Subprocessors
Last updated: August 29, 2026
Coivre uses the third-party providers below to deliver the service. Each processes data only as needed for its stated purpose and under its own data-protection commitments. What each of them receives, and on what legal basis, is described in our Privacy Policy.
How we announce changes
Before a new provider begins processing your data, we publish it here and, where the change materially affects you, we tell you before it takes effect. To be told directly, email maximiliano.dumont@gmail.com with the subject "Subprocessor notices". Every material change to this list is recorded in the change log below, dated.
Infrastructure
| Subprocessor | Purpose of processing | Location(s) | Sees job postings | In service since | More info |
|---|---|---|---|---|---|
| Vercel | Hosting the web application, and running the nightly retention job | EU (Frankfurt) for the application; global edge network | Yes | August 2026 | Link |
| Neon | PostgreSQL database: everything in your account | EU (Frankfurt) | Yes | August 2026 | Link |
| Railway | The worker that opens job postings and reads them | EU (Amsterdam) | Yes | August 2026 | Link |
Platform
| Subprocessor | Purpose of processing | Location(s) | Sees job postings | In service since | More info |
|---|---|---|---|---|---|
| OpenAI | Reads job postings, scores them, and drafts application emails, tailored CVs and interview preparation. Receives the posting text and your facts document. Training on our API data is disabled and API request logging is disabled; per OpenAI's published policy, abuse-monitoring logs are retained for up to 30 days and then deleted | USA for processing; the contracting entity for EEA customers is OpenAI Ireland Ltd | Yes | August 2026 | Link |
| Resend | Would deliver your application emails to employers. NOT IN SERVICE: no sending domain is configured and the application refuses to send | USA (stored in the United States regardless of the sending region) | No, account data only | Not yet in service | Link |
| Sign in with Google | USA | No, account data only | August 2026 | Link |
Payments
| Subprocessor | Purpose of processing | Location(s) | Sees job postings | In service since | More info |
|---|---|---|---|---|---|
| Stripe | Subscription billing. Running in test mode today: no card can be charged | USA / EU | No, account data only | August 2026 | Link |
Transfers outside the EEA
The application, the database and the worker that reads job postings all run inside the European Union. The providers that process outside it, principally in the United States, are named above with their location. Those transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, on the EU-US Data Privacy Framework, as set out in each provider's own agreement with us.
Change log
- August 29, 2026: The list is rewritten for this product. Twilio is removed: it delivered telephone calls for the previous product and there are no calls here. The "Caller data" column is replaced by one that says whether a provider can see the content of the job advertisements we read, which is the data belonging to people who are not our users. Every location was measured on this date against a live request rather than inherited: the application answers from Frankfurt, the database runs in Frankfurt, and the worker that reads postings serves from Amsterdam. The previous page said "USA" for two of those three, which described the providers rather than our data. Resend is listed and marked as not in service, because no sending domain is configured and the product refuses to send.
- August 25, 2026: OpenAI's row corrected and completed after reading the data processing agreement executed on August 20, 2026 and their published API documentation: the contracting entity for a European customer is OpenAI Ireland Ltd while processing happens in the United States, and abuse-monitoring logs are kept up to 30 days. Training on our API data and API request logging are both disabled for our organisation.
- July 9, 2026: Initial publication (previous product).
Contact
For any question about this list, write to maximiliano.dumont@gmail.com. For how we handle data generally, see the Privacy Policy.