Subprocessors
Last updated: 2026-05-17
A "subprocessor" is a third-party company we rely on to run ApplyGuide. Each one only receives the data it needs to perform its specific job. This page is the source of truth — if a provider is not listed here, we don't use it. For context on how your data flows through the product, see the privacy policy.
| Provider | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| OpenAI | Résumé parsing, scoring, optimization, and tailoring via the OpenAI API. | Résumé text, pasted job description, derived bullet points. | openai.com/policies/privacy-policy |
| Anthropic | Secondary AI provider used for select features (Claude API). | Same résumé and job-description context as OpenAI, when used. | anthropic.com/legal/privacy |
| Stripe | Payments and subscription management. | Email, billing details, card data (held by Stripe — we never see card numbers). | stripe.com/privacy |
| Google (Sign-In) | Authentication via Google OAuth (Sign in with Google). | Email, name, profile picture URL (scopes: openid, email, profile). If you opt in to the Gmail tracker, also gmail.readonly. |
policies.google.com/privacy |
| Google Ads & Google Analytics | Ad attribution and conversion tracking for paid Google campaigns. | Pseudonymous click and conversion events tied to a Google cookie. No résumé content. | policies.google.com/privacy |
| Meta (Pixel + Conversion API) | Ad attribution for paid Meta (Facebook / Instagram) campaigns. | Hashed email on conversion, page events, conversion events. No résumé content. | facebook.com/privacy/policy |
| PostHog | Product analytics and session replay. | Event names, page paths, click metadata, extension events, and during session replay the rendered page state (which can include résumé content visible on screen). | posthog.com/privacy |
| Amazon Web Services (AWS) | Hosting and infrastructure: S3, DynamoDB, Lambda, SES (transactional email), CloudFront, Secrets Manager, API Gateway. | All application data at rest and in transit. | aws.amazon.com/privacy |
| logo.dev | Company logo lookup for job-list cards and extension UI. | Company name or domain string only. No user PII. | logo.dev/privacy |
When we add or replace a subprocessor we update this page. Material changes will also be surfaced in-app or by email to signed-in users. To opt out of behavioral advertising or session replay, see the California section of the privacy policy.