Subprocessors
These companies process data for Hire. The terms are in Skillflo's Privacy Policy.
AI in Hire
Hire does not train AI models on your data, and asks OpenRouter to route only to providers that keep none of it. Suggestions on People we found come from Microsoft-Decision-1 on OpenRouter, or Flo when it has no answer, from a sender's name, address and email counts, never a subject or a message. Inbox sorting uses the same model on the newest email from the other side, trimmed and without addresses. Summaries come from OpenAI's GPT-6 Luna on OpenRouter. Flo, which writes drafts and answers you, runs on OpenAI. Flo never reads a teammate's mail that isn't linked to a job.
Supabase
Hire's database, sign-in and file storage.
- Receives
- Every record, account and file in Hire.
- Where
- Singapore.
Vercel
Hosts Hire's web app and server code.
- Receives
- Every request to Hire and the data each page shows.
- Where
- Server code runs in Singapore. Static files are served from Vercel's global network.
Soniox
Turns speech into text when you talk to Flo.
- Receives
- Your microphone's audio, streamed from your browser while you dictate. Also the names on screen (the page title, the table cells in view and the records Flo has shown, up to 60) so it spells them right.
- Where
- United States.
- Kept
- Soniox stores no audio or text from live dictation and does not train on it. Hire never receives the audio and keeps no transcript. The text becomes a Flo message only when you send it. Each person can dictate for 60 minutes in any 24 hours.
OpenAI
The AI model behind Flo.
- Receives
- What you ask Flo and the records Flo reads to answer. A meeting's transcript, from Echo or added by you, and your notes on a call, so Flo can propose its outcome and the changes it implies. The text of a CV you upload, so Flo can fill the Candidate's details. The CV file itself stays in Hire.
- Where
- Outside Singapore.
OpenRouter
If you connect Gmail: decides who to suggest on People we found and sorts your Inbox with Microsoft's decision model (Microsoft-Decision-1, on Azure), and writes each conversation's summary with OpenAI's GPT-6 Luna.
- Receives
- For suggestions: a sender's name, address and domain, and how many emails and meetings you had with them, never a subject or a message. For sorting and summaries: only the newest email from the other side in a conversation that is already in Hire: its subject, what the sender newly wrote (no quoted history, signature or footer, at most 2,000 characters), whether the sender is a Candidate or a Contact, and your own sorting rules and tags, with no addresses, names, attachments or earlier emails. Mail that Hire's rules settle (you wrote last, a no-reply sender) is not sent.
- Where
- United States.
- Kept
- Hire asks OpenRouter to route only to providers that do not keep or train on the data. Hire stores only the result: the suggestion, the view, the reason and the summary.
Composio
Connects your Gmail to Hire, if you connect it.
- Receives
- Access to your mailbox, each new email in it, and the drafts Flo writes for you.
- Where
- United States.
- Kept
- Composio keeps the mail that passes through it in its logs for up to a year.
Cloudflare
Runs Flo between your message and the model.
- Receives
- Flo's messages, the records it reads while it works, and CV text on its way to the model.
- Where
- Asia Pacific where Cloudflare can place it. Flo's conversation history is stored in Supabase in Singapore.
Sign in with Google, and Google Calendar if you connect it.
- Receives
- Your sign-in identity. With Calendar connected, the events Hire reads. Hire never changes your calendar.
- Where
- Google's own services.
Microsoft
Sign in with Microsoft, and Outlook Calendar if you connect it.
- Receives
- Your sign-in identity. With Calendar connected, the events Hire reads. Hire never changes your calendar.
- Where
- Microsoft's own services.
Resend
Sends invitation emails, and receives the job applications emailed to a Job's application inbox.
- Receives
- For an invitation: the invited person's email address, the inviter's name and the agency's name. For an application: the whole email, including the CVs attached.
- Where
- Sent and received in Tokyo. Resend keeps its logs and email metadata in the United States.
- Kept
- Hire copies each CV into its own storage within minutes. Resend has no way to delete one received email, so Resend keeps the email for its plan's retention period.
logo.dev and Twenty Icons
Company logos.
- Receives
- Company website domains, from your browser.
- Where
- Their own services.
Brandfetch
Suggests companies while you type a company name, and names a new company from a work email's domain.
- Receives
- The name you type, or the domain of a work email you type, from your browser.
- Where
- Their own services.
The Companies API
Fills in company details when you add a company with a website, or when you ask it to.
- Receives
- The company's website domain.
- Where
- Their own service.
Sentry
Error reports.
- Receives
- What went wrong and where. Reports leave out message bodies, CVs, transcripts and credentials.
- Where
- Sentry's own service.
PostHog
Product analytics and session replays.
- Receives
- Which pages and buttons members use, counted by member and Agency id, and replays with every word and input masked. No names, CVs, notes or messages.
- Where
- United States.
Credits
Logos provided by Logo.dev. Places from GeoNames, licensed under CC BY 4.0. Hire uses a subset: cities of 15,000 people or more, with their region names and short alternate names.
Updated 13 October 2026.