Privacy Policy

1. Data Controller Identity

Name: LEAPLINE

Address: Καραϊσκάκη 28 Αθήνα, Grèce

Contact: contact@brevy.me

2. Types of Data Collected

• Identity data: email, password (encrypted)
• CV data: name, first name, professional experience, education, skills, profile photo, etc.
• Navigation data: cookies, IP address, browser type

3. Processing Purposes

• User account creation and management
• Interactive CV generation and hosting
• CV sharing via unique URL
• Service improvement (analytics)
• Communication with users

4. Legal Basis

• User consent (account creation)
• Contract execution (service provision)
• Legitimate interest (service improvement, security)

5. Data Recipients

• Hosting provider: Vercel Inc. (États-Unis)
• Authentication services: Google (if using Google Auth)
• Analytics tools: Google Analytics (if used)

6. International Transfers

Mention of transfers to the United States (Vercel, Google).

Appropriate safeguards: Standard Contractual Clauses (SCC) of the European Commission

7. Data Retention

• Account data: As long as the account is active + 1 year after deletion (for legal compliance)
• Cookies: Maximum 6 months (depending on type)

8. User Rights

• Right of access: Obtain a copy of your data
• Right to rectification: Modify your data
• Right to erasure: Delete your account and data
• Right to data portability: Download your data in a structured format
• Right to object: Object to processing of your data
• Right to restriction: Limit processing of your data
• Right to withdraw consent: At any time
• Right to lodge a complaint: With CNIL (https://www.cnil.fr)

9. Security Measures

• Password encryption (bcrypt or argon2)
• Mandatory HTTPS connection
• Restricted data access
• Regular backups

10. Contact

For any questions regarding the protection of your data: contact@brevy.me