Sub-processors
Effective October 1, 2026. The service providers that process personal data for us, what they do and when they are used.
| Provider | What it does | Data involved | Used when |
|---|---|---|---|
| Razorpay Software Pvt Ltd (India) | Payment processing for wallet top-ups, plans and reports | Name/email, amount, payment reference | Razorpay is the active payment provider |
| Stripe, Inc. / Stripe Payments Europe Ltd | Alternative payment processing | Email, amount, payment reference | Stripe is the active payment provider |
| Cloudinary Ltd. | Storage of generated PDF reports, uploaded resumes and chat attachments | Files you upload or that we generate for you | Always for file storage |
| Twilio Inc. (SendGrid) | Delivery of service emails | Email address, name, message content | Whenever we email you |
| Anthropic, PBC | AI-written summaries in reports | Report data needed for the summary (not your account details) | Only if AI insights are enabled for your plan |
| GitHub (Microsoft Corporation) | Source of public repository / developer data; sign-in and access if you connect GitHub | Public GitHub data; your access token if you connect | When you analyse GitHub targets or connect your account |
| Sentry (Functional Software, Inc.) | Error monitoring | Technical diagnostics | Only if monitoring is enabled |
| Google LLC (Translate widget) | Optional machine translation of the page | Page content you choose to translate; your IP address | Only if you accept functional cookies and use the widget |
| Hosting and infrastructure | Runs the application, database and cache | All data described in the Privacy Policy | [HOSTING PROVIDER AND REGION] |
Integrations you connect
If you connect an applicant-tracking system (for example Greenhouse, Lever, Ashby, Workable, Recruitee, Teamtailor), Slack or a webhook, data goes to that service at your direction; it is your service provider, not ours.
Safeguards and changes
Each provider is bound by a data-processing agreement limiting it to our instructions, requiring confidentiality and security, and, for transfers from the EEA/UK, Standard Contractual Clauses or an adequacy mechanism. We update this list before adding a provider that processes customer personal data; to be told of changes or to object, write to [PRIVACY EMAIL].