These are the third parties Klair Technology Solutions Private Limited (Klair Labs) uses to run Cancel Desk. This page is the canonical list referenced by our privacy policy and DPA. It is deliberately short — a solo-operator product has no reason to sprawl its data across a dozen vendors.
| Who | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, database, and file storage for accounts, flows, sessions, and branding assets. | Asia Pacific (Mumbai), ap-south-1 |
| Amazon SES | Sending transactional email — sign-in links and session notifications. | Asia Pacific (Mumbai) |
| Razorpay | Payment processing for Pro/Premium subscriptions. Card and bank details go directly to Razorpay; we never receive them. | India |
| Amazon CloudFront | Content delivery — caches and serves pages from a location near the visitor. Does not store account or session data. | Global edge network |
Also worth knowing — Google Fonts, now removed. Until 26 August 2026 our pages loaded their typefaces from fonts.googleapis.com, which meant Google received the visitor's IP address for the font request. As of 26 August 2026 all fonts are self-hosted on our own domain — no font request leaves this site, and Google receives nothing.
We will update this page — with a dated entry in the change log below — at least 14 days before a new sub-processor starts handling personal data. To get an email when that happens, send hello@klairtech.com a message with the subject "Subscribe to sub-processor notices" and we'll add you to the notice list — it's used for nothing else. If you object to an addition on reasonable data-protection grounds, the route is in the DPA, section 6.
First published, moving the list out of the privacy policy to this canonical page. Initial list: Amazon Web Services, Amazon SES, Razorpay, Amazon CloudFront — unchanged from the privacy policy's original table — plus the Google Fonts note above, disclosed here for the first time. Later the same day, Google Fonts was removed entirely: all typefaces are now self-hosted, so no font request (and no visitor IP) goes to Google at all.