Data Processing & Sub-processors

Roblawmax is operated by ROBLAWMAX RECRUITMENT LIMITED. In most cases we act as the data controller for the personal data we handle — we decide why and how it is processed. Where we process data only on the instructions of a third party, we act as a processor. This page complements our Privacy Policy.

We process the following categories of personal data:

• Account and contact data — to create and manage your account;
• Content you provide — résumés, profiles, job descriptions and chat inputs, to generate your pivot maps and plans;
• Usage and log data — to operate, secure and improve the service;
• Billing data — to process subscriptions and payments.

We engage the following sub-processors to deliver the service. Each is bound by contract to protect personal data and to process it only as needed for its role:

• Supabase — database, authentication and file storage;
• Stripe, PayPal and Creem — payment processing and subscription billing. Where Creem is used it acts as Merchant of Record (the seller of record and invoicing party) for that transaction;
• Resend — sending transactional and mentor-cadence email;
• AI model providers — generating analyses, maps and plans from your inputs;
• Vercel — application hosting and privacy-friendly analytics.

We apply technical and organizational measures appropriate to the data we hold, including:

• encryption in transit and at rest for personal data;
• access controls that limit who can access data, on a need-to-know basis;
• use of reputable infrastructure providers with their own security programs;
• monitoring and logging to detect and respond to incidents.

No system is perfectly secure, but we work to protect your data against unauthorized access and loss.

We retain personal data only as long as needed to provide the service and meet our legal obligations, then delete or anonymize it. Because our sub-processors operate globally, personal data may be transferred to and processed in other countries. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect transferred data.

When you make a data-subject request — such as access, correction or deletion — we action it and, where relevant, relay the request to the appropriate sub-processor so the data they hold is updated or removed. To make a request, email privacy@roblawmaxjobs.com.

We may update this list of sub-processors as the service evolves. Where required, we will provide notice of material changes so you can review them before they take effect.