Subprocessors
Template: not legal advice
This page is a starting template. It describes what the software does, but it has not been reviewed by a lawyer and must not be published until a qualified lawyer has reviewed it and every highlighted placeholder has been replaced.
Effective: [EFFECTIVE DATE]
Companies that process your data for us
[COMPANY LEGAL NAME] uses the companies below to run JobFinder. Each is bound by a data processing agreement ([TRANSFER MECHANISM, e.g. standard contractual clauses] where data leaves your country), and we list a new one here before it starts receiving data. Questions or objections: [DATA PROTECTION CONTACT EMAIL].
| Company | What it does | Data it receives |
|---|---|---|
| Anthropic (Claude models) | AI language model: reads CVs into a profile, scores jobs, tailors CVs, writes letters and interview material. | CV content, profile and preferences, job descriptions, the text you type into those features. Only with your AI consent. |
| Voyage AI | Embeddings: turns CV and job text into numeric vectors for matching. | CV content and job descriptions. Only with your AI consent. |
| Stripe | Card payments and subscriptions (checkout page hosted by Stripe). | Email address, plan, payment details entered on Stripe's page (not visible to us), reference numbers. |
| Paystack | Payments and subscriptions in supported local currencies (checkout page hosted by Paystack). | Email address, plan, payment details entered on Paystack's page (not visible to us), reference numbers. |
| [EMAIL DELIVERY PROVIDER] | Delivers our emails: verification, password reset, digests, alerts and reminders. | Your email address and the content of the email. |
| [HOSTING PROVIDER] | Hosting of the application, database, cache, message queue and private file storage. | All data described in the privacy policy, stored encrypted where the provider supports it. |
| Sentry (only if enabled for this deployment) | Error reporting for the web app and the servers. | Error details and request identifiers, with emails, phone numbers, tokens and CV text removed before sending. |
| Google (only if you choose Google sign-in) | Sign-in. We verify the sign-in token Google gives your browser. | Google tells us your verified email address and a stable account identifier. |
Not subprocessors
The job boards and employer career pages we read listings from receive no data about you. When you apply, you do it on their site and their own privacy policy applies. The JobFinder browser extension, if you install it, talks only to JobFinder.
Data processing agreement
Business customers who need a data processing agreement with [COMPANY LEGAL NAME] should write to [DATA PROTECTION CONTACT EMAIL]. [A DPA TEMPLATE FOR THE LAWYER TO COMPLETE IS IN docs/compliance/dpa-template.md.]