Third-Party Data Sharing
A technical summary of which external services CareerStudioMax's code sends data to, and why.
What this page is: a factual, code-level account of data flows, generated by reviewing the actual integration code — not a legal document. It does not represent a compliance certification, and it does not confirm the status of data processing agreements with any listed provider.
What this page isn't: a substitute for a lawyer's review. If you need this for GDPR Art. 13/14, CCPA, or another compliance framework, have it reviewed and adapted by counsel before relying on it — in particular, confirm and document the actual DPA status with each processor below.
Which of these are actually active depends on which API keys are configured in the live deployment — a service listed here is one the code is capable of using, not a guarantee every one is switched on in every environment.
AI Inference
Powers resume analysis, interview coaching, career advice, and every AI chat feature. Your questions, resume/CV text, and career details are sent to whichever provider is handling that request.
| Service | Data sent | Purpose |
|---|
| Groq | Chat messages, resume text, career context you provide | Primary fast-inference AI engine |
| Anthropic (Claude) | Chat messages, resume text, career context you provide | Fallback AI engine when the primary is unavailable |
| OpenRouter | Chat messages, resume text, career context you provide | Secondary fallback AI engine |
Payments
Card and payment details are never stored on CareerStudioMax's own servers — they go directly to the payment processor.
| Service | Data sent | Purpose |
|---|
| Stripe | Name, email, payment method details (handled directly by Stripe, not our servers) | Subscription billing |
| Paystack / Flutterwave / PayPal | Name, email, payment method details | Regional payment processing, where enabled |
Communication
| Service | Data sent | Purpose |
|---|
| SMTP provider | Your email address, email content (notifications, verification codes, digests) | Transactional email delivery |
| Twilio | Your phone number, message content | SMS and WhatsApp notifications, where enabled |
| Telegram Bot API | Your Telegram chat ID, message content | Bot-based notifications and support, where enabled |
Voice
| Service | Data sent | Purpose |
|---|
| ElevenLabs | Text to be spoken (AI responses, interview feedback) | Text-to-speech voice synthesis |
Search & Data Enrichment
| Service | Data sent | Purpose |
|---|
| Tavily / Brave Search | Search queries derived from your questions (e.g. role, country, company names) | Live web grounding for career/market answers |
| Apify | Public profile URLs or search terms you provide | LinkedIn profile analysis and lead enrichment, where used |
| Google Cloud Translate | Page text and your questions, when a non-English language is selected | UI and content translation |
Sign-in
| Service | Data sent | Purpose |
|---|
| Google OAuth | Basic profile info you consent to share (name, email, avatar) per Google's consent screen | "Sign in with Google" |
| LinkedIn OAuth | Basic profile info you consent to share, per LinkedIn's consent screen | "Sign in with LinkedIn" |
Infrastructure
| Service | Data sent | Purpose |
|---|
| MongoDB Atlas | All account and application data | Primary database hosting |
| AWS S3 | Uploaded files (resumes, avatars), where configured | File storage |
← Back to Privacy Policy