Our sub-processors act only on our documented instructions and under a written data-processing agreement (a “DPA”) that binds them to confidentiality, security, and data-protection obligations no less protective than ours. We vet each sub-processor before engaging it and review it periodically. We give prior notice of any intended addition or replacement of a sub-processor and provide an opportunity to object, as described below.
1. Current sub-processors
As of the effective date above, aplies engages the following categories of sub-processor:
| Category | What it is used for | Safeguards |
|---|---|---|
| Payment processing | Taking payment for plans and Credit packs, billing records, and payment-fraud prevention | PCI-DSS compliant provider; aplies does not receive or store full card numbers; contractual data-protection terms and, where required, Standard Contractual Clauses |
| Hosting and infrastructure | Running the Service, storing application data, and keeping backups | Encryption in transit; access controls; contractual data-protection terms and, where required, Standard Contractual Clauses |
| AI processing | Reading a CV to learn your facts and tone, and generating answers to application questions | Contractual terms prohibiting use of your content to train the provider’s general models; data-processing agreement; where required, Standard Contractual Clauses |
| Transactional email | Sending account, billing, and service notifications you have asked for | Contractual data-protection terms and, where required, Standard Contractual Clauses |
The identity of aplies’s current sub-processors is available on written request to [email protected]. Sub-processors may process personal information in countries other than your own. Where personal information is processed outside the EEA or the UK, we rely on an adequacy decision or appropriate safeguards, including the European Commission’s Standard Contractual Clauses (SCCs) and, where relevant, the UK International Data Transfer Addendum.
2. Notice of changes and right to object
We may add or replace sub-processors as the Service evolves. aplies gives the Customer prior notice of any intended addition or replacement of a sub-processor, and the Customer may object on reasonable, data-protection-related grounds within thirty (30) days of the notice. If the parties cannot resolve the objection, the remedies in our Data Processing Agreement apply.
3. Contact
Questions about our sub-processors, requests for the identity of our current sub-processors, and requests to be notified of changes can be sent to:
aplies — [email protected]
aplies is an independent product, not affiliated with or endorsed by LinkedIn. Questions about this document: [email protected]