Legal
Subprocessors
Last updated 1 November 2026 · version 2026-11-01
These are the outside services that process personal data so HrThroo can work, what each one receives, and where. Each receives only what its job needs, and none may use candidate data to train AI models. When we add one, it's listed here first.
Services we use
| Service | What for | What it receives | Where |
|---|---|---|---|
| Supabase | Database | All workspace and candidate records | Mumbai, India |
| Vercel | Hosting the website and the app | Requests to the service, and the data they carry | India and other regions (global network) |
| Vercel Blob | File storage | Uploaded CVs, call and interview recordings | United States |
| Resend | Account emails (sign-in, invitations, receipts) | Your name and email address, and the email's content | United States |
| Razorpay | Payments | Billing contact and payment details you enter in its checkout | India |
| OpenRouter, and the AI model providers it routes to | AI screening, criteria suggestions, summaries and reports | CV and transcript text needed for the task, and the job's criteria | United States and other countries, depending on the model |
| Sarvam AI | Speech recognition and synthesis for calls and interviews | Call and interview audio | India |
| LiveKit | Real-time calls and interviews | Call and interview audio and video while the session runs | Global network, routed to the nearest region |
| Upstash | Queues for scheduled work | Record identifiers needed to run the next step | Global, with the nearest region used |
Services our customers control
Each customer connects its own email provider (such as Google Gmail, Zoho Mail or another SMTP service) and its own telephony provider for the phone number calls are placed from. Emails and calls pass through those providers under the customer's own agreements with them. They are chosen by the customer, not by us.
What changed
- 2026-11-01: First published.