Sub-processors
Version 1.6 — Effective 10 October 2026
This page is the authoritative list of third-party service providers (“sub-processors”) used to deliver the Profiled platform. It is maintained independently of our Privacy Policy and updated whenever we add, remove, or replace a provider.
1. Why we publish this
A “sub-processor” is a third-party company we use to deliver part of the Profiled service. Under GDPR Article 28, the California Consumer Privacy Act, and the Australian Privacy Principles, we are required (or strongly encouraged) to be transparent about who has access to your data, what they do with it, and where they operate.
Every provider listed below is bound by a Data Processing Agreement (or equivalent contractual obligation) that limits their use of your data to providing services to us. None of these providers are permitted to use your data for their own marketing, advertising, model training, or unrelated commercial purposes.
2. Current sub-processors
The following providers process personal data on our behalf:
| Provider | Purpose | Data processed | Hosting region |
|---|---|---|---|
| Clerk | Authentication & identity | Email, name, OAuth tokens | United States |
| Cloudflare | Bot protection (Turnstile) on the forms at profiledcareers.com | IP address, browser and device signals of form visitors | Global (edge network) |
| Supabase | Database & storage | All profile and account data | United States (us-east-1) |
| Stripe | Payment processing | Email, billing address, subscription plan | United States |
| Anthropic | AI — all text features (profile chat, fit assessments, résumé extraction, support assistant) | Profile content including private context; visitor messages and job descriptions; support queries | United States |
| OpenAI | Voice AI (primary — browser-direct) and text embeddings; optional support fallback (not currently active) | Voice audio and profile-derived context, streamed browser-direct (audio does not transit Profiled’s servers); in-session transcription; profile and support text for embeddings | United States |
| LiveKit | Voice failover infrastructure — WebRTC relay plus managed STT/LLM/TTS via LiveKit Inference | Voice audio streams relayed in-flight (not stored); session prompts | United States (Cloud); EU on request |
| Deepgram | Speech-to-text on the voice failover path (via LiveKit Inference) | Voice audio, in-flight transcription only — not stored | United States |
| Cartesia | Text-to-speech on the voice failover path (via LiveKit Inference) | AI response text for speech synthesis — not stored | United States |
| Fly.io | LiveKit worker hosting | Voice session metadata, transient audio buffers | United States |
| Resend | Transactional & broadcast email | Email address, recipient name, email content; and, where delivery measurement is enabled, whether a message was opened and which links were followed | United States |
| AWeber | Newsletter & email-marketing automation | Email address, first name, subscription & engagement status | United States |
| Sentry | Error monitoring | Error context and stack traces, which may include request metadata, with personal identifiers scrubbed before transmission | United States |
| Upstash | Rate limiting & caching (Redis) | User identifiers (hashed), rate-limit counters | United States |
| Vercel | Hosting, CDN & serverless compute | Request metadata, IP address, all in-flight HTTP traffic | United States (primary); global edge cache |
3. How we notify you of changes
When we add a new sub-processor, replace an existing one, or change the data categories a sub-processor receives:
- We update this page and bump the effective date at the top.
- For material additions (a new sub-processor receiving a new category of personal data), we email all account holders with the change summary and a link to this page.
- Enterprise / Agency-tier customers under custom Data Processing Agreements may receive change notifications under additional commitments specified in their contract.
You may withdraw consent and delete your account at any time if you object to a sub-processor change. Self-service deletion is available via Dashboard → Settings → Data.
4. Not sub-processors (out of scope)
The following providers are used internally by Profiled (for operations, code hosting, or operator productivity) but do not receive personal data from the platform itself and are therefore not sub-processors under GDPR Article 28:
- GitHub — source code hosting; receives no user data
- Bitwarden — operator secret storage; receives no user data
Trustpilot is not a sub-processor either: it is an independent review platform that provides no part of the Service and processes nothing on our behalf. It is listed here because it does receive some data. Where our home page shows its “Review us on Trustpilot” button, your browser loads that button from Trustpilot, which receives your IP address, browser details and the page address and records that the button was shown; it sets no cookies. We send Trustpilot no account data. Reviews are written on Trustpilot under its own terms and privacy policy. See Privacy Policy §10.
5. Changelog
- 2026-10-10 (v1.6): Added a note on Trustpilot to “not sub-processors”: it is an independent review platform, not a provider to us, but its “Review us on Trustpilot” button receives a visitor’s IP address, browser details and the page address when it loads. No change to the sub-processor list.
- 2026-09-16 (v1.5): Added Cloudflare as a sub-processor — Turnstile bot protection now runs on the forms at profiledcareers.com, replacing a hidden-field (“honeypot”) check that silently discarded submissions. Cloudflare was previously listed under “not sub-processors” as “DNS only”; that entry was inaccurate — Cloudflare provided no service to Profiled at all, and the description referred to a separate domain. It has been removed from that section and listed here for what it now does.
- 2026-09-13 (v1.4): Expanded the Resend entry to state that, where delivery measurement is enabled, the provider also records whether a message was opened and which links were followed. Privacy Policy §10 has disclosed this since v2.3; this page described only the message content and recipient. No new sub-processor and no new practice — this closes a gap between the two pages.
- 2026-07-11 (v1.3): Added Deepgram (speech-to-text) and Cartesia (text-to-speech) — both operate on the voice failover path via LiveKit Inference, in-flight only. Corrected the Anthropic and OpenAI entries to reflect provider roles as built (Anthropic: all text AI; OpenAI: browser-direct voice and embeddings). Corrected the Sentry data description.
- 2026-07-11 (v1.2): Corrected the named operating entity to Profiled Careers Pty Ltd (ACN 698 676 309). No changes to the sub-processor list.
- 2026-06-29 (v1.1): Added AWeber (newsletter & email-marketing automation) — receives the email address and first name of people who opt in to the Profiled newsletter.
- 2026-05-20 (v1.0): Initial publication as a standalone page. Added LiveKit + Fly.io to the list (previously implicit via the voice infrastructure description in the privacy policy). Extracted from Privacy Policy §6 inline table.
6. Questions
Questions about a sub-processor, a Data Processing Agreement, or our change-notification commitments should be directed to:
- Email: privacy@profiledcareers.com
- Privacy Contact: Martin Aranovitch, Profiled Careers Pty Ltd
See also our Privacy Policy for the broader data-handling framework and your rights under GDPR, CCPA, and the Australian Privacy Principles.