Who Receives Your Data
Last updated 14 October 2026
This page lists every outside service that receives Job Sweet Job member data, what each one gets, and why. It is the companion to our Privacy Policy, which explains what we collect and what your rights are.
This page changes when our providers change. The Privacy Policy does not change as often — that is deliberate.
The roles
When an organization sponsors members on Job Sweet Job, that organization is the data controller: it decides what happens to its participants' information. Job Sweet Job is the data processor, acting on its instructions. The services below are subprocessors — they process data on our instructions, and we remain accountable for them.
For members who sign up directly, you are the controller of your own information and we are the processor.
Who receives member data
| Service | What it receives | When | Where |
|---|---|---|---|
| Anthropic (Claude API) | Full résumé text — name, contact details, employment history, and whatever else your résumé contains — plus the job descriptions being analyzed | Every weekly run, market report, tailoring, and job analysis | United States |
| SerpAPI | Job search queries built from your target titles and location. No résumé, no name | Every weekly run and market report | United States |
| Resend | Your name and email address | Every email we send | United States |
| Clerk | Email address and sign-in identity | Account creation and every sign-in | United States |
| Stripe | Name, email, and payment details, entered on Stripe's own checkout page | Purchases and renewals only. We never see or store card numbers | United States |
| Supabase (on AWS) | All member data at rest — the database and uploaded files | Continuously | United States |
| Cloudflare (Turnstile) | Your IP address and browser details, for a check that tells people from bots. No name, no email, no message | Only when you send a message from the contact form while signed out | United States and Cloudflare's global network |
| Render | Application hosting and request logs | Continuously | United States |
Model training
Member data is not used to train any AI model.
Anthropic's published policy for its commercial products, including the API we use, is that customer inputs and outputs are not used for model training by default. The only exception is when a customer explicitly opts in by submitting feedback through a thumbs-up/thumbs-down control. Job Sweet Job is a server-to-server integration with no such control, so that exception cannot apply to member data.
This holds because of Anthropic's commercial terms and because of how our integration is built — not because the data never leaves our systems. It does leave. It is not used to train anything.
How long each one keeps it
Anthropic deletes API inputs and outputs within 30 days. Content flagged by their automated safety systems may be held up to two years. Anthropic acts as a data processor on our instructions.
Stripe, Clerk, Resend, Cloudflare retain records under their own terms for as long as the account or record is active.
Supabase and Render hold data for as long as we do — see the retention section of our Privacy Policy, which is the honest account of what that currently means.
Changes to this list
We update this page when a provider is added, removed, or replaced. The date at the top is when it last changed. If you are a sponsoring organization and want notice of changes, email hello@jobsweetjob.com and we will add you to the list.