Privacy notice
- Effective from
- Not yet published
How MetaClub collects, uses and protects personal data, and the rights you have over it under India's Digital Personal Data Protection Act, 2023. This document has not been published in the CMS yet.
Sub-processors
The third parties who process personal data on our behalf, what they do, and where.
| Processor | What it does | Data it touches | Where processed | Safeguard |
|---|---|---|---|---|
| Postgres (self-hosted, D26) | Database — lead records and CMS content | Enquiry details, site content | Contabo VPS (client-owned) | Access-controlled, on client infrastructure |
| Cloudflare R2 | Media storage | Uploaded images and files | Cloudflare global network | Cloudflare's data processing terms |
| Cloudflare | DNS, WAF, bot control (D17) | Request metadata, IP address | Global edge | Cloudflare's data processing terms |
| Google (GA4 and Ads, via GTM) | Analytics and advertising, consent-gated (D19) | Pseudonymous identifiers | Global | Loaded only after consent; standard contractual terms |
| Meta | Pixel and Conversions API, consent-gated (D19) | Pseudonymous identifiers | Global | Loaded only after consent |
| Microsoft Clarity | Session replay, consent-gated and PII-masked (D19) | Interaction data, masked form fields | Global | PII masking configured; loaded only after consent |
| Transactional email provider | Enquiry notifications | Name, email, enquiry text | Global | Provider data-processing terms |
| Anthropic (AI advisor, wave 2) | Conversational assistant | Conversation text | Global | Anthropic's data processing terms |