Third Parties and Subprocessors
Last updated: 11 November 2026 · Part of the Privacy Policy
We use the outside services below to run Pamposhun. Each receives only the data it needs to do its job for us, and may not use it for anything else. We do not sell personal data to anyone, and no advertising company receives it.
1. Services that process data for us
| Provider | What it does for us | Data it receives | Based in |
|---|---|---|---|
| Supabase | Database, sign-in, file storage (resumes, application screenshots) and daily backups | All account, profile, resume and application data | Singapore |
| Amazon Web Services (Lightsail) | Runs the Pamposhun website and its scheduled jobs; short-lived cache (Redis) on the same server | Request details (IP address, browser), server logs, cached profile data | Singapore |
| Cloudflare | Domain and DNS, bot check on sign-up and sign-in (Turnstile), cookieless visitor counts (Web Analytics), and receiving mail sent to your Pamposhun job inbox | IP address and browser signals; emails employers send to your job inbox address | Global |
| Brevo | Sending email (main provider) | Name, email address, email content | EU (France) |
| Resend | Sending email (backup provider) | Name, email address, email content | USA |
| Groq | AI: reading resumes, matching, tailoring, cover letters, interview practice | Resume text, job descriptions and the text you send to AI tools | USA |
| OpenRouter | AI (backup route to open models, used if Groq is unavailable) | Same as Groq | USA |
| DeepSeek | AI (backup, used only if the providers above are unavailable) | Same as Groq | China |
| Anthropic | AI (paid backup, switched off by default) | Same as Groq, only if switched on | USA |
| Browserless | A cloud browser that fills in, and with your approval submits, job application forms | Your approved answers, your resume file, the employer's form page | USA |
| Sentry | Error reports from our servers and from your browser (no cookies) | Account ID, technical error details (personal data removed where possible) | USA |
| PostHog | Product analytics, only if you accept analytics cookies | Account ID, pages viewed and clicks (page text masked) | USA |
| Google Fonts | Serves the Inter typeface used on our pages | IP address and browser details (sent by your browser when a page loads the font) | USA |
| Stripe | Payments for paid plans (not switched on yet) | Name, email, billing details; card numbers are held by Stripe, never by us | USA / India |
The AI providers are tried in the order shown: a request goes to a backup provider only if the ones before it are unavailable.
2. Employers you apply to
When you approve an application, or it meets your Autopilot rules, your application goes to that employer through its hiring system, for example Greenhouse, Lever, Ashby or Workday. The employer, not Pamposhun, decides what happens to it next, under the employer's own privacy policy. These employers are separate controllers, not our subprocessors.
3. When the law requires it
We disclose personal data to courts, police or regulators only when the law requires it, or to protect someone's life or safety. Where we are allowed to, we tell you first.
4. Changes
We update this page before a new provider starts receiving personal data. If a change matters to you, we will also tell you in the app.
Questions? Email privacy@pamposhun.com. This page is written in plain English on purpose; if anything is unclear, ask us and we will explain.