Subprocessors

MongoDB Atlas / MongoDB — Application database and product data persistence. | Data: Account data, customer content, operational metadata. | Location: Cloud (provider regions) | https://www.mongodb.com/legal/privacy-policy

OpenAI — AI inference (text, realtime voice/transcription in Recruit, embeddings and assistants). | Data: Prompts, product context, transcripts; audio in transit for voice flows. | Location: United States / provider regions | https://openai.com/policies/privacy-policy

Anthropic — Claude model inference for Decision Intelligence / Recruit tasks as configured. | Data: Prompts and product context required for the task. | Location: United States / provider regions | https://www.anthropic.com/legal/privacy

Google Gemini / Google AI — Gemini model inference where enabled per product. | Data: Prompts and product context. | Location: United States / provider regions | https://policies.google.com/privacy

Tavily — Web search / evidence for Decision Intelligence analysis. | Data: Search queries and minimum necessary context. | Location: United States / provider regions | https://tavily.com/privacy

Amazon Web Services (S3) — File storage (e.g. Recruit CVs; editorial media). | Data: User-uploaded files and object metadata. | Location: AWS regions configured by Collabai | https://aws.amazon.com/privacy/

Mercado Pago — Payment and subscription processing. | Data: Billing and transaction data; Collabai does not store full card PANs. | Location: LATAM / provider regions | https://www.mercadopago.com.ar/privacidad

Stripe — Optional payment processing in MVP flows when the gateway is configured. | Data: Billing and transaction data. | Location: United States / provider regions | https://stripe.com/privacy

Zoho (SMTP) — Transactional email delivery. | Data: Email addresses and transactional message content. | Location: Provider regions | https://www.zoho.com/privacy.html

Resend — Optional transactional email delivery. | Data: Email addresses and message content. | Location: United States / provider regions | https://resend.com/legal/privacy-policy

Google Tag Manager / Google Analytics 4 — Product analytics subject to cookie consent where required. | Data: Online identifiers, usage events, device/browser data. | Location: United States / provider regions | https://policies.google.com/privacy

Redis / Upstash — Caching, rate limiting, and operational queues. | Data: Technical identifiers and ephemeral operational data. | Location: Provider regions | https://upstash.com/trust/privacy.pdf