Who handles candidate data for us.
Agencies use ResumeDOG to process their candidates’ personal data. These are the services that handle it on our behalf, what each one does, and where it is based.
Last updated
| Service | What it does | Data it handles | Based in |
|---|---|---|---|
| Render | Hosting for the website, the API and the conversion workers, including the store that holds sign in sessions and the queue of conversions. | Everything passing through the service while it is processed | Servers in Frankfurt, Germany (EU) |
| Supabase | The database and file storage. | Accounts, workspaces, CVs, uploaded files, converted files | Servers in Ireland (EU) |
| OpenAI | Reads a CV’s text and arranges it in the house format; translates between its twelve languages; rewrites, suggests and tailors text when those features are used; turns voice recordings into text. | CV text, job descriptions pasted in, voice recordings | United States |
| Mistral AI | Reads the text out of scanned documents (optical character recognition). | Uploaded CV files that need reading as images | France (EU) |
| Stripe | Card payments for agency plans, on Stripe’s own checkout page. | Billing contact and card details (card numbers never reach ResumeDOG) | Ireland (EU) and the United States |
| Email delivery | Sends the emails a user asks the service to send, such as a CV sent to an employer. | Recipient address, the message, attached CVs | The email provider configured for the service |
Data processing agreement
For the candidate data an agency puts into ResumeDOG, the agency decides what happens to it and ResumeDOG processes it on the agency’s behalf. That relationship is set out in a data processing agreement.
Our data processing agreement is being finalised with our legal advisor. Until it is published here, ask your ResumeDOG contact for a copy, and it will be sent to you.
Changes to this list
When a service is added or replaced, this page and the privacy policy change together, and the date above changes with them.
How long data is kept and how it is deleted is in the privacy policy.