Privacy Policy / AI sub-processors

Who receives your content

Every company that can receive what you put into CareerCraft Studio when you use an AI feature — our AI sub-processors.

Last reviewed by a person: September 28, 2026

Three kinds of company can receive your content: the companies that run the AI models, the routing service that reaches them, and a diagnostics service that records requests when we are debugging.

Your data may be sent to any of the companies listed here. If you would rather have this list in writing, email us at support@careercraft.studio and we will send you one.

If a company is not on this page, we have not knowingly sent it your content — with one exception, explained under What this page cannot cover at the bottom. This page is part of our Privacy Policy, which explains what those companies may do with what they receive.

Companies we deal with directly

We hold an account with each of these.

OpenRouter, Inc.

openrouter
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Routes each AI request to whichever company is serving the model we asked for. Your content passes through its systems.
Headquarters
United States
Our relationship
Account holder. No data processing agreement — we are seeking one.
Their rules
Privacy policyTerms

OpenRouter states it does not store prompts or responses unless an account opts in to logging. We have not opted in. That is a setting in their dashboard, not something we can prove in our code.

LangChain Inc. (LangSmith)

langchain
Only when diagnostics are switched on
What it receives
The AI request exactly as we sent it — including resume text — and the model's reply
Why
Records AI requests so we can find out why a generation failed or produced something wrong.
Headquarters
United States
Our relationship
Account holder. No data processing agreement.
Their rules
Privacy policyTerms

This one is a stored record, not a trained model — so unlike a provider's training data, it is something a deletion request can actually reach.

Companies that can run the models

These are the companies OpenRouter can pass a request to. Which one serves any given request depends on the model and on availability at that moment.

They are grouped by model, because that is the honest shape of it: one model can be served by any company in its group. The company that publishes a model is often not the company that runs it — so read the group, not the model’s name.

Gemini 3.8 Flash (via OpenRouter)

google/gemini-3.8-flash

Can be served by any of these companies:

Google AI Studio

google-ai-studio
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the AI models behind most of our features. Also converts your skills into the numeric form that powers skill matching. This is Google, reached through OpenRouter.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Content sent this way passes through OpenRouter first and is governed by Google's Cloud terms. We no longer send content to Google directly.

Gemini Embedding, for skill matching (via OpenRouter)

google/gemini-embedding-001

Can be served by any of these companies:

Google AI Studio

google-ai-studio
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the AI models behind most of our features. Also converts your skills into the numeric form that powers skill matching. This is Google, reached through OpenRouter.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Content sent this way passes through OpenRouter first and is governed by Google's Cloud terms. We no longer send content to Google directly.

Gemini 3.5 Flash Lite (via OpenRouter)

google/gemini-3.5-flash-lite

Can be served by any of these companies:

Google AI Studio

google-ai-studio
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the AI models behind most of our features. Also converts your skills into the numeric form that powers skill matching. This is Google, reached through OpenRouter.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Content sent this way passes through OpenRouter first and is governed by Google's Cloud terms. We no longer send content to Google directly.

GLM 5.3 Flash

z-ai/glm-5.3-flash

Can be served by any of these 2 companies:

Parasail

parasail
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

Together

together
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

Gemma 4 31B

google/gemma-4-31b-it

Can be served by any of these 2 companies:

Novita

novita
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

Parasail

parasail
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

Qwen3.8 27B

qwen/qwen3.8-27b

Can be served by any of these 2 companies:

DeepInfra

deepinfra
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

Parasail

parasail
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

Qwen3.8 Flash

qwen/qwen3.8-flash

Can be served by any of these companies:

Alibaba

alibaba
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
Singapore
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default. OpenRouter's registry lists its datacenters as Singapore and China.

DeepSeek V4 Pro

deepseek/deepseek-v4-pro

Can be served by any of these 2 companies:

DeepInfra

deepinfra
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

Parasail

parasail
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

DeepSeek V4.1 Flash

deepseek/deepseek-v4.1-flash

Can be served by any of these 2 companies:

DeepInfra

deepinfra
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

Parasail

parasail
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

MiMo-V2.6-Pro

xiaomi/mimo-v2.6-pro

Can be served by any of these 3 companies:

DeepInfra

deepinfra
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

GMICloud

gmicloud
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default.

Xiaomi

xiaomi
Receiving content now
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
China
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

Reached only when an administrator selects a model it serves, for a single request or as a saved setting. No feature uses it by default. OpenRouter's registry lists its datacenters as Singapore and the Netherlands.

GPT-6 Sol

openai/gpt-6-sol

Can be served by any of these companies:

OpenAI

openai/flex
Approved, not yet receiving content
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

OpenAI's flex service tier. Only our internal model-quality tests call it, to score test output written from invented example data; no feature and no administrator setting sends it user content.

GPT-6.1 Sol

openai/gpt-6.1-sol

Can be served by any of these companies:

OpenAI

openai/flex
Approved, not yet receiving content
What it receives
Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
Why
Runs the model.
Headquarters
United States
Our relationship
No contract on this path. OpenRouter's supplier, not ours.
Their rules
Privacy policyTerms

OpenAI's flex service tier. Only our internal model-quality tests call it, to score test output written from invented example data; no feature and no administrator setting sends it user content.

Why we don’t list each company’s retention rules here

We do not restate each company’s retention and training rules on this page. There are too many of them for us to keep accurate, they change without telling us, and a wrong answer in a table like this would be worse than no answer. What we can tell you is the general position, which is in our Privacy Policy: the rules differ by company, and some of them permit keeping your content and training on it. The links above go to each company’s own policy.

What this page cannot cover

Some models do not have a fixed provider. For those, the routing service picks a company for each request, at the moment the request is made. When one of those models is in use, your content may reach providers we have not named, in jurisdictions we have not named, under terms we have not reviewed. We cannot list those companies in advance, because the choice happens after the request leaves us.

The same applies, on a smaller scale, when a company we did choose is unavailable and the routing service falls back to another one.

This is the one part of this disclosure we cannot make complete. We would rather say so than publish a list that looks complete and is not.

How this page is kept current

A person maintains this page. There is one automated check: our build fails if we add an AI model whose serving companies are not listed here, so a new company cannot appear silently, and a company cannot start receiving your content without this page saying so in the same change.

But that check only compares names, and we would rather you knew its limits than trusted it further than it goes. It cannot tell that a company on this list changed its retention policy last week. It cannot see companies reached by automatic routing or by fallback. It checks what our code asks for, not what a setting in the routing service’s own dashboard might widen. Nothing watches any of that — it depends on a person looking, and the “last reviewed” date at the top is how you can tell when one last did.

If you find something here that is out of date or wrong, email us at support@careercraft.studio with the subject line “Privacy Policy Inquiry”. We would rather hear it from you than not know.