Paatya

Sub-processors

Version 2026-10-15, in force from 15 October 2026

These are the service providers Paatya uses that may handle personal data, what for, and where. It forms part of our Data Processing Agreement. We update this page before adding a new one.

Amazon Web Services

  • What for: hosting the application, its database, and stored files and videos.
  • Where: India (Mumbai region).

ZeptoMail (Zoho)

  • What for: sending the platform's and academies' emails: invitations, sign-in and sign-up codes, password resets, reminders, receipts and course news.
  • Data: the recipient's name and email address, and the email's content.
  • Where: India.

Razorpay

  • What for:
    • taking recharge payments from academies;
    • taking learners' payments for courses an academy sells online, and transferring each academy's share to its Razorpay account (Route);
    • verifying an academy's payout account (KYC) before it can receive course payments.
  • Data:
    • for payments: the payer's name, email, mobile number and payment details, the amount, and the order reference;
    • for payout accounts: the academy's legal name, contact person, email, mobile, address, PAN, GSTIN if any, and bank account.
  • Where: India.

Meta (WhatsApp Business Platform)

  • What for: sending WhatsApp alerts to academy admins and platform admins who switch them on: balance and recharge alerts, account notices and a daily summary.
  • Data: the admin's WhatsApp number and first name, the academy's name, and the alert's content, such as balances, amounts and daily counts. No learner's name or contact details.
  • Where: outside India, including the United States.

Google Analytics

  • What for: measuring visits to public pages, only for visitors who accept analytics cookies.
  • Data: a random identifier, pages visited, approximate location and device type. No names, emails or form contents.
  • Where: United States and elsewhere.

Cloudflare Turnstile

  • What for: telling people from automated signups on the Paatya signup form and on academies' student sign-up forms.
  • Data: browser and device signals, and IP address.
  • Where: global.