Privacy Policy

1. Who We Are

Clavis Talent ("Clavis Talent", "we", "us", "our") is an AI-powered career tools platform that helps candidates create, optimize, and tailor CVs, and prepare for job interviews.

For the purposes of the General Data Protection Regulation (GDPR) and French data protection law (Loi Informatique et Libertés), Clavis Talent is the data controller of your personal data.

Contact: privacy@clavistalent.com

2. Data We Collect

Account data

• Email address (required for account creation)
• Full name (optional, used in your CV)
• LinkedIn profile URL (optional, used to import your experience)
• Password (stored as a one-way hash — we never see your password in plain text)
• Language preference (EN or FR)
• Subscription plan

CV and career data

• CV files you upload (PDF or DOCX), converted to text for AI processing
• CV content generated or optimized by our AI
• Job offer URLs and descriptions you submit for targeting
• ATS scores and fit analysis results
• Profile photo (optional, stored locally on your device only — not on our servers)

Interview data

• Interview session configuration (mode, language, job title)
• Your spoken answers, transcribed via your browser's built-in Speech Recognition API (processing happens on-device or via your browser provider — we only receive the final text transcription)
• AI-generated questions and evaluations
• Interview reports and scores

Usage data

• Actions taken within the platform (CV created, interview started) — used for service operation and abuse prevention only
• Error logs for debugging

3. How We Use Your Data

We never sell your data. We never use your CV content or interview responses to train AI models. We do not serve advertising.

4. AI Processing & Third-Party Processors

To deliver our service, we share certain data with trusted sub-processors:

Your CV and interview content sent to OpenAI is processed under OpenAI's API terms, which prohibit using API data to train their models. You can review OpenAI's privacy policy at openai.com/privacy.

5. Data Retention

We retain your data for as long as your account is active. Your plan determines how long individual CVs and interview sessions are kept:

After the retention period, CV content and interview data are automatically and permanently deleted from our servers. Your account data (name, email, subscription status) is kept until you delete your account.

When you delete your account, all personal data is permanently erased within 30 days, except where retention is required by law (e.g., billing records for 10 years under French accounting law).

6. Cookies

Clavis Talent uses essential cookies only:

• Authentication cookie — keeps you logged in between page visits (session token, HTTP-only, secure)
• CSRF protection token — prevents cross-site request forgery attacks

We do not use analytics cookies (Google Analytics, Mixpanel, etc.), advertising cookies, or any third-party tracking. Your browsing on Clavis Talent is never shared with advertisers.

Template and photo preferences are stored in your browser's localStorage (not cookies) and never transmitted to our servers.

7. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of access — request a copy of all personal data we hold about you
• Right to rectification — correct inaccurate personal data
• Right to erasure ("right to be forgotten") — request deletion of your account and all associated data
• Right to data portability — receive your data in a machine-readable format (JSON)
• Right to object — object to processing based on legitimate interest
• Right to restrict processing — request that we limit how we use your data
• Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email privacy@clavistalent.com. We will respond within 30 days. You may also export your data directly from your account settings.

If you believe we are processing your data in violation of GDPR, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at cnil.fr.

8. Data Security

We implement appropriate technical and organisational measures to protect your data:

• All data is transmitted over HTTPS/TLS
• Database access requires authentication and is not publicly accessible
• Passwords are hashed using bcrypt — never stored in plain text
• API keys and secrets are stored as environment variables, never in code
• Row-Level Security (RLS) in our database ensures users can only access their own data

In the event of a data breach that affects your personal data, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

9. Children's Privacy

Clavis Talent is intended for users aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at privacy@clavistalent.com and we will promptly delete the account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Your continued use of Clavis Talent after the effective date constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or to exercise your rights:

• Email: privacy@clavistalent.com
• Response time: within 30 days