CareerCaseOS uses service providers only to operate the Service for individual members. We do not sell member data and we never share a member's career content with an employer.
This list is built from the same file the product's code is checked against, so it names only providers the product can actually send data to. Each entry says what the provider does, what it receives, and when.
Used to run the Service
Stripe
- What it does: Checkout, the billing portal, subscriptions, refunds and payment records.
- What it receives: The account email and the internal user id (as customer metadata), the plan and price chosen, and whatever the buyer types on Stripe's own checkout page. Card details go to Stripe directly and never reach this product.
- When: Whenever you buy or manage a paid plan.
Amazon Web Services (SES)
- What it does: An alternative sender for the same emails (Amazon Simple Email Service), used instead of Resend when chosen. Its notification service (Amazon SNS) reports bounces and complaints back.
- What it receives: The recipient's email address, a first name when the account has one, and the subject and body of each message. Bounce and complaint reports come back with the recipient's address.
- When: Whenever we send you an email, while it is our chosen email sender.
Cloudflare
- What it does: Hosts the marketing website (Cloudflare Pages). Optionally also a front door for the app: a tunnel and access check, and the two-letter country code used as a region hint for consent records.
- What it receives: Every request to the website and its response, as with any web host. When it is in front of the app, every app request and response passes through it too, including page content.
- When: Whenever you visit the website. For the app, only if we put Cloudflare in front of it.
Neon
- What it does: Stores every table of the application database (PostgreSQL) for the hosted Service (owner decision of 2026-10-11).
- What it receives: Everything the product stores.
- When: Always. It holds the database.
Vercel
- What it does: Runs the web app for the hosted Service (owner decision of 2026-10-11).
- What it receives: Everything that passes through the app.
- When: Always. It runs the app.
Optional (each receives data only when it is switched on)
Resend
- What it does: Sends sign-in links, lifecycle email, campaign email and support replies; reports delivery events back.
- What it receives: The recipient's email address, a first name when the account has one, and the subject and body of each message.
- When: Only if we choose it as our email sender in place of Amazon SES.
Postmark
- What it does: An alternative sender for the same emails, used instead of Resend when chosen.
- What it receives: The recipient's email address, a first name when the account has one, and the subject and body of each message.
- When: Only if we choose it as our email sender in place of Amazon SES.
Kit (formerly ConvertKit)
- What it does: The marketing email list, for people who agreed to marketing email.
- What it receives: The email address and the page the sign-up came from. Nothing from inside an account.
- When: Only if you agreed to marketing email and we have switched the list on.
Auth0
- What it does: Optional managed sign-in, as an alternative to the emailed sign-in link.
- What it receives: The sign-in itself happens on Auth0's pages: the email address and basic profile (name, picture) the person uses there.
- When: Only if we switch managed sign-in on and you choose to sign in that way.
Anthropic
- What it does: AI text generation for career reads and written drafts.
- What it receives: The text the feature needs for the one request, built from the person's own answers, wins and drafts for that tool.
- When: Only while AI features are switched on, and only when you run a tool that uses AI.
OpenAI (text)
- What it does: AI text generation, when we choose an OpenAI model for a feature.
- What it receives: The same text Anthropic would receive for that feature.
- When: Only while AI features are switched on, and only when you run a tool that uses AI and we have chosen OpenAI for it.
OpenAI (text-to-speech)
- What it does: Optional synthetic narrator voice for rehearsal videos, instead of the on-device voice.
- What it receives: The rehearsal script lines to be spoken (audience names are replaced before any voice is made).
- When: Only if we switch OpenAI voices on, when a practice video is voiced.
Sentry
- What it does: Server error reports, so a failure can be found and fixed.
- What it receives: The error type, code locations, the page pattern (never the full address) and a shortened, scrubbed message. Server only: nothing is collected in the browser.
- When: Only if we switch error reporting on.
GitHub
- What it does: Keeps the nightly encrypted backup copies of the hosted database, as files attached to a scheduled job.
- What it receives: An encrypted copy of everything the product stores. It is encrypted before it is stored, and the key is not in the file.
- When: Only if we switch the nightly backup on.
AI disclosure
AI features are optional, and we can switch all of them off at once. An AI provider receives only the text needed for the tool you chose to run. We do not use member content to train AI models, and no AI feature gives an employer a view of a member.
Changes
We update this list when a provider is added, removed or switched on. The Privacy Policy explains how we handle your information.
See also the Privacy Policy.