Sub-processors

Last updated: October 25, 2026

These service providers process personal data on PMMockr's behalf. We update this list when it changes.

Infrastructure and security

Supabase: database and authentication (Tokyo, Japan; standby in Mumbai, India).

Google Cloud: backend servers (Cloud Run) and logs.

Vercel: website hosting, cookieless Web Analytics and Speed Insights (global edge).

Cloudflare: content delivery, model and asset storage (R2), Turnstile bot protection and cookieless Web Analytics (global edge).

Upstash: rate limiting and short-lived caching (Redis).

Google (Firebase Authentication): Google sign-in.

Bugsink: redacted error and crash reports; diagnostics should exclude private answers, resumes and credentials.

AI providers

DeepInfra: configured AI inference and hosted speech routes (United States).

OpenRouter: configured AI routing/fallback; downstream model providers may process the submitted text. The active route and downstream locations are recorded in the processing inventory.

OpenAI: available configured AI inference route (United States). A supported route is not a claim that every request uses that provider.

Payments and email

Razorpay: payment processing and refunds (India).

Resend and Brevo: transactional and marketing email delivery.

QuickEmailVerification: checks at sign-up that an email address can receive mail.

Analytics and marketing (only with consent)

Mixpanel: product analytics.

Microsoft Clarity: masked session recordings, heatmaps and usability analytics, loaded with the optional marketing tags.

Google (Tag Manager, Analytics 4, Ads), Meta (Pixel) and LinkedIn (Insight Tag): advertising measurement.

Ahrefs: optional cookieless website analytics, loaded after analytics consent.

Understand which provider handles a feature

Read each provider entry together with its stated purpose. A provider used for payment processing serves a different function from one used for application hosting or AI processing. The feature you use determines which parts of the service are relevant to your request. When asking about data processing, identify the feature or interaction you are concerned about and refer to the relevant provider entry. Avoid including private interview answers or unrelated personal records in the initial message. The privacy policy explains the broader handling of your data, while this list identifies supporting providers. Send questions about the list to support@pmmockr.com with the entry you want clarified.