Legal
Subprocessors
Last updated 13 July 2026
These are the only third parties that can touch member data, what they process, and where. We give 30 days' notice on this page before adding a new one.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Primary database, authentication, file storage | Account, profile, CV, applications, billing records | Singapore (AWS ap-southeast-1) |
| Netlify | Application hosting, CDN, edge execution | Request metadata, IP address (transient), logs | Global edge |
| Groq | AI inference — CV tailoring, ATS scoring, opportunity summarisation | CV text and opportunity text submitted for a specific task | United States |
| Resend | Transactional email fallback (alerts, receipts, lifecycle) | Email address, message content | United States / EU |
| Brevo | Transactional email fallback | Email address, message content | European Union |
| Namecheap Private Email | Primary outbound SMTP | Email address, message content | United States |
| UddoktaPay | Payment processing (bKash, Nagad, Rocket, cards) | Name, email, amount, payment method, transaction reference | Bangladesh |
| Meta Platforms | Publishing Talenthic's own posts to Facebook and Instagram | Public post content only — no member data | Global |
AI processing
Groq is our only AI provider. CV text is sent to it solely to run a task you asked for (tailoring, ATS scoring, drafting a cover letter). We do not permit training on your data, we send the minimum text required, and results are cached so the same text is not sent twice. See the AI Disclosure for what is generated and how to opt out.
International transfers
Some subprocessors are outside Bangladesh. Transfers are covered by each provider's standard contractual clauses and their own data-processing terms, linked above.
Changes
Material additions are announced here and by email to account holders at least 30 days before they go live. Object by writing to inknamestudio@gmail.com.
