Privacy Policy

1. Data controller

The data controller is Amiral Innovation Labs SAS, RCS Nanterre 101 550 366, registered office at 1 Place Paul Verlaine, 92100 Boulogne-Billancourt, France (“Amiral”, “we”, “us”).

Contact for privacy matters: hello@amiral.ai (subject line: “Privacy / GDPR”) or via the contact page.

If we appoint a Data Protection Officer (DPO), their contact details will be published on this page.

2. Scope

This policy applies to the Amiral AI website, web application, Chrome extension (including Auto-Apply form filling), account area, emails we send about the Service, and related support.

It does not cover third-party websites (employer career pages, job boards, payment pages operated by a payment provider) that you may reach from Amiral AI. Those sites have their own policies.

3. Data we process

Depending on how you use the Service, we may process:

• Account data: name, email address, password hash or OAuth identifiers, language and preference settings, membership plan and badge (Explorer, Pro, Insider).
• Profile and career data: CV files and extracted content (skills, experience, education, languages), profile strength / ATS-related scores, job preferences, match scores and reasons, tailored CVs and cover letters, application tracker status and history.
• Auto-Apply data: information needed to pre-fill application forms (identity and contact details you provided, selected documents). You review and submit each form yourself; we do not send applications on your behalf.
• Usage and technical data: logs, device/browser type, IP address, timestamps, feature usage (including enhancement counters), security events, and cookie / similar identifiers as described in the Cookie policy.
• Billing data: plan chosen, term, invoices, payment status. Card details are processed by our payment provider and are not stored in full on our servers.
• Support: messages you send us and related metadata.

We ask you not to upload special-category data (health, political opinions, etc.) unless strictly necessary for a job application you choose to make. If such data appears in a CV you upload, it is processed only to provide the Service you requested.

4. Purposes and legal bases

• Provide and improve the Service (account, matching, documents, tracking, Auto-Apply assistance) — performance of a contract (Art. 6(1)(b) GDPR) and, where needed, legitimate interests in operating a secure product (Art. 6(1)(f)).
• AI-assisted processing (parsing CVs, scoring, rewriting suggestions, match explanations) — performance of the contract; we do not use your CVs to train public foundation models for unrelated third parties.
• Billing and accounting — contract and legal obligation (Art. 6(1)(c)).
• Service communications (job digests, strong-match alerts on paid plans, security and subscription notices) — contract and legitimate interests. Digests and alerts are service messages for an active account; you can change frequency or turn them off in your account. Marketing emails, if any, require consent and an unsubscribe link.
• Security, fraud and fair-use enforcement — legitimate interests and, where applicable, legal obligation.
• Cookies / analytics — consent where required; see the Cookie policy.

5. Recipients and sub-processors

Your data is accessible to authorised Amiral personnel under confidentiality obligations. We use processors who assist us in delivering the Service, including categories such as:

• Cloud hosting, databases and object storage (CVs, avatars, backups)
• AI model providers used to parse and generate career documents (including OpenAI)
• Identity providers when you sign in with Google or LinkedIn
• Payment providers when you purchase Premium or VIP (for example Stripe)
• Email delivery providers for transactional and digest messages

Processors act on our instructions under data-processing agreements. We do not sell your personal data.

A current list of material sub-processors is available on request at hello@amiral.ai.

6. Transfers outside the European Economic Area

Some providers may process data in countries outside the EEA (for example the United States). Where that occurs, we rely on an adequacy decision where available, or on appropriate safeguards such as the European Commission's Standard Contractual Clauses, plus supplementary measures where required.

7. Retention

• Account and career content: kept while your account is active. After closure or deletion request, we delete or anonymise content within a reasonable period, except where longer retention is required by law (for example invoices).
• Billing records: retained for the statutory accounting period under French law (generally up to 10 years for certain commercial documents).
• Logs and security data: retained for a limited period needed for security and diagnostics.
• After a plan ends: we do not delete your work because a subscription ends. You keep access to view, export and delete what you created; free-plan creation limits may apply if you return to Free.

8. Security

We implement technical and organisational measures appropriate to the risk: access controls, encryption in transit, encryption at rest where supported by our infrastructure, and internal access limited to need-to-know. No method of transmission or storage is perfectly secure; please use a strong unique password and protect your devices.

9. Your rights

Under the GDPR, you may request:

• Access to your personal data
• Rectification of inaccurate data
• Erasure (“right to be forgotten”), where applicable
• Restriction of processing
• Data portability (export)
• Objection to processing based on legitimate interests
• Withdrawal of consent, where processing is based on consent

You can export or delete much of your data from your account. For other requests, email hello@amiral.ai. We may need to verify your identity. You may lodge a complaint with the French supervisory authority CNIL (Commission nationale de l'informatique et des libertés — www.cnil.fr) or with your local EU supervisory authority.

10. Automated decision-making

Match scores, ATS-related scores and document suggestions are decision-support tools for you. They do not produce legal or similarly significant effects about you without human involvement in the sense of Art. 22 GDPR. Final application decisions are made by employers, not by Amiral AI.

11. Minors

The Service is intended for persons who are legally able to seek employment and enter into a contract. It is not directed at children under 16. If you believe a minor has created an account, contact us so we can delete it.

12. Changes

We may update this policy to reflect legal, technical or product changes. The “Last updated” date at the top will change. Material changes affecting your rights may be notified by email or in-product notice where appropriate.

13. Related documents

• Legal notice
• Terms of Sale (CGV)
• Cookie policy