Privacy policy

This English version is provided for convenience. In the event of any discrepancy, the French version prevails.

Protecting your personal data is one of our commitments. This policy describes, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), the processing carried out through the jolyet.ai website.

Data controller

Jolyet.ai, whose registered office is at 11 avenue de Paris, 94300 Vincennes, France, is the controller for the processing described below. Contact: contact@jolyet.ai.

Data we collect

We only collect the data you voluntarily submit through the website's forms.

Contact form: name, company, work email address, job title (optional), subject, and the content of your message.

Application form: name, email address, position applied for, LinkedIn profile (optional), cover message, and resume in PDF format.

In addition, minimal technical data (hosting provider connection logs, anti-spam verification data) is processed to ensure the operation and security of the website.

Purposes and legal bases

• Responding to your requests submitted through the contact form: processing based on your consent, expressed through the form's checkbox, and where applicable on pre-contractual measures taken at your request.
• Reviewing your application submitted through the application form: processing based on your consent, expressed through the form's checkbox, and on pre-contractual measures taken at your request. Your application is only taken into account once your email address has been confirmed: a confirmation link is sent to you, and nothing is passed on to our teams until you have clicked it.
• Ensuring the security of the website (prevention of spam and abusive use): processing based on our legitimate interest.

Your data is never sold or transferred to third parties, never used for unsolicited commercial prospecting, and never subject to automated decisions producing legal effects.

Recipients and processors

The data is accessible only to authorized personnel of Jolyet.ai. To operate the website and its forms, we rely on the following processors:

• Google Ireland Limited (Firebase Hosting, Cloud Functions, Cloud Storage): website hosting, form processing, and temporary storage of resumes pending confirmation.
• Brevo (a French company): delivery of the emails sent by the forms, including application confirmation emails.
• Cloudflare (Turnstile service): anti-spam verification when the forms are submitted.

Some of these providers may process data outside the European Union. In that case, transfers are governed by appropriate safeguards within the meaning of the GDPR, in particular the European Commission's standard contractual clauses.

Retention periods

Data submitted through the contact form is kept for as long as needed to handle your request, and then for the duration of any exchanges that may follow. Technical logs are kept for short periods, in line with standard security practices.

For applications: if you do not confirm your email address, all the data submitted, including your resume, is automatically deleted from our systems within 72 hours at most. If you confirm, your resume is passed on to our recruitment team and then immediately deleted from temporary storage; your application is then kept for the duration of the recruitment process and, if unsuccessful, for no more than two years after our last contact, unless you request its deletion earlier.

Your rights

You have the right to access, rectify, erase, and port your data, as well as the right to restrict and to object to its processing, and the right to withdraw your consent at any time. You can exercise these rights by writing to contact@jolyet.ai.

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

Cookies and trackers

The jolyet.ai website sets no advertising cookies, no audience measurement cookies, and no profiling trackers. Your browsing is neither tracked nor analyzed for commercial purposes. That is why no consent banner is displayed: your attention doesn't need to be requested for trackers that don't exist.

Only technical elements strictly necessary for the operation and security of the website may be used. In particular, the contact page integrates the Cloudflare Turnstile anti-spam verification service, which may rely on technical storage mechanisms for the duration of the verification; these elements, essential to protecting the form, are exempt from consent under the guidelines of the CNIL.

Should the website ever integrate an audience measurement tool or any other tracker subject to consent, this policy would be updated and a consent mechanism (accept / decline) would be put in place before anything is set.

Changes to this policy

This policy may be updated to reflect changes to the website or to regulations. The date of the latest update appears at the top of the page.