Privacy Policy

1. Introduction

Job Verdict (hereinafter "we", "our", or "the Service") is committed to protecting the privacy and personal data of its users.

This Privacy Policy describes how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller is:

For any questions regarding this policy, you may contact us through our help center or directly at the email address above.

3. Data Collected

3.1 Registration Data

When creating your account, we collect:

• Email address
• First and last name (optional depending on authentication method)
• Authentication data (hashed password or OAuth tokens)

3.2 Service Usage Data

When using the Service, we collect:

• Content of uploaded or entered CVs
• Job offers submitted for analysis
• Analysis results
• Analysis history
• Account preferences and settings

3.3 Technical Data

We automatically collect:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent
• Cookie data (see Cookies section)

3.4 Payment Data

For premium subscriptions, payments are processed by secure third-party providers (Stripe). We do not store any complete banking information.

4. Purposes of Processing

Your data is collected and used to:

• Provide and improve the CV and job offer analysis Service
• Manage your user account and preferences
• Process your payments and manage subscriptions
• Communicate with you regarding the Service (notifications, updates, support)
• Improve our artificial intelligence algorithms
• Analyze Service usage and produce anonymized statistics
• Ensure the security of the Service and prevent fraud
• Comply with our legal obligations

5. Legal Basis for Processing

The processing of your data is based on:

• Contract performance: providing the Service you requested
• Your consent: for certain marketing communications (revocable at any time)
• Our legitimate interest: improving the Service, ensuring security, analyzing usage
• Legal obligations: tax, accounting, and regulatory compliance

6. Data Sharing

We do not sell or rent your personal data to third parties.

Your data may be shared with:

6.1 Service Providers

• Web hosting and databases (Vercel, Supabase)
• Artificial intelligence services (OpenAI, Anthropic)
• Payment processors (Stripe)
• Analytics and monitoring services

These providers are contractually required to protect your data and may only use it for the specified purposes.

6.2 Legal Obligations

We may disclose your data if required by law or in response to a valid legal proceeding.

7. International Transfers

Some of our service providers may be located outside the European Union.

In such cases, we ensure that appropriate safeguards are in place (standard contractual clauses, Privacy Shield, etc.) to protect your data in accordance with the GDPR.

8. Data Retention

We retain your data as follows:

• Account data: for the duration of your active account, then 3 years after last activity (legal obligation)
• CVs and analyses: as long as you maintain your account and wish to access them
• Payment data: in accordance with statutory accounting obligations (10 years)
• Technical data: maximum 13 months

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: delete your data (under certain conditions)
• Right to restriction: restrict the processing of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us through our help center. We will respond within one month.

You also have the right to lodge a complaint with the CNIL (French National Commission for Data Protection and Liberties).

10. Cookies

We use cookies to improve your experience on the Service.

Types of cookies used:

• Essential cookies: necessary for the operation of the Service (authentication, security)
• Performance cookies: analyze Service usage
• Functional cookies: remember your preferences

You can manage your cookie preferences through your browser settings.

11. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Data encryption in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication and password hashing
• Strict access controls
• Access monitoring and logging
• Regular backups

12. Minors

The Service is not intended for persons under 16 years of age. We do not knowingly collect personal data from minors.

13. Policy Changes

We may modify this Privacy Policy. Significant changes will be notified to you by email or via a notification on the Service. The date of the last update is indicated at the top of this page.

14. Contact

For any questions regarding this Privacy Policy or to exercise your rights, contact us through our help center.