CV-Scope

นโยบายความเป็นส่วนตัว & GDPR

อัปเดตล่าสุด : 2026-03-17

1. Data Controller

Cavalier Studios (Paul Cavalier — SIRET 10123597600012 — 6 r de Saché, 37190 Cheillé) acts as data controller for user account and product operation data.

2. Data Categories

We may process:

  • Identity and account data (email, hashed password)
  • CV files and extracted text
  • Generated analyses and job search history
  • Technical and security logs (IP addresses, timestamps)

3. Purposes & Legal Bases

Processing is based on:

  • Contract performance — service delivery, AI analysis, job matching
  • Legitimate interest — security, quality improvement, fraud prevention
  • Consent — AI-powered CV analysis, optional communications

3b. Audience measurement

With your consent (Art. 6(1)(a) GDPR), we use Google Analytics 4 and Microsoft Clarity to understand how CV-Scope is used and improve it. Refusing has no effect on the service. We also keep anonymous first-party visit statistics (page, country, language, traffic source; no cookie, no link to an account) on the basis of our legitimate interest in measuring audience. See the Cookie Policy.

4. AI Subprocessors

Some processing involves AI providers acting as subprocessors. Data sharing is limited to what is strictly necessary to execute your request. No personal data is used for model training.

5. Retention

Uploaded source files are retained for a maximum of 2 day(s) then purged automatically. Account and billing records are kept as required by applicable law. Anonymous visit statistics are deleted after 13 months; Google Analytics and Clarity data follow the retention settings configured in each tool.

6. Your GDPR Rights

You may exercise your rights to: access, rectification, deletion, portability, restriction, and objection. You may also withdraw consent at any time when consent is the legal basis.

7. International Transfers

If data is processed outside the EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required. Google Analytics and Microsoft Clarity may process data outside the EEA, only after you consent; these providers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

8. Security

We implement technical and organisational measures including encrypted sessions, secure cookie settings, hashed passwords, and access controls.

9. Contact & Complaints

To exercise your rights: [email protected].
You may also lodge a complaint with your local supervisory authority (for France: CNIL).

10. Related legal documents

See also the Legal Notices, the Terms and Conditions, the Terms of Sale, and the Cookie Policy.