Sub-processors

Version 2026-10

These are the companies that process personal information for Wipperoz, what each one does, and where. This list shares its version with our Privacy Policy and our Data processing agreement: a change here publishes a new version of all three (Privacy Policy, section 2.1).

Orbit customers are told by email at least 30 days before we add or replace a sub-processor, and may object, as the Data processing agreement sets out.

Where your data is hosted

All Wipperoz systems, and the personal information they hold, are hosted by Amazon Web Services in the United States, in the us-east-1 region (Northern Virginia). The providers below receive only the information they need for the task described.

Infrastructure

Amazon Web Services (AWS)

• What it does — cloud hosting, databases and their backups, file storage, computing, sign-in, transactional email (Amazon SES), and the face and document checks for identity verification (Amazon Rekognition and Amazon Textract). Public images and media are delivered through its global content delivery network, and images are resized at its edge locations
• Data — all personal information held by the Services
• Where — United States (us-east-1). Delivered media is cached temporarily in edge locations close to the viewer, and the logs of image resizing are kept for 30 days in the AWS region where it happened
• Used by — Virtual CV, Orbit, website

Vercel

• What it does — hosts our website and web apps, caches public Virtual CV pages for a few minutes, receives CVs people try out on our website, and measures page speed
• Data — IP address, browser and device details, pages requested, public Virtual CV pages, and CVs uploaded on our website
• Where — United States, served from a global edge network
• Used by — Virtual CV, Orbit, website

AI

OpenAI

• What it does — the AI model provider behind CV writing, rewriting, translation and checks (including the ATS check), PDF-to-CV conversion, cover letters, chat and interview practice, job matching, Orbit matching and fit assessments, reading CVs imported into Orbit, AI screening interviews, and the CV people try out on our website
• Data — the CV content, prompts, job details and interview answers needed for the output requested
• Where — United States
• Used by — Virtual CV, Orbit, website
• Note — does not use this data to train its models. Keeps what we send and what it returns for up to 30 days, to detect abuse and to complete answers that take more than one step. Files sent for bulk job matching stay with OpenAI until they are deleted

Payments and accounting

Stripe

• What it does — payment processing, invoices, payment methods, and working out the country we charge tax for
• Data — name, email address, billing address, payment method details, transaction history, and the IP address of the person paying
• Where — United States
• Used by — Virtual CV, Orbit

Xero

• What it does — accounting records for sales and invoices
• Data — for Orbit customers, the billing name and email address on the invoice. Virtual CV sales are recorded without the buyer’s name
• Where — United States
• Used by — Orbit

Analytics and monitoring

PostHog

• What it does — product analytics, and recordings of sessions in the Virtual CV app, kept for 30 days. Recordings hide standard form fields but show other text on the screen, including CV content
• Data — account identifier, email address, pages and features used, what is on the screen during a recorded session, device and browser details, IP address
• Where — United States
• Used by — Virtual CV and website (on the website, only after a visitor accepts analytics), and events our servers record for Virtual CV and Orbit

Google (Google Analytics and Google Ads)

• What it does — website analytics, and counting sign-ups that came from our ads, on the marketing website only, after a visitor accepts analytics. Personalised advertising and Google signals are turned off, and restricted data processing is on
• Data — pages visited, device and browser details, IP address, cookie identifiers
• Where — United States
• Used by — website

Sentry

• What it does — error monitoring, with recordings of about 1 in 10 sessions in the Virtual CV app and of the moments before an error, in which all text and media are hidden
• Data — account identifier, email address, device and browser details, the error and what led to it
• Where — United States
• Used by — Virtual CV, and our servers, which also run Orbit

Documents and communication

Carbone

• What it does — turns a CV or cover letter into a Word or PDF document when you download one
• Data — the content of that document
• Where — European Union (France)
• Used by — Virtual CV

Brevo

• What it does — the welcome email, and marketing emails to people who have agreed to receive them
• Data — name, email address, language, marketing preference
• Where — European Union (France, Germany and Belgium)
• Used by — Virtual CV, Orbit

Slack

• What it does — internal alerts to the Wipperoz team when something fails or needs attention, including possible sign-up fraud
• Data — an account identifier or email address, where an alert needs it. Alerts about possible sign-up fraud include an email address and an IP address
• Where — United States
• Used by — Wipperoz staff only

ipapi.co

• What it does — tells us the country and currency of a person’s IP address when they sign up
• Data — IP address
• Where — United States
• Used by — Virtual CV

OpenCage

• What it does — finds addresses people type, such as the location of a Community Board post or a job
• Data — the address text typed, and the IP address of the browser that sends it
• Where — European Union (Germany)
• Used by — Virtual CV, Orbit, website

Intercom

• What it does — in-app support chat
• Data — name, email address, account identifier, and support conversations
• Where — United States
• Used by — Virtual CV
• Note — being removed. This entry will be taken off the list once the removal is complete

Services you choose to connect

These are used only if you choose to, and handle your data under their own privacy policies. They are not our sub-processors.

• Google Sign-In — if you sign in with Google
• Google Calendar, Microsoft Outlook and Apple iCloud calendars — if you connect a calendar in Orbit or Virtual CV to schedule interviews. We read free/busy times only
• Apple Wallet and Google Wallet — if you add your Virtual CV to a wallet. For Apple Wallet, Apple also sends us a device identifier and push token so that we can update the pass
• Credly and Microsoft Learn — if you add a certification they issued. We send only the identifier in the badge link, to confirm it

Questions

privacy@wipperoz.com