Catalyst AI & Tech, LLC
Subprocessors
These are the subprocessors we use to run Catalyst Interviews. For employer organisations this is the list referred to in the Subprocessors section of the Data Processing Addendum, and it is the list behind the Privacy Policy.
A subprocessor receives only the data listed for it. Recording is optional: the recording server and recording storage handle data only when a candidate chooses to be recorded.
| Subprocessor | Purpose | Data it receives | Region |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage (CVs, recordings, data exports) and server-side functions. | All application data: account and profile, interviews and transcripts, CVs, recordings and audit records. | Frankfurt, Germany (AWS eu-central-1) |
| Amazon Web Services (Amplify Hosting) | Serves the web application. | Web requests, IP addresses and session cookies. Pages are rendered here, but no application database is kept here. | eu-north-1 (Stockholm) |
| Amazon Web Services (EC2 recording server) | Receives the live recording stream, checks it and passes it to storage. Used only when a candidate chooses to be recorded. | Recording video and audio in transit and on a short-lived disk buffer. Logs carry no names or IP addresses. | Stockholm, Sweden (AWS eu-north-1) |
| Amazon Web Services (Simple Email Service) | Sends account, invitation, reminder and digest emails. | Recipient email address, name and the content of each message. | eu-north-1 (Stockholm) |
| OpenAI | Runs the live voice interview and produces scores, feedback, CV and job-description analysis, code review and whiteboard grading. | Name, target role and experience level; CV content and job descriptions; live voice audio, transcripts, code and whiteboard images. | United States |
| Stripe, Inc. | Card payments outside Egypt, and organisation subscriptions, invoices and the customer portal. | Order or organisation identifiers, user id, and for subscriptions the organisation name and billing contact email. Card details are entered with Stripe and never reach us. | United States (Stripe's global network) |
| Kashier | Card payments in Egypt. | Email address, an account reference, the order and the amount. Card details are entered with Kashier and never reach us. | Egypt |
| PostHog | Error monitoring and product analytics: pages viewed, clicks and product-usage events, to understand and improve the Service. | Redacted technical error events. For analytics: pages viewed (link codes removed), clicks without on-screen text, browser and device details, IP address (for approximate location) and an analytics cookie, under a pseudonymous identifier when you are signed in. No name, email address or interview, CV or answer content, and no session replay. | United States (PostHog US Cloud) |
How we tell you about changes
We give at least 30 days' notice before adding or replacing a subprocessor, by email to organisation administrators and by updating this page with a new date and version. To receive notices as a subscriber, email privacy@catalystai.llc with the subject "Subprocessor updates". Organisations can object as set out in the Data Processing Addendum.
Requests made from your browser
A few services are contacted directly by your browser rather than by us on your behalf. They receive your IP address and standard request details, and we list them here for transparency.
| Subprocessor | Purpose | Data it receives | Region |
|---|---|---|---|
| jsDelivr, Google Fonts | Static files loaded in your browser, such as the Python runtime in coding rooms and a font in the CV builder. | Your IP address and browser details, as with any web request. | Global content delivery network |
| Meta Platforms Ireland Ltd (Meta Pixel) | The Meta Pixel, on our business marketing pages only, to measure our advertising to companies. It is not used in the app or on candidate, interview or report pages. | The page viewed, your IP address, browser details and Meta cookies, and whether you joined the company waitlist or created an organisation. | Ireland, with transfers to the United States |
Questions
Questions about our subprocessors: privacy@catalystai.llc.
Catalyst Interviews is operated by Catalyst AI & Tech, LLC, a Delaware limited liability company. Registered office: 131 Continental Dr, Suite 305, Newark, Delaware 19713, County of New Castle. Registered agent: Legalinc Corporate Services Inc. Nothing on this site is legal advice. If you need advice about your rights, consult a qualified attorney in your jurisdiction.