This document is a translation of the French version, which alone prevails in the event of any discrepancy.
1. Introduction
This policy explains to users of the Jobaiko site, published by TALVORY LLC, how their personal data is collected, processed and protected, in accordance with applicable regulations including the General Data Protection Regulation (GDPR).
2. Data collected
We collect only the data strictly needed to run the Service:
- Identity and contact: first name, last name, email address, phone number.
- Documents and background: uploaded CV files and all the content extracted from them.
- Profile photo: if the user chooses to add one.
- Usage: IP address, browser type, pages viewed, quota tracking.
- AI Coach: sign-in email, purchase and access rights, sessions, conversation text and feedback needed to track progress. Voice may be sent temporarily to the AI provider for the interview; Jobaiko does not keep an audio file.
- Application log: company, role, date, stage, reason for rejection and attachment (screenshot or PDF of the rejection email), added voluntarily by the user in their account. They serve as evidence for the guarantee and to prepare the next interviews; attachments are kept in private storage that only the user can access.
- Follow-up emails: if the user ticks the box offered at download, their email address, first name, last name, language and the date of consent.
- Downloaded CV: at each download, the content of the CV without contact details (job title, summary, experience, education, skills, languages), the chosen template and the language, linked to the CV import.
- LinkedIn profile: when the user opens the LinkedIn tab, the content of their CV without contact details (job title, summary, experience, education, skills, languages), its language and the generated texts (headline, About section, experience, skills, posts, recommendation request message), linked to the CV import and, for the full profile, to the user's account; they are deleted with the account.
- CV saved online: if the user asks for it and ticks the box provided, their full CV (including contact details and photo), the chosen template and the date of their consent, linked to their account (sign-in email address).
3. Purposes
- Running the Service: extracting, analysing and rewriting data through artificial intelligence models to produce the improved CV.
- User management: tracking usage limits that prevent abuse.
- Improving the service: anonymised analysis of usage.
- AI Coach: provide interviews, show progress, manage the pack and verify refund requests. TALVORY LLC does not use interview content to train an AI model.
- Follow-up emails: with the user's consent, sending their CV, then at most one email a day for 7 days (job search tips). With extended consent, 10 more emails are sent on day 22 and every 7 days through day 85 to ask whether the user has found a job and share a tip. Every email has a one-click unsubscribe link; users can also report finding a job to stop follow-ups.
- Daily job offers: if the user ticks the box provided, we email them, daily or weekly as they choose, up to 5 new job offers selected from the CV saved in their account. The IP address and browser used when signing up are passed to the Careerjet job search engine, which requires them for every search. Every email has a one-click unsubscribe link.
- CV statistics: measuring which paths, templates and CV contents are used, to improve the Service, without name, email address or phone number.
- LinkedIn profile: writing the texts to copy into LinkedIn and showing them again without a new calculation, including on another device. Jobaiko publishes nothing on LinkedIn.
- CV saved online: letting the user find and edit their CV on all their devices; every change is saved there automatically.
- Application pack email: when the agent has prepared an application for a job the user liked, an email goes to their account address with the link to the job ad, the CV and cover letter as PDFs and the short message. Only one email per application; another one is sent only if the user clicks “Send the pack again”. These service messages, linked to an action by the user, are not affected by unsubscribing from follow-up emails or daily job offers.
4. Sharing with third parties
- Artificial intelligence providers: the contents of your CV are sent to their interfaces for processing. These providers are contractually bound not to use your personal data to train their models.
- Hosting: secure storage of data and source code.
We never sell your personal data for third-party marketing.
For the AI Coach, Supabase provides authentication and storage, Resend delivers sign-in codes, and Google Gemini processes the exchanges needed for the interview. These exchanges may be processed outside the user's country of residence. The AI provider may retain security logs temporarily under its own terms.
Resend also delivers the CV sent by email and the follow-up emails.
Job offers: when you search for offers after your CV, the job, city and distance you choose are sent to the job service for your country (France Travail in France; Careerjet in more than 80 countries). For Careerjet, which requires it, the IP address and browser type of the device are also sent, through a relay server that does not keep these searches. Your name and contact details are never sent. When you click an offer, you leave Jobaiko for the advertiser's site, which has its own rules.
For the CV saved online, Supabase handles sign-in and storage, and Resend delivers the sign-in code.
While you type a city, suggestions come from Photon (komoot, based on OpenStreetMap data): only the text typed is sent to it, by our server, without your IP address.
5. Retention
Your documents and the CVs produced are kept temporarily so you can download them, then deleted automatically once no longer needed, normally 30 days after creation. The quota identifier (an encrypted email address) may be kept longer solely to verify fair use.
AI Coach conversation text, feedback and application log remain linked to the account during pack access, for no more than six months after purchase, and are then deleted within 30 days. Users may request earlier account deletion in “My space”. Data needed for a refund, dispute or accounting duties may be retained separately for the period required by applicable law. Account-linked progress data is not anonymous while the account can identify the user.
Follow-up email data is deleted no later than 30 days after consent for the initial series, or 100 days after consent for the extended series. Sending stops upon unsubscription or when the user reports finding a job.
The downloaded CV, stored without contact details, is kept for 12 months after its creation; its content is then automatically deleted and only usage data (template, language, date) remains. The User may request earlier deletion by writing to contact@jobaiko.com.
The CV without contact details and the generated LinkedIn profile are kept for 12 months after their last update, then deleted automatically. The user can ask for earlier deletion by writing to contact@jobaiko.com.
Sign-in codes sent by email are deleted after 24 hours.
The CV saved online is kept as long as the user uses it, then deleted automatically 12 months after its last change. The user can delete it at any time from the “My online CV” page.
The daily job offers sign-up is kept until the user unsubscribes or deletes their account; the IP address and browser are deleted upon unsubscribing; the list of offers sent is deleted after 90 days.
6. Security
TALVORY LLC protects the security and confidentiality of your data through appropriate technical measures (encrypted transmission, secured databases), to prevent destruction, loss, alteration or unauthorised disclosure.
7. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. To exercise any of these rights, write to us at contact@jobaiko.com. We undertake to handle your request promptly.