Data protection for recruiters

Who we are

AutoApplyMax is a business registered in France. Contact for data protection questions: contact@autoapplymax.com. This page and our data processing agreement are governed by French law; disputes go to the French courts.

Who is responsible for what

• Your company's own data (your account, team members, job posts, invoices): AutoApplyMax processes it to provide the service.
• CVs you screen (on this site and in the pro space): they are read in your browser to score them and never uploaded to our servers. We do not keep the CVs, the candidates' names or the scores. We store only the job you screen for and how many CVs you checked.
• Candidate pool: AutoApplyMax is responsible for the anonymised profiles of job seekers who use AutoApplyMax. You only see anonymised cards.
• After a candidate accepts your contact request, you receive their name, email and CV and become responsible for that data for the job you contacted them about.
• When we store candidate data for you (for example your private notes on applicants), we act as your processor under a data processing agreement.

What we process

Data	Why	How long
Account and team: names, work emails, roles	Sign-in, team seats, support	While the account exists
Job posts and their statistics	Show your jobs to matching job seekers	While the account exists
Applications to your jobs	Let you review applicants	6 months after the job closes
Contact requests and messages	Ask candidates if they want to talk	Declined or expired: 6 months. Accepted: while both accounts exist
Billing: company name, address, tax ID, invoices	Payments and invoices (via Stripe)	As long as accounting law requires
CVs you screen (this site and the pro space)	—	Never uploaded: read and scored in your browser only
Screenings: the job you screen for and the number of CVs checked	Your list of screenings, your plan's monthly allowance	90 days, or earlier when you delete the screening

Where the data is stored

Our database runs on Supabase in a London (UK) data centre. Payments are handled by Stripe. Transactional emails are sent through our email providers. The website is hosted on Vercel. We share data with these providers only to run the service.

Job seekers stay in control

• Pool profiles are anonymised: job title, skills, years of experience, country (city only if the job seeker chooses it).
• Job seekers can turn off recruiter visibility in one click; their profile leaves the pool at once and pending requests are cancelled.
• Identity and contact details are shared only after the job seeker accepts your request.

Rankings and automated decisions

Our scores compare the words of your job description with skills, job titles and years of experience. They help you decide what to read first; they never reject anyone automatically. A person at your company makes every hiring decision.

Security

Data is encrypted in transit and at rest. Each company can only read its own data (row-level security in the database). Team members only see the data of their own company.

Data processing agreement

If your company needs a signed data processing agreement, write to contact@autoapplymax.com and we prepare it with you. See also our privacy policy and the terms for business customers.