Sub-processors & Third Parties
Vin-G uses third-party service providers ("sub-processors") to help deliver our services. Where these sub-processors process your personal data on our behalf, we have Data Processing Agreements (DPAs) in place with them as required by GDPR Article 28.
| Sub-processor | Service | Data shared | Location | DPA |
|---|---|---|---|---|
| Google Analytics (Google LLC) | Usage analytics | Anonymized usage data, device type, approximate location. Only sent after cookie consent. | USA (SCC) | Google DPA |
| Stripe Inc. | Payment processing | Payment amounts, transaction tokens. No card data is ever stored by us. | USA (SCC) | Stripe DPA |
| Twilio SendGrid | Campaign email delivery | Recipient email address, sender name/email, email content for campaign emails. | USA (SCC) | Twilio DPA |
| Cloudflare (R2 object storage) | File and document storage | Uploaded files and documents (encrypted at rest with AES-256). | Global (Cloudflare network) | Cloudflare DPA |
| GoDaddy (SMTP relay) | Transactional email delivery | Recipient email address, email subject and body for transactional emails. | USA | GoDaddy MSA (contact legal@vin-g.com for details) |
| Adzuna Ltd | Job listings data (Vritti) | Search query parameters only. No user PII is sent. | UK | Adzuna ToS |
| The Muse | Job listings data (Vritti) | Search query parameters only. No user PII is sent. | USA | The Muse ToS |
| Arbeitnow | Job listings data (Vritti) | Search query parameters only. No user PII is sent. | Germany | Arbeitnow ToS |
| USAJobs (US Government) | Federal job listings data (Vritti) | Search query parameters only. No user PII is sent. | USA | Public API — no DPA required (government data) |
Changes to Sub-processors
We will update this list when we add or remove sub-processors. You may object to a new sub-processor by contacting legal@vin-g.com.