Sub-processors

MyJobs Tracker · early access · plain-English summary

This page lists the third-party "sub-processors" we use to run MyJobs Tracker — companies that process personal data on our behalf. It supplements our Privacy Policy. We keep it current and will update it when we add, remove or switch a provider.

This document is written in English; the Chinese text is a courtesy translation for convenience. If the two versions differ, the English version prevails.

Infrastructure & storage

Cloudflare, Inc. — hosting, the D1 database (your structured data), R2 storage (uploaded CVs, photos, screenshots, voice notes), Workers, Browser Rendering, Web Analytics (cookieless) and Turnstile (anti-bot at sign-up and, after repeated failed attempts, at sign-in and password reset). Processes service data — and, for visitors who have not signed up, limited data for the free public sponsor-licence checker: salted, one-way IP hashes used to rate-limit it, plus bare usage events. United States / global edge.

AI gateway & providers

Depending on the feature and model, relevant content (e.g. your CV text, a job description, your chat with AhBiao, or an uploaded image/voice note for extraction) is routed through our AI gateway to generate output. Most processing is in the United States under zero-data-retention; our optional Mistral models are processed in the EU. None are in China.

OpenRouter, Inc. — our AI gateway — routes most models to US-based inference providers under zero-data-retention — United States
OpenAI (via Microsoft Azure) — GPT models — United States
Anthropic (via Amazon Bedrock) — Claude models — United States
Google (via Google Vertex AI) — Gemini models + image/voice extraction — United States
DeepSeek, Qwen & GLM (open-weight) — via US inference hosts (e.g. Fireworks, DeepInfra, Together) — United States
Mistral AI (direct) — our optional European models — EU (France); EU-default under zero-data-retention (some Mistral sub-processors may process outside the EU under SCCs)

We have a Data Processing Agreement with OpenRouter and with Mistral AI; zero-data-retention means these providers do not retain or train on API-submitted content. We do not sell your data or train our own models on it.

Email, payments, analytics & sign-in

Resend — transactional & product emails (receives your email address and the message content) — United States
Stripe, Inc. — card payments (when paid plans are live); Stripe handles card details, we never see your full card number — United States / global
Google Analytics 4 (Google LLC) — optional website analytics, loaded only if you accept analytics cookies — United States
Google / Apple — only if you choose social sign-in (receives the email/identity needed to authenticate you) — United States

Stripe and the sign-in providers (Google / Apple) also act as independent controllers for their own services under their own privacy policies.

International transfers to the US are covered by the safeguards described in our Privacy Policy — the Article 46 standard data protection clauses (the UK IDTA, or the UK Addendum to the EU SCCs) under our OpenRouter agreement, supported by our Transfer Risk Assessment — plus a zero-data-retention policy across all AI providers. Transfers to the EU (Mistral AI, France — only if you choose a Mistral model) rely on the UK's adequacy regulations for the EU/EEA, with zero-data-retention and Standard Contractual Clauses for any onward non-EU sub-processing.

Last reviewed: 6 July 2026.

本页列出我们运营 MyJobs Tracker 所使用的第三方"子处理方"——代表我们处理个人数据的公司，是对我们《隐私政策》的补充。我们会保持更新，在新增、移除或更换提供商时更新本页。

本文件以英文撰写；中文文本仅为方便阅读提供的参考译文。如两种版本存在差异，以英文版本为准。

基础设施与存储

Cloudflare, Inc. —— 托管、D1 数据库（您的结构化数据）、R2 存储（上传的简历、照片、截图、语音）、Workers、Browser Rendering、Web Analytics（无 Cookie）与 Turnstile（注册时及多次尝试失败后登录/密码重置时的防机器人验证）。处理服务数据——对于未注册账户的访客，还处理免费公开担保资质查询的有限数据：用于对其限流的加盐单向 IP 哈希，以及不含标识符的使用事件。美国／全球边缘节点。

AI 网关与提供商

视功能与模型而定，相关内容（如简历文本、职位描述、与阿彪的聊天，或用于提取的上传图片/语音）会经我们的 AI 网关路由以生成输出。大部分处理在美国、于零数据保留政策下进行；我们可选的 Mistral 模型在欧盟处理；均不在中国。

OpenRouter, Inc. —— 我们的 AI 网关 —— 在零数据保留政策下将大部分模型路由至美国推理服务商 —— 美国
OpenAI（经 Microsoft Azure）—— GPT 模型 —— 美国
Anthropic（经 Amazon Bedrock）—— Claude 模型 —— 美国
Google（经 Google Vertex AI）—— Gemini 模型及图片/语音提取 —— 美国
DeepSeek、Qwen 与 GLM（开源权重）—— 经美国推理主机（如 Fireworks、DeepInfra、Together）—— 美国
Mistral AI（直连）—— 我们可选的欧洲模型 —— 欧盟（法国）；以欧盟为默认并处于零数据保留之下（其部分子处理方可能依据 SCC 在欧盟以外处理）

我们与 OpenRouter 及 Mistral AI 均签有数据处理协议；零数据保留意味着这些提供商不会保留 API 提交内容或用其训练模型。我们不出售您的数据，也不使用其训练我们自己的模型。

邮件、支付、分析与登录

Resend —— 事务性与产品邮件（接收您的邮箱地址与邮件内容） —— 美国
Stripe, Inc. —— 卡支付（付费方案上线后）；由 Stripe 处理卡信息，我们绝不查看完整卡号 —— 美国／全球
Google Analytics 4（Google LLC） —— 可选网站分析，仅在您接受分析 Cookie 时加载 —— 美国
Google / Apple —— 仅当您选择社交登录时（接收用于身份验证所需的邮箱/身份信息） —— 美国

Stripe 及登录提供商（Google / Apple）就其自身服务亦作为独立控制者行事，适用其各自的隐私政策。

向美国的国际传输由我们《隐私政策》所述的保障措施覆盖——我们与 OpenRouter 协议下的第 46 条标准数据保护条款（英国 IDTA，或对欧盟 SCC 的英国附录），并辅以我们的传输风险评估（TRA）——以及覆盖所有 AI 提供商的零数据保留政策。向欧盟（法国的 Mistral AI——仅当您选择 Mistral 模型时）的传输依据英国对欧盟/欧洲经济区的充分性认定，辅以零数据保留，并对其在欧盟以外的任何后续子处理适用标准合同条款。

最后审阅：2026 年 7 月 6 日。

Cookie settings