Subprocessor List

A subprocessor is a third-party provider that processes personal data on our behalf to help us run Callings.ai. This page lists our current subprocessors, what each one does, the categories of data it handles, and where it operates. It is the authoritative, living version of the list referenced in our Privacy Policy.

Each subprocessor processes data under its own agreement and only as needed to provide its service. No subprocessor uses your content to train AI models, and we do not sell your personal information.

Last updated: October 1, 2026.

Infrastructure and Security

AI and Content Generation

We may use any of the providers below to generate or analyze the content you request, such as resumes, cover letters, reports, job matches, search results, images, and voiceovers. They receive only the content needed for the task. We only use AI providers whose terms prohibit training their models on your content, and we never enable any option that would allow it. Where a provider keeps content at all, it is only for a limited period for abuse monitoring, after which it is deleted.

Identity and Profile Enrichment

We may use any of the providers below to find public professional information about you, such as your job title, employer, and public profile, so your profile and first job matches are useful straight away.

Directory of Professionals

We build our directory of independent recruiters, career coaches, resume writers, and career programs from public sources. To find a professional's own website and public listings, we send search providers the professional's name and, when known, their business name and city. These providers never receive data about our members. To keep each listing current and summarize what a professional publishes about their services and prices, we send the text of their public web pages to an AI provider, routed only to hosting providers that retain no data. To summarize the public client reviews of a professional, we search review platforms by their name and summarize those pages in our own words; we keep neither ratings nor what reviewers wrote.

Payments

Email, Messaging, and CRM

Analytics and Advertising (only with your consent)

These run only if you accept cookies. If you decline, they are disabled. The advertising measurement below runs only on our public marketing pages, plus one sign-up conversion reported when you create an account.

Consent management

This one runs before you make a cookie choice, because it is what asks you.

Sign-In and Connected Accounts

Contracted Personnel

Some engineering and database work is carried out by contracted specialists rather than employees. They work inside our own systems, under our direction, using individual accounts that we issue, control, and can revoke at any time. Because no personal data is transferred to their systems or processed on their own infrastructure, they are treated as authorized personnel rather than as a subprocessor, and so are not listed in the tables above. They are bound by confidentiality obligations equivalent to those of our employees, and some of them work outside the United States. Institutional customers can request further detail, including the name of the contracting company, under a confidentiality agreement.

AI Assistants You Connect Yourself

Callings can be connected to an outside AI assistant (Claude, ChatGPT and other products that speak the same open standard) so that the assistant can answer questions about your own job hunt. When you set that up, the assistant reads your Callings data and what it reads passes through the company that runs it.

These companies are not listed as subprocessors above, for the same reason contracted personnel are not: the relationship runs the other way. They do not process your data on our behalf under our instruction. You choose the assistant, you authorize it in your own browser, it acts as your agent, and the terms that govern the conversation are the ones you accepted with that company, not ours. We hold no data-processing agreement with them covering it, and saying otherwise on this page would be inaccurate.

What that means in practice:

• Nothing is connected unless you connect it, and no assistant is connected by default.
• The connection reads your account only, never another user's, and it cannot see your password or payment details.
• We never receive your conversation with the assistant.
• You can see and revoke every connection from Settings > Integrations in your account, which ends its access immediately.

The full detail of what a connected assistant can read and change is in our AI Assistants security and privacy page.

Providers That Do Not Receive Your Personal Data

To run job discovery and networking, we also use job-data feeds, search, and page-fetching providers that receive only a search query or a public web address, never your resume, profile, or account data. Because they do not process your personal data, they are not listed as subprocessors above.

Changes to This List

We update this page when we add or remove a subprocessor. The date at the top reflects the most recent change. For material changes, we update our Privacy Policy and may notify you.

Questions

To ask about a specific provider or request more detail, email [email protected].

Related Topics

• Trust Center - How we protect your data
• Data and Privacy FAQ

Transparency about who touches your data is part of earning your trust. This list stays current so you always know who helps us run Callings.ai.