Service Providers
Version 1.0 · Effective: 29 October 2026
About this list
We use the companies below to run Appollan. Each processes personal information only for the task listed, under its own contract and data protection terms with us. We'll update this page before adding a provider that receives client information.
Hosting, storage and sign-in
- Supabase: our database, private document storage and account sign-in. Holds everything in your account. United States (US East).
- Vercel: hosts the website and dashboards, and processes each request, including your IP address, to serve pages. United States.
- Google: Sign in with Google, if you choose it (your name, email and profile picture). Global.
- Google (Gmail): holds each client's job-search mailbox, including employer emails and replies sent from it. United States and global.
- Resend: sends our emails to you, such as receipts, updates and sign-in codes. Receives your email address and the message we send. Notifications about messages say that you have one, not what it says. United States.
- Cloudflare: routes email for any mailbox on our own domain. Global.
Payments
- Paystack: card payments and subscriptions. Receives your name, email, card details and the amount. Africa and global.
- PayPal: PayPal payments and subscriptions. Receives your name, email, PayPal account and the amount. United States and global.
Security
- Cloudflare (Turnstile): checks that forms are submitted by a person, using information about your browser. Global.
- Bitwarden: the team password manager, holding passwords for the employer portal accounts we create for you. United States.
AI services
- OpenAI and Anthropic: check your materials against a job, suggest your career profile from your CV, reword your descriptions on the AI plan, and answer questions on our website. Receive document text and job descriptions with your name, email and phone number removed, and questions asked of the website assistant. They don't use this data to train their models. United States.
Analytics and advertising (only with your consent)
- Google (Google Ads and Google tag): tells us whether an ad led to a sign-up. Global.
- Meta: tells us whether an ad led to a sign-up or subscription, and receives the purchase value with your email address turned into an unreadable code. Global.
- PostHog, if enabled: website analytics. United States.
None of these receive anything if you decline analytics and advertising cookies.

