CValyze - AI CV Scoring Platform

1. Data collected

We collect the following categories of data:

Account data:

Email address, password (hashed and secure), username, profile photo (if provided).

Payment data:

Managed exclusively by our payment provider (Stripe). We do not store your banking information.

Usage data:

Content generated via the Service (CVs uploaded as PDF files, created job offers, AI-generated CV analyses including scores, recommendations and extracted data), account settings, Service usage statistics (number of CVs imported, analyses performed, quotas used).

Technical data:

IP addresses, device type, browser, connection logs, session identifiers.

Cookies and trackers:

We only use technical cookies strictly necessary for the functioning of the Service (e.g. session cookies for authentication). No tracking or advertising cookies are used.

2. Processing purposes

Your data is collected for the following purposes:

Provide and manage the Service (authentication, subscription management, access to features)
Process payments and prevent fraud
Improve the Service and propose new features
Analyze CVs and generate scores, recommendations and insights using artificial intelligence
Manage monthly CV import and analysis quotas according to the subscription plan
Provide assistance and respond to support requests
Comply with our legal and accounting obligations (billing, retention)
Produce usage statistics (anonymized when possible)

3. Legal bases (GDPR)

The processing of your data is based on:

Contract execution: necessary to provide you with access to the Service
Legal obligation: for the retention of billing data
Legitimate interest: to ensure Service security and prevent fraud
Consent: for the processing of uploaded CVs and created job offers by artificial intelligence to generate analyses, collected upon uploading the first CV

4. Data sharing

Your personal data may be shared with trusted third-party providers strictly necessary for the provision of the Service:

Hosting : Vercel (USA)
Payments : Stripe (USA / EU depending on region)
Artificial intelligence : technical providers for CV analysis and generation of scores and recommendations

These providers process your data only on our behalf and in accordance with our instructions. We never sell your personal data to third parties.

Transfer outside EU: Some of our providers are located outside the European Union (e.g. Vercel, Stripe). In this case, we implement appropriate safeguards (Standard Contractual Clauses approved by the European Commission) to ensure a level of protection compliant with GDPR.

Data processing by artificial intelligence

Uploaded CVs (textual content extracted from PDF files) and job offers created by users may be temporarily transmitted to technical artificial intelligence providers to analyze CVs and generate scores, recommendations, insights and detailed evaluations. This data is processed solely for this specific purpose and is neither used to train AI models nor retained beyond the immediate processing necessary for analysis generation. Personal data of candidates contained in CVs is processed in accordance with GDPR and consents obtained by recruiters.

5. Retention periods

User account: for the entire duration of Service use + 3 years after deletion

Billing data: 10 years (legal obligation)

Cookies: maximum 13 months

User-generated content: deleted within 90 days after account termination

Some data may be retained in anonymized form (without any elements allowing your identification) for statistical analysis, Service improvement and research purposes, in accordance with GDPR.

6. User rights

In accordance with GDPR, you have the following rights regarding your data:

Right of access, rectification and update
Right to erasure (« right to be forgotten »)
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw your consent at any time (e.g. cookies)

To exercise your rights:

You can contact us at the following address: contact.nukloop@gmail.com

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

If you reside outside France, you may also lodge a complaint with the competent data protection authority in your country of residence.

7. Data security

We implement appropriate technical and organizational measures to protect your personal data against:

Unauthorized access
Disclosure, alteration or destruction
Accidental or unlawful loss

These measures include data encryption, secure authentication, and regular security audits.

8. Modifications to this policy

We reserve the right to modify this Privacy Policy at any time. Modifications will take effect upon their publication on this page.

We will inform you of important modifications by email or via a notification in the Service.

10. Automated processing and AI analyses

CValyze uses artificial intelligence algorithms to automatically analyze CVs, extract structured information, generate scores and recommendations. These automated processes are implemented to help recruiters evaluate and rank candidates objectively and efficiently.

Absence of automated decisions with legal effects

No decision producing legal effects or significantly affecting your situation (e.g., refusal of Service access, account termination, billing) is made automatically without human intervention. Decisions of this nature are always reviewed by our team. AI-generated analyses and scores are decision-support tools and do not constitute automated recruitment decisions.

Information on automated processing

You can request general information about the functioning of automated processing and AI algorithms used in the Service to analyze CVs by contacting us at: contact.nukloop@gmail.com

Nature of AI-generated analyses

The analyses, scores and recommendations generated by CValyze are the result of automated processing by artificial intelligence. Although we strive to provide accurate analyses, these results are decision-support tools and should not be considered definitive evaluations. Recruiters remain responsible for their recruitment decisions and must exercise professional judgment when using these analyses.

11. Age requirement

The CValyze Service is reserved for users aged at least 16 years old. Minor users (between 16 and 18 years old) must obtain express authorization from their parents or legal guardian before creating an account and using the Service. By registering, you certify that you are at least 16 years old or have the required parental authorization. P Society reserves the right to suspend or delete any account that does not comply with this requirement.

12. Contact

For any questions regarding this Privacy Policy or to exercise your rights, you can contact us at the following address:

Email: contact.nukloop@gmail.com

We will endeavor to respond to your request as soon as possible.