Subprocessors
| Company | Location | Purpose | Data | Since |
|---|---|---|---|---|
| Hetzner · Hetzner Online GmbH | Finland | Servers for the application, database and cache | All account data and content stored in Tuned | September 15, 2026 |
| Cloudflare · Cloudflare, Inc. | USA; files are stored in the EU (R2, EU jurisdiction) | File storage, website delivery, DNS, network protection, bot check on the sign-in screen | Uploaded and generated files, IP address and request metadata, browser signals from the bot check | September 15, 2026 |
| Anthropic · Anthropic, PBC | USA | AI processing: tailoring, cover letters, reading imported resumes, base improvements | Resume content with contact details removed or replaced as described in the Privacy Policy, job postings | September 15, 2026 |
| OpenAI · OpenAI OpCo, LLC | USA | AI processing for the same tasks, on some plans or steps | Same as Anthropic | September 15, 2026 |
| TypeSafe · TypeSafe AI, Inc. | USA | AI decisions without generated text: relevance of education to a job posting, whether a suggested edit improves a line and stays true to the resume, whether a question is already answered by the resume | Resume content with contact details removed, suggested edits to it, job posting text | September 22, 2026 |
| Sentry · Functional Software, Inc. | USA; data stored in the EU (Germany) | Error reports from the server and the application, and page load measurements of the application | Error type and place in our code, its text with email addresses, identifiers, numbers and quoted text removed, page path without identifiers, browser and operating system. No account, IP address, cookies or document content | September 25, 2026 |
| Resend · Plus Five Five, Inc. | USA | Sending emails: sign-in codes and service notices | Email address, email content | September 15, 2026 |
| Rybbit | EU (Germany, Finland) | Website statistics for tunedhq.io only; never inside the application | Page address, referrer, campaign tags, IP address (hashed with a daily salt, not stored), browser and device, named events without free text | September 20, 2026 |
| Fastmail · Fastmail Pty Ltd | Australia; mail is stored in the USA | Mailboxes for support and privacy requests | Messages you send us, your email address and anything you include | September 15, 2026 |
Independent controllers
These companies receive data when you use their services through Tuned, and are responsible for it under their own policies. They are not our subprocessors.
| Company | Role |
|---|---|
| Polar Software, Inc. (USA) | Merchant of record for card payments outside Russia: checkout, taxes, invoices, refunds |
| The payment service named on the checkout page | Accepting payments with Russian bank cards, when this option is available |
| Google LLC, LinkedIn Corporation, GitHub, Inc. | Sign-in, if you choose it: they tell us your email address and name |
Changes to this list
We add a subprocessor to this page before it starts processing personal data, and for a material change we notify users by email at least 14 days in advance. In an emergency, for example to replace a provider that has failed, we may change a subprocessor sooner and will update the page without delay.
If you object to a new subprocessor, write to privacy@tunedhq.io. If we cannot address the objection, you can stop using the Service and ask us to delete your account; see the Privacy Policy.
Change log
- September 15, 2026 — first published version.