1. What this page is
To deliver the Service we engage a small number of third parties who process personal data on our behalf. They are our sub-processors. Each one is bound by a data processing agreement that requires protection equivalent to that described in our Privacy Policy, and each may only process data on our documented instructions.
This page is the authoritative, current record of who those parties are. Our Privacy Policy describes the categories of recipient and what is shared with them; this page names them.
2. AI processing
Job analysis is carried out using a combination of our own systems and the external AI providers below. We do not send payment details, card data or contact details to any AI provider. Video files are deleted from the AI provider automatically within 48 hours.
| Processor | Purpose | Personal data | Processing location |
|---|---|---|---|
| Google LLC | AI analysis of submitted job recordings | Video recording (including audio), approximate job location | EU / USA |
| Anthropic PBC | Generating and processing follow-up questions about a job | Job description text | USA |
3. Infrastructure and operations
| Processor | Purpose | Personal data | Processing location |
|---|---|---|---|
| Google LLC (Firebase) | Authentication, database, file storage, push notifications, crash reporting | Account data, job data, uploaded files, usage and crash diagnostics | EU |
| Stripe, Inc. | Payment processing and payouts to providers | Payment and payout details | EU / USA |
| Amazon Web Services EMEA SARL | Transactional email delivery | Email address, message content | EU (eu-north-1) |
| LINK Mobility | SMS notifications | Phone number, message content | EU |
4. Changes to this list
AI and infrastructure technology moves quickly, and we may add, replace or remove sub-processors as the Service develops. This page is updated when that happens, and the consent screen in the app always names the AI providers in use at that moment.
Where a change would materially affect how your personal data is processed — for example a new category of data being shared, or processing in a new jurisdiction — we will inform you before it takes effect. Routine substitutions that do not change what is shared, why, or how it is protected are reflected here without separate notice.
5. Questions
If you would like to be notified of changes to this list, or have questions about a particular sub-processor, contact us at privacy@vor.rocks.