npm run check:legal.)Service Providers (Data Processors)
Version 1.0 · Last updated: 30 September 2026
CareerPilot uses the providers below to run the Service. They process personal data only on our instructions and under written terms that require confidentiality, security and restrictions on use. Where a provider uses its own sub-processors, it is responsible for them under those terms. Hosting locations we control: ⟦NOT SET: NEXT_PUBLIC_LEGAL_DATA_REGIONS⟧. See section 8 of the Privacy Policy for transfers outside Kenya.
| Provider | What they do for us | Personal data involved |
|---|---|---|
| Supabase | Database, user authentication, file storage (CVs), serverless functions | All account, profile, CV, application and payment-record data |
| Vercel | Website and API hosting, scheduled jobs | Data in transit; request logs (IP address, pages requested) |
| AI providers: OpenAI, Anthropic, Google (Gemini) and Perplexity | Generating fit analyses, cover letters, recommendations and test questions | Extracts of your CV and profile and of the job description, sent per request |
| Resend | Sending emails (service messages and applications sent by email) | Your email address, name, email content and any attached application documents |
| Safaricom (M-Pesa Daraja) | Processing mobile-money payments | Phone number, amount, receipt number |
| Google (Sign-in, Gmail API, Google Sheets) | Sign in with Google (if you choose); read-only Gmail matching (if you connect it); optional export of your application tracker to a spreadsheet (if you enable it) | Name and email; Gmail sender/subject/snippet; application-tracker rows |
| Careerjet (job search index) | Live search of external job listings when you use "Discover" (results are not stored by us) | Your search words and location, plus your IP address and browser type as the search API requires |
| Remote-job and notice sources (for example Remotive, We Work Remotely) | Supply public job listings to us when enabled (we send them no personal data) | None about you |
| ReliefWeb (UN OCHA) | Supplies public humanitarian and NGO job listings to us (we send it no personal data) | None about you |
| Meta (WhatsApp Cloud API) | Delivering WhatsApp alerts and receiving your replies (if you enable WhatsApp) | WhatsApp number, message content |
Recipients that are not our processors: employers, recruiters and job boards to whom you apply are independent controllers of the applications they receive.
We will update this list before adding a provider that processes your personal data. Questions or objections: privacy@careerpilot.co.ke.