Legal

Subprocessors

Last updated: August 5, 2026

These are the service providers that process personal data on our behalf to run RecruitFractional. Each is engaged under a written agreement with data protection terms no less protective than our Data Processing Addendum. We do not use advertising networks, data brokers, or third-party retargeting providers.

Current subprocessors

Provider	Purpose	Data processed	Processing region
Lovable (application hosting and edge delivery)	Hosts and serves the RecruitFractional web application.	Request and log data, IP address, browser metadata.	United States and global edge locations
Supabase (database, authentication, file storage)	Stores account, profile, workspace, messaging, and uploaded media data, and manages sign-in.	Account credentials, profile and company data, messages, placement records, uploaded files.	United States
Stripe	Processes subscription payments and placement fee invoices.	Name, email, billing address, subscription and invoice records. Card numbers are handled by Stripe and never stored by us.	United States and European Union
Resend (transactional email delivery)	Delivers account, notification, billing, and invoice email.	Name, email address, message content of the notification.	United States
Google Gemini via the Lovable AI Gateway	Powers AI matching and shortlist scoring.	Role requirements and executive profile text submitted for a match run. No payment data.	United States
Google Search Console	Search performance reporting for public marketing pages.	Aggregated, non-identifying search and page metrics.	United States

Change notice

We update this page at least 30 days before a new subprocessor that handles customer personal data begins processing. Customers can request email notice of changes, and can object on reasonable data protection grounds under section 7 of the DPA, by writing to privacy@recruitfractional.com.