Transparency
Service providers and data transfers
These providers help us operate Kugiro or handle messages sent to us. Where a provider acts as our processor, we use an agreement under Art. 28 GDPR as required. International transfers use the safeguards stated below. Groq and OpenAI receive data only when the corresponding AI feature is enabled.
| Provider | Purpose | Data processed | Location | Safeguard |
|---|---|---|---|---|
| Supabase | Database, authentication and storage of all account data | Email, display name, search profile, CV text, saved jobs, reviews | EU project region; support and subprocessors may operate globally | DPA; EU Standard Contractual Clauses or another Art. 44 ff. GDPR safeguard where required |
| Vercel | Application hosting, serverless compute and CDN | Request metadata (IP, user agent), session cookies, any data processed by the app | USA (global edge network) | DPA; EU Standard Contractual Clauses or an applicable adequacy decision |
| Resend | Transactional email and the optional daily digest | Email address, email content (job matches in the digest) | USA | DPA; EU Standard Contractual Clauses or an applicable adequacy decision |
| ImprovMX | Forwarding messages sent to Kugiro contact addresses | Sender address, message content, attachments and delivery metadata | USA / global infrastructure | Provider data protection terms; EU Standard Contractual Clauses where applicable |
| Google (Gmail) | Mailbox used to receive and answer support and privacy requests | Sender address, message content, attachments and correspondence history | EU and global infrastructure | Applicable Google data protection and transfer terms |
| Groq | AI processing: CV parsing, job relevance judging, keyword suggestions | CV text you upload, scanned job descriptions, target roles | USA | DPA; EU Standard Contractual Clauses where required |
| OpenAI | Semantic ranking embeddings (optional; only if enabled) | Your search-profile text and CV summary, job descriptions | USA | DPA; EU Standard Contractual Clauses where required |
Questions about our providers or data processing: privacy@kugiro.com. See also our Privacy Policy.