1. How to read this register
A provider may act as a processor, subprocessor, or independent controller depending on the service and applicable law. This register describes the actual product data flow. It does not change a provider's contract or legal role.
2. Supabase
Purpose: Authentication, the application database, and private source-file storage.
Data: Account identifiers, career information, job records, private source files, and bounded service events.
Location: TheJobSort projects use the Singapore region. Supabase support and subprocessors may operate in other countries.
3. Vercel
Purpose: Application hosting, edge delivery, traffic measurement, performance measurement, and bounded runtime logs.
Data: Request details, device and browser details, approximate location, aggregate measurements, and privacy-safe operational events.
Location: Vercel uses a global delivery network and may process service data in the United States and other countries.
4. OpenRouter
Purpose: Routes limited AI requests to the selected model provider under TheJobSort's zero-retention provider policy.
Data: Only the résumé facts, job text, verified evidence, or draft context needed for the requested AI task.
Location: Processing location depends on OpenRouter and the selected model provider. Current Google model processing may occur outside Australia.
5. Google
Purpose: Provides selected AI models through OpenRouter, optional Google account sign-in, consent-restricted public-page advertising measurement, and verified purchase measurement.
Data: Task-limited AI content, account identity details when a user chooses Google sign-in, public page, referrer, device, browser, and general location signals when the Google tag is enabled, or actual order value, ISO currency, and an opaque order-specific transaction reference after verified payment. The advertising tag does not load in the signed-in product, account, billing, or administrator areas.
Location: Google operates globally and may process data in the United States and other countries.
6. Stripe
Purpose: Checkout, payment confirmation, refunds, and fraud controls.
Data: Payment status, transaction references, amount, currency, and refund details. TheJobSort does not receive full card details.
Location: Stripe operates globally and may process data in the United States and other countries.
7. Resend
Purpose: Account, service, operations, launch-list, and unsubscribe email delivery.
Data: Email address, message content, delivery reference, and unsubscribe headers.
Location: Resend may process email delivery data in the United States and other countries.
8. Changes and contact
We update this register before adding a provider that materially changes how personal information is processed.
Send questions to info@thejobsort.com.