Legal
Sub-processors
The third-party services Ziinc, LLC uses to process personal data when running matchstaq.
- Effective
- July 6, 2026
- Last updated
- July 6, 2026
1. About this list
A sub-processor is a third party that processes personal data on our behalf to help us run the Service. We use the providers below. This list supplements our Privacy policy. Self-hosted software that runs within our hosting provider's infrastructure is covered by the hosting entry and is not listed separately.
2. Current sub-processors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Auth0 by Okta, Inc. | Authentication, login, and account identity | Email address, name, IP address, and authentication events | United States |
| OpenAI, L.L.C. | Parsing resumes and job postings, tailoring resumes, and generating cover letters | Resume and profile content, job-posting text, and generated documents (includes the personal data present in your resume, because the tailoring task requires it) | United States |
| Stripe, Inc. | Payment processing and subscription management | Name, email, and billing details; your full payment-card number is collected and stored by Stripe, not by matchstaq | United States |
| GitHub, Inc. (a Microsoft company) | Connecting repositories and extracting code evidence for project bullets | Repository metadata, selected file paths and code excerpts, commit identifiers, and encrypted OAuth access tokens | United States |
| DigitalOcean, LLC | Cloud hosting, managed database, and object (file) storage | All account, profile, document, and generated-artifact data stored by the service | United States |
| Dash0 GmbH | Application monitoring, logging, and error tracking | Operational logs, traces, and diagnostic metadata (may include account identifiers) | European Union |
| PostHog, Inc. | Product analytics — how the Service is used, to improve itUsed only if you accept analytics cookies. | Usage events, pages viewed, and device/browser metadata | United States or European Union (depending on the configured PostHog region) |
| Google LLC (Gemini API) | Analyzing public repositories to build structured project evidenceUsed only when repository analysis is enabled. | Public repository metadata and public code excerpts, keyed to the repository rather than to your identity | United States |
| Jina AI (an Elastic N.V. company) | Fetching and converting job-posting web pages into textUsed when you add a job target by its URL rather than pasting the posting text. | Job-posting URLs that you submit | United States |
Entries marked with a "used only when" note receive data only if the related optional feature is enabled for your account.
3. Changes to this list
We may add or replace sub-processors as the Service evolves. When we make a material change, we will update this page and revise the "Last updated" date above. We encourage you to check this page periodically.
4. Data processing agreements
Business customers: if you need a Data Processing Agreement (DPA) or have questions about how we handle data through these sub-processors, contact Ziinc, LLC at privacy@ziinc.dev.