Subprocessors
These companies process customer data so CSuiteHQ can run. Each one handles only what its job needs. The Privacy Policy explains how we use your data.
Last updated October 20, 2026
| Company | What it does | Data it handles | Location |
|---|---|---|---|
| SupabaseDPA | Database, sign-in and file storage | Your account, resume, search criteria, Tracker and what the browser extension finds for you | United States (AWS us-east-1) |
| VercelDPA | Website and app hosting | Your account and Tracker data as the app serves it, and request logs with IP addresses | United States |
| HetznerPrivacy policy | The server that runs our nightly searches | Job listings your browser extension finds and job sources you add, read from the database during the nightly run | Germany (Nuremberg) |
| AnthropicCommercial terms | Claude, the AI that reads resumes and listings and checks them against your searchOnly once we turn on the AI features. | Your resume, the listings we score for you and your search details | United States |
| ResendDPA | Email deliveryOnly once we turn on our own email sending. | Your email address and the emails we send you | United States |
| StripeDPA | PaymentsNot in use yet. Only once paid plans start. | Payment details, handled by Stripe and never stored by us; your email address and plan | United States |
| CloudflareDPA | Email routing for listing alerts you forward to us, and encrypted backupsNot in use yet. | Emails you forward to your CSuiteHQ address; encrypted copies of the database and uploaded files | Global network |
| GooglePrivacy policy | Sign-in with Google, only if you choose itNot in use yet. Only once we turn on Google sign-in. | The name, email address and profile picture Google shares when you sign in | United States |
Questions about a subprocessor? Contact us.