the latest version.

5. Questions

If you have questions about any sub-processor or want notice of future changes, email hello@cardtodeal.com. See also our Privacy Policy and data-rights guide.