Privacy policy

Version 1.2 — last updated 19 August 2026

Courtesy English translation. The French version is legally binding.

1. Who is responsible?

For visitor, prospect, recruiter-account and billing data, the controller is Axel Gilbert, sole trader, SIREN 923 027 155, 5 rue Valentina Terechkova, 31400 Toulouse (see legal notice), reachable at contact@aikip.fr. For candidate data managed in a client workspace, the client company is the controller and aiKip acts as its processor under the public Data Processing Agreement.

2. Data and purposes

  • Visitors and prospects: contact messages and limited first-party audience data, to answer requests and improve public pages.
  • Recruiter users: identity, business email, profile photo, locale, authentication events, IP address, approximate connection country, browser information, sessions, security logs and support messages, to provide and secure accounts.
  • Customer companies: identity, branding, career-page content, legal and billing information, plan, payment-provider identifiers and invoices, to perform and administer the subscription.
  • Candidates: contact details, CV or DOCX, cover letter, screening answers, messages, application history, interview proposals and feedback, recruiter notes, extracted career information and AI-assisted scores/explanations, to manage recruitment for the client.

Required and optional fields are identified in the relevant form. aiKip does not request special-category data; candidates should not include information unrelated to professional aptitude.

3. Legal bases

  • Recruiter account and subscription: performance of the contract and pre-contractual steps.
  • Security, fraud prevention, support and proportionate audience measurement: legitimate interests.
  • Invoices and accounting archive: legal obligation.
  • Core application receipt and classification: pre-contractual steps requested by the candidate; the client determines and documents the appropriate basis for further assessment, including AI-assisted analysis.
  • Future-opportunity talent pool: the candidate’s separate, optional and revocable consent where selected.

Submitting an application does not turn a mandatory checkbox into consent. The displayed notice version and time are recorded as evidence of information.

4. Recipients, processors and location

Access is limited to authorized members of the relevant client and authorized aiKip personnel where support or security requires it. aiKip relies on Scaleway SAS (France: application, database, object storage and Generative APIs for CV analysis) and Mollie B.V. (Netherlands: payments and billing identifiers). Data covered by the service is processed in the European Union. The contractual list and change procedure appear in the DPA.

5. Retention

  • Recruiter and operational company data: contract term, then 30 days in read-only/export mode, then deletion.
  • Candidate data: until the client’s configured or requested deletion and, by default, no longer than 24 months after the last documented interaction, then comprehensive anonymization.
  • Invoices and their accounting snapshot: 10 years from the end of the financial year, in an isolated legal archive.
  • Minimal contract-acceptance evidence (company, user email, document version and timestamp): 5 years after account deletion, in an isolated legal archive.
  • Authentication security events (IP address, approximate country and browser): 90 days. Other security and technical logs: up to 12 months unless an incident requires longer evidence.
  • Audience measurement: detailed events 90 days; anonymous sessions no more than 13 months.
  • Expired sessions, reset links, verification links and rate-limit records: deleted automatically after their operational lifetime.

6. Your rights

Depending on the legal basis, you may request access, rectification, erasure, restriction, portability or objection and withdraw consent at any time without affecting prior processing. Candidates can use their secure tracking space or contact the relevant recruiting company; aiKip assists that company. You may also contact contact@aikip.fr. A response is normally provided within one month. You can lodge a complaint with the CNIL.

7. AI-assisted analysis

aiKip provides decision support and does not make hiring decisions. Authorized recruiters must review the application and can disregard the score. Criteria, limitations, candidate rights and human-oversight safeguards are described on the AI Transparency page.

8. Cookies and audience measurement

aiKip uses authentication cookies and limited first-party measurement cookies. Public marketing analytics and signed jobboard attribution store no IP address, precise location or candidate data and are never shared with a third party. Attribution is linked to an application only after submission so the recruiter can measure its source. The control below disables both measurements and deletes their browser identifiers. Anonymous sessions and attribution journeys are retained for no more than 13 months, and detailed events for 90 days. No advertising or third-party analytics cookie is set.

9. Security and changes

aiKip applies access control, tenant isolation, encrypted transport, password hashing, short-lived document links, backups and incident procedures. Material policy changes are dated and, where they affect an existing contract, notified under the Terms of Sale.