Privacy policy

Nesma Consulting (see the legal notice). Data protection contact: contact@passmatch.fr.

Account: email address, name, identifier from your identity provider (Google or LinkedIn).

Content: structured data extracted from your CV, submitted job offers, generated CVs and cover letters.

Application profile: the answers you save to prefill your applications — availability, salary expectation, current salary, work authorisation, mobility, contract sought, driving licence, personal vehicle, years of experience, employment status — along with more sensitive data you choose to add: postal address, date of birth, nationality, residence permit.

Preferences (email consent, language) and technical session data.

Your CV file is parsed in memory then immediately deleted; only the structured data is stored. The service optimises the presentation of real facts and never invents any.

To analyse your CV and generate documents, the content of your CV and offers is sent to Anthropic's Claude API (a processor). Data sent through the API is not used to train its models.

If you reach the site from one of our Google ads, the address carries a click identifier (“gclid”) that Google adds to it. When you create an account, that identifier is recorded once alongside it, so we can tell which ads actually bring sign-ups.

No cookie and no advertising tag is placed on your device: the identifier travels through our own server, never through a third-party script. If you did not arrive from an ad, nothing is recorded. Legal basis: legitimate interest in measuring the effectiveness of our advertising spend. The identifier is kept and deleted with your account, and appears in “Export my data”.

When an account created from an ad reaches a milestone we measure (account creation, first Master resume), we send Google Ireland Ltd, from our server, that click identifier together with the date: this is what tells Google its ad led to a sign-up. No other account data — no name, no email address, no CV content — is part of that transmission. Your data export shows whether this transmission took place, and when.

To know which steps of the journey are reached and which ones block, we measure a small number of actions: creating an account, uploading a CV, starting a Master resume, scoring an offer, opening checkout. This measurement is carried out by PostHog, hosted in the European Union, acting as a processor.

What is sent: your account's technical identifier, your plan and your language, plus the name of the action, taken from a closed list. Your e-mail, your name, and any extract of your CV or of an offer are never sent. There is no automatic capture of your clicks and no recording of your screen.

No cookie is set and nothing is written to your browser's storage: that is why this measurement does not require your consent. Requests go through our own domain, never through a third-party script loaded from another site.

Hosting within the European Union. Your data is kept for 365 days after the end of the relationship, then automatically purged. Deleting your account erases your data and files in cascade.

Access and portability: “Export my data”. Erasure: “Delete my account”. Rectification: editing within the app. Emails: consent revocable at any time, one-click unsubscribe without signing in.

To exercise your rights or file a complaint: contact@passmatch.fr. You may also contact the CNIL (www.cnil.fr).

The service uses only strictly necessary cookies (authentication session). See the cookie policy.