Legal
Subprocessors
Last updated 1 November 2026 · version 2026-11-01-r2
These are the outside services that process personal data so HrThroo can work, what each one receives, and where. Each receives only what its job needs, and none may use candidate data to train AI models. When we add one, it's listed here first.
Services we use
| Service | What for | What it receives | Where |
|---|---|---|---|
| Supabase | Database | All workspace and candidate records | Mumbai, India |
| Vercel | Hosting the website and the app | Requests to the service, and the data they carry | India and other regions (global network) |
| Vercel Blob | File storage | Uploaded CVs, call and interview recordings | United States |
| Resend | Account emails (sign-in, invitations, receipts) | Your name and email address, and the email's content | United States |
| Razorpay | Payments | Billing contact and payment details you enter in its checkout | India |
| OpenRouter, and the AI model providers it routes to | AI screening, criteria suggestions, summaries and reports | CV and transcript text needed for the task, and the job's criteria | United States and other countries, depending on the model |
| Sarvam AI | Speech recognition and synthesis for calls and interviews | Call and interview audio | India |
| LiveKit | Real-time calls and interviews | Call and interview audio and video while the session runs | Global network, routed to the nearest region |
| Upstash | Queues for scheduled work | Record identifiers needed to run the next step | Global, with the nearest region used |
| Google Analytics (through Firebase) | Website analytics on hrthroo.com and the help centre, only with the visitor's consent | Pages visited, approximate location, browser and device type, against a random identifier. Nothing from the app or candidate pages | United States |
Services our customers control
Each customer connects its own email provider (such as Google Gmail, Zoho Mail or another SMTP service), its own telephony provider for the phone number calls are placed from, and, if it chooses, its own WhatsApp Business account (WhatsApp, from Meta Platforms). WhatsApp messages are sent from the customer's own number and carry the candidate's phone number and the message content. Emails, calls and messages pass through those providers under the customer's own agreements with them. They are chosen by the customer, not by us.
What changed
- 2026-11-01-r2: Added Google Analytics (Firebase) for consented website analytics; listed the agency's own WhatsApp Business account among services customers control.
- 2026-11-01: First published.