Privacy Policy

1. Introduction

Jobelix ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our website at jobelix.fr and our desktop application (collectively, the "Service").

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password, and profile details when you create an account
• Profile Data: Resume/CV, work experience, education, skills, and job preferences
• OAuth Data: When you sign in with Google, LinkedIn, or GitHub, we receive your name, email, and profile picture from these providers
• Communication Data: Messages and feedback you send to us

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and actions taken within the Service
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs

2.3 Third-Party Data

If you connect your GitHub account, we may access your public profile information and repositories to help build your professional profile. You control which data is imported and can disconnect at any time.

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve our job matching and auto-apply features
• AI Matching: To analyze your profile and match you with relevant job opportunities
• Account Management: To manage your account, process transactions, and provide customer support
• Communication: To send service updates, security alerts, and marketing communications (with your consent)
• Analytics: To understand how users interact with our Service and improve user experience
• Legal Compliance: To comply with legal obligations and protect our rights

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide you with our Service
• Consent: Where you have given explicit consent (e.g., marketing emails, OAuth connections)
• Legitimate Interests: For analytics, security, and service improvement, where your rights do not override our interests
• Legal Obligation: When required by law

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Employers: When you apply for jobs through our platform, your profile information is shared with the respective employers
• Service Providers: Third-party vendors who assist with hosting (Supabase, Vercel), payment processing (Stripe), and analytics
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain it.

7. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at privacy@jobelix.fr. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), secure data storage, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Cookies and Tracking

We use essential cookies to operate our Service and analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings. For more information, see our cookie settings in the application.

11. Third-Party Services

Our Service integrates with third-party services, each with their own privacy policies:

• Supabase: Database and authentication (Privacy Policy)
• Stripe: Payment processing (Privacy Policy)
• Vercel: Hosting and analytics (Privacy Policy)
• OpenAI: AI processing for resume parsing (Privacy Policy)

12. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.