Subprocessors

CAREERSBAR LTD uses the following subprocessors to deliver careersstat. Each operates under a written agreement with confidentiality, security, and data protection obligations. We update this page before adding or replacing a subprocessor; organisation customers with a DPA can subscribe to change notifications by emailing privacy@careersbar.com.

Stripe Payments Europe / Stripe Inc. — payment processing, subscription billing, invoicing. Location: EU/US (SCCs + UK addendum). Receives: name, email, billing details. Card data is held by Stripe only.

OpenAI, L.L.C. — AI text generation for analysis features. Location: US (SCCs + UK addendum). Receives: feature queries and statistical context only; no training on customer content.

Google Ireland Ltd (Gemini API) — AI text generation. Location: EU/US. Receives: feature queries and statistical context only; no training on customer content.

Twilio SendGrid — transactional email (magic links, receipts, notifications). Location: US (SCCs + UK addendum). Receives: name, email address, email content.

Hosting provider (VPS, EU region) — application and database hosting, encrypted backups. Receives: all platform data at rest.

Official statistics shown in the product (ONS, Nomis, DfE, Eurostat and similar) are public open-data sources. We send them no personal data beyond standard server request metadata.

Organisation customers may object to a new subprocessor on reasonable data protection grounds within 30 days of notice, per the DPA at /dpa. If we cannot accommodate the objection, you may terminate affected services with a pro-rata refund of prepaid fees.