Privacy Policy

Proxijob ("we") operates the Proxijob application. This page explains which personal data we collect, how we use it and your rights.

1. Data collected

• Account: name, email, hashed password, role, preferred language.
• Candidate profile: diploma, specialty, skills, CV, avatar.
• Company page: legal name, address, website, contacts, gallery, news.
• Applications: cover letters, messages, sending history.
• Aggregated analytics (non-identifying).
• Notifications: web push token, email preferences.

2. Legal basis

Contract execution, your consent (notifications, non-essential cookies), our legitimate interests (security, fraud prevention).

3. Processors

MongoDB Atlas (storage), Resend (transactional emails), Google Places (public business data), Stripe (payments), Google (social login). None sells your data.

4. Retention

Active account: while you use it. Inactive 24 months: anonymized. Applications: 3 years (French legal requirement). CV: deleted on request within 7 days.

5. Your rights (GDPR)

Access, rectification, erasure, portability, restriction, and objection at any time. Contact: privacy@proxijob.app. You may also file a complaint with your local data protection authority.

6. Security

TLS in transit, bcrypt-hashed passwords, signed JWTs, admin access logging. Regular endpoint audits.

7. Cookies

Only technical cookies (session) and local storage for language + JWT. No third-party tracking cookies.

8. Changes

This policy may evolve. Substantial changes will be notified by email and push.