Privacy Policy / AI sub-processors
Who receives your content
Every company that can receive what you put into CareerCraft Studio when you use an AI feature — our AI sub-processors.
Last reviewed by a person: July 29, 2026
Three kinds of company can receive your content: the companies that run the AI models, the routing service that reaches them, and a diagnostics service that records requests when we are debugging.
Your data may be sent to any of the companies listed here. If you would rather have this list in writing, email us at support@careercraft.studio and we will send you one.
If a company is not on this page, we have not knowingly sent it your content — with one exception, explained under What this page cannot cover at the bottom. This page is part of our Privacy Policy, which explains what those companies may do with what they receive.
Companies we deal with directly
We hold an account with each of these.
OpenRouter, Inc.
openrouter- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Routes each AI request to whichever company is serving the model we asked for. Your content passes through its systems.
- Headquarters
- United States
- Our relationship
- Account holder. No data processing agreement — we are seeking one.
- Their rules
- Privacy policyTerms
OpenRouter states it does not store prompts or responses unless an account opts in to logging. We have not opted in. That is a setting in their dashboard, not something we can prove in our code.
Google LLC
google- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the AI models behind our features today, reached directly rather than through OpenRouter. Also converts your skills into the numeric form that powers skill matching.
- Headquarters
- United States
- Our relationship
- Account holder. No data processing agreement.
- Their rules
- Privacy policyTerms
The skill-matching path only ever goes to Google and is never routed elsewhere.
LangChain Inc. (LangSmith)
langchain- What it receives
- The AI request exactly as we sent it — including resume text — and the model's reply
- Why
- Records AI requests so we can find out why a generation failed or produced something wrong.
- Headquarters
- United States
- Our relationship
- Account holder. No data processing agreement.
- Their rules
- Privacy policyTerms
This one is a stored record, not a trained model — so unlike a provider's training data, it is something a deletion request can actually reach.
Companies that can run the models
These are the companies OpenRouter can pass a request to. Which one serves any given request depends on the model and on availability at that moment.
They are grouped by model, because that is the honest shape of it: one model can be served by any company in its group. The company that publishes a model is often not the company that runs it — so read the group, not the model’s name.
Claude Haiku 4.5
anthropic/claude-haiku-4.5Can be served by any of these 3 companies:
Anthropic
anthropic- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Azure
azure- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Amazon Bedrock
amazon-bedrock- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
DeepSeek V4 Flash
deepseek/deepseek-v4-flashCan be served by any of these 16 companies:
DeepInfra
deepinfra- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Baidu
baidu- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- China
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
StreamLake
streamlake- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- China
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
AkashML
akashml- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- Not stated
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
DigitalOcean
digitalocean- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- Not stated
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Alibaba
alibaba- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- Singapore
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Headquartered in Singapore; OpenRouter records its data centres as Singapore and mainland China.
Venice
venice- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Morph
morph- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Ionstream
ionstream- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Parasail
parasail- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Fireworks
fireworks- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Ambient
ambient- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- Not stated
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- None recorded
OpenRouter's provider registry lists no privacy policy and no terms for this company, and no headquarters. We are naming that gap rather than leaving the row looking complete.
Cloudflare
cloudflare- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
AtlasCloud
atlas-cloud- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policy
OpenRouter's provider registry lists no terms of service for this company.
CoreWeave
coreweave- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- United States
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Mancer 2
mancer- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- Not stated
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
GPT-OSS 20B (free of charge)
openai/gpt-oss-20b:freeCan be served by any of these companies:
Darkbloom
darkbloom- What it receives
- Resume text, work history, skills, saved job postings, and chat messages — whatever the feature needs, sent as written
- Why
- Runs the model.
- Headquarters
- Not stated
- Our relationship
- No contract. OpenRouter's supplier, not ours.
- Their rules
- Privacy policyTerms
Serves a model published by OpenAI. OpenAI itself receives nothing — the company that publishes a model is often not the company that runs it.
Why we don’t list each company’s retention rules here
We do not restate each company’s retention and training rules on this page. There are too many of them for us to keep accurate, they change without telling us, and a wrong answer in a table like this would be worse than no answer. What we can tell you is the general position, which is in our Privacy Policy: the rules differ by company, and some of them permit keeping your content and training on it. The links above go to each company’s own policy.
What this page cannot cover
Some models do not have a fixed provider. For those, the routing service picks a company for each request, at the moment the request is made. When one of those models is in use, your content may reach providers we have not named, in jurisdictions we have not named, under terms we have not reviewed. We cannot list those companies in advance, because the choice happens after the request leaves us.
The same applies, on a smaller scale, when a company we did choose is unavailable and the routing service falls back to another one.
This is the one part of this disclosure we cannot make complete. We would rather say so than publish a list that looks complete and is not.
How this page is kept current
A person maintains this page. There is one automated check: our build fails if we add an AI model whose serving companies are not listed here, so a new company cannot appear silently, and a company cannot start receiving your content without this page saying so in the same change.
But that check only compares names, and we would rather you knew its limits than trusted it further than it goes. It cannot tell that a company on this list changed its retention policy last week. It cannot see companies reached by automatic routing or by fallback. It checks what our code asks for, not what a setting in the routing service’s own dashboard might widen. Nothing watches any of that — it depends on a person looking, and the “last reviewed” date at the top is how you can tell when one last did.
If you find something here that is out of date or wrong, email us at support@careercraft.studio with the subject line “Privacy Policy Inquiry”. We would rather hear it from you than not know.