Subprocessors.

Supabase (Postgres database + Vault for secrets) — United States. Stores your account, resume content, application activity, and onboarding state.

Vercel (application hosting + edge functions) — United States. Serves the SprintJobs website and dashboard; does not see resume content in plaintext beyond what's needed to render your dashboard for you.

Resend (transactional email) — United States. Sends magic-link sign-in emails, intake confirmations, and team notifications. Sees recipient email + message body only.

OpenAI (AI editing assistant) — United States. Receives short, redacted excerpts of your resume and target job descriptions for ATS scoring and editing suggestions. Per our agreement with OpenAI, none of this data is used to train models.

Google Identity (OAuth sign-in) — United States. If you sign in with Google, Google handles the authentication; we receive only your email and profile name. Optional — you can use a magic link instead.

We will update this list at least 30 days before adding or replacing a subprocessor. EU/UK customers under a DPA may object to a new subprocessor by emailing team@sprintjobs.us within that window; if we can't address your concern, you may terminate without penalty.

Inside SprintJobs, only your dedicated career strategist and the small team who supports them can read your full file. Engineers debugging production issues operate against synthetic data wherever possible; access to real user data is audited.

For subprocessor-related questions including the underlying DPAs: team@sprintjobs.us.