Home Pricing Contact

Privacy policy

1. Data controller

The data controller is Axel Gilbert, sole trader (SIREN 923 027 155, 5 rue Valentina Terechkova, 31400 Toulouse — see legal notice), reachable via the contact form or by email at contact@aikip.fr. For candidate data processed on behalf of client companies, aiKip acts as a processor (art. 7 of the Terms of Sale).

2. Data collected

Recruiter side:

  • Identity: first name, last name, work email
  • Company: legal name, SIRET, VAT number, billing address
  • Authentication: hashed password (bcrypt 12 rounds), sign-in history, sessions
  • Billing: Mollie identifiers, issued invoices, subscription status

Candidate side (collected only with explicit consent):

  • Identity: first name, last name, email, phone
  • CV in PDF format (≤ 10 MB)
  • Cover letter
  • Data automatically extracted from the CV by AI (skills, experience, education)
  • Matching score generated by AI

3. Purposes

  • Managing applications on behalf of the using company
  • Authentication and service security
  • Billing and subscription management
  • Transactional communication (email verification, password reset, notifications)
  • Anonymized internal statistics

4. Legal basis

  • Explicit consent for the application (art. 6.1.a GDPR)
  • Performance of the contract for recruiter data (art. 6.1.b GDPR)
  • Legal obligation for accounting data (art. 6.1.c GDPR)

5. Subprocessors

aiKip relies on the following subprocessors, all established in the European Union:

  • Scaleway SAS (France): application hosting, database, object storage
  • Mollie B.V. (Netherlands): payment processing
  • Scaleway Generative APIs (France): CV analysis and scoring (Mistral Medium model)

No data transfer outside the EU is carried out. No subprocessor is subject to the US CLOUD Act.

6. Retention period

  • Recruiter data: duration of the subscription + 30-day grace period after cancellation
  • Candidate data: 24 months from the last interaction, then automatic anonymization (daily gdpr-cleanup cron)
  • Invoices: 10 years (accounting obligation)
  • Technical logs: 12 months

7. Data subject rights

In line with the GDPR, you have the following rights:

  • Right of access to your data
  • Right of rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to portability
  • Right to object to processing
  • Right to withdraw your consent at any time
  • Right, regarding AI-assisted analysis, to human intervention and to contest a decision (art. 22 GDPR) — see AI Transparency

To exercise these rights, contact contact@aikip.fr, which is also the data-protection contact point. A reply is provided within 30 days maximum. For candidate data, requests are handled together with the client company acting as controller.

8. Cookies

aiKip uses only a single cookie strictly necessary for authentication (HTTPS session cookie, HttpOnly, SameSite=Lax). No advertising or third-party analytics cookie is set.

9. Complaint

If you disagree with the processing of your data, you can lodge a complaint with the CNIL (www.cnil.fr).