Privacy policy

1. Data controller

Beaujour Tech, 60 avenue Daumesnil, 75012 Paris, France. For any question about your data or to exercise your rights: contact@trakrio.com.

2. Data processed and purposes

Trakrio only processes the data its features need. We do not sell your data, we do not use it for advertising and we use no tracking or audience measurement tools.

• Account: email address, first name, last name and LinkedIn identifier, received from LinkedIn when you sign in ("Sign in with LinkedIn", with the "profile" and "email" permissions), interface language, country (prefilled from your browser’s time zone and language, worked out in the browser; can be changed in “Account”), browser time zone (saved automatically: free credits are topped up at midnight in that time zone), creation, sign-in and last activity dates, and the date you finished or skipped the extension’s guided tour. Purpose: creating and managing your account; your country and years of experience (computed from your CV) are also used to choose the default number of pages of your generated CVs. Legal basis: performance of the contract (terms of use).
• CV: the information you enter or import (contact details, photo, experience, education, skills, languages, certifications, projects, interests, references), including the skills you link to each of your jobs and a few words on how you used them (never shown in generated CVs). Date of birth, nationality and photo are optional: only fill them in if useful. If you list references, make sure these people agree. Purpose: preparing your applications and computing the match with job offers. Legal basis: performance of the contract.
• Application prompts: the AI instructions you save. Legal basis: performance of the contract.
• LinkedIn profile: if you start “Fill from my LinkedIn profile” in “My CV”, the extension reads the pages of your own LinkedIn profile that you display yourself (header, about, experience, education, skills, languages, certifications, projects), without clicking or loading anything, to complete your CV. Other people's profiles are never read. This reading stays in your browser (erased once added to your CV, on logout or when the browser closes); only what you add and then save in your CV is sent to our server. Purpose: filling in your CV. Legal basis: performance of the contract (terms of use).
• CV imported from a file (only with your consent, on request): “Fill from my CV” in “My CV” reads your CV (PDF, Word, LibreOffice or text) in your browser; the file is neither sent nor kept. Before anything is sent, the extension removes from its text, in your browser, your date of birth, age, nationality, marital status, address, e-mail and phone number (the phone number and your LinkedIn profile link go straight into your draft); the remaining text is sent to the AI to be sorted into the sections of your CV. The result goes into your draft, which you check before saving it; Trakrio keeps neither the text nor the AI response. Legal basis: your consent.
• Job offers viewed: the extension reads the offers you open on LinkedIn to show how well they match your CV. This information stays in your browser and is only sent to our server when you ask the AI for help (or, if you turn it on, for the automatic match analysis described below).
• Jobs imported from a document: when you import a job received as an attachment (PDF, Word, LibreOffice or text), the document is read in your browser and is neither sent nor kept: only its text, the information you enter (title, company, location, link and e-mail address to apply) and, if you add them, details about where it came from (sender and their contact details, recruitment agency, date received, reference, notes) are kept, in your browser only. The sender's contact details concern another person: only add what is useful to you. Only the job text is sent to the AI, when you ask for it (“Fill in with AI”, match analysis, application preparation: tailored CV, cover letter and reply e-mail, kept in your browser), never the details about where it came from; if you have saved a CV, “Fill in and analyse with AI” also sends your CV (without photo, date of birth, nationality or address) to analyse the match in the same request. Legal basis: performance of the contract; your consent for the AI.
• AI match analysis (only with your consent, on request or automatically if you turn it on): "Analyze with AI" sends the title and description of the offer and your CV (without photo, date of birth, nationality or address) to get a match score and which of the offer's requirements your CV meets; from the "My jobs" tab, several scored offers are sent together with your CV in a single request. The result is kept only in your browser, until you sign out, so the same request is not made twice. If you turn on "Automatically analyze the jobs I open", the same request is made without a click for each job you open that is scored at least at the threshold you choose and has no up-to-date analysis; you can turn it off at any time. "Analyse the job on this page" (a page without a recognised job) likewise sends, when you click it, the page's visible text with your CV, to read its title, company and location and get this score in a single request; without your consent, the page is only scored in your browser, without AI. Legal basis: your consent.
• AI generation (only with your consent): when you ask the AI to prepare an application, your CV (without photo, date of birth, nationality or address), the offer, the form questions, your instructions and, for an application on a company website, the visible content of the application page (texts, field labels) are sent to one of our AI processors, Anthropic or OpenAI (a single provider per request): Trakrio uses state-of-the-art AI models, selected and re-tested every month on the quality of their answers. Trakrio keeps neither this data nor the generated answers: they stay in your browser. Legal basis: your consent, which you can withdraw at any time in the extension's Account tab.
• AI questions to improve your CV (only with your consent, on request): in “My CV”, “Ask me questions” sends your CV (without photo, date of birth, nationality, address or references) so that the AI asks you a few questions about what it is missing; if you answer them, your answers are sent with your CV to be added to your draft, which you check before saving it. “Link to my experience” first looks in your browser, without AI, for the jobs that mention a skill; on request, the AI only receives your jobs (title, employer, description) and the skills to link, or the few words you write about how you used a skill, to write them up. The questions and your answers stay in your browser until it is closed or you log out; Trakrio does not keep them. Legal basis: your consent.
• Interview with Sacha about an experience (only with your consent, on request): “Add with Sacha” and, after your CV is first filled in (LinkedIn profile or file), the guided rewriting of your experiences send the AI the position (title, employer, city, dates), its current description if it has one, the questions and your answers, then, for the writing, the names of the skills in your CV. The interview stays in your browser until it is closed or you log out; the result goes into your draft, which you check before saving it. Trakrio keeps neither the interview nor the AI response. Legal basis: your consent.
• Application tracking: the status of a job (to apply, sent, no reply, interview, offer received, accepted, rejected, withdrawn), its sending date, the dated history of its status changes (with their origin: set by you or detected by Trakrio), the dates of your follow-ups (noted with “I followed up” or spotted in your sent emails) and the free note you add are saved on your account, with the job's title, company, location and link; when you send an application, the full job as you saw it (description included) is kept too. A job published on a job site is kept as a single copy per content, shared by the accounts that applied to it (if it changes, the new version is added and each application keeps its own), and deleted once no application refers to it anymore; a job received by e-mail or read on any other page stays private to your account, so you find them on all your devices and get your summaries (applications per week, response rate, response time, follow-ups due). When you send an application form yourself (LinkedIn Easy Apply read in the page, or a site's form filled by Trakrio), the extension notices that click and marks the job “Sent” if it didn't already have another status: you can undo it. The Trakrio form and the site's form stay in sync: what you enter on the page (including in LinkedIn Easy Apply, read without writing anything there) is copied into your Trakrio draft and, as soon as a careers site's form is found, what you prepare or change in Trakrio (answers, CV, documents) is written into that form, in your browser, without ever submitting it. When an application reaches a sent status, its content is saved to your account so you can remember what you sent: answers to the questions, the CV attached by Trakrio (without photo) and written documents (cover letter…); you can erase it at any time from the application's details, and it is never sent to the AI. If you apply within a month to a similar job at the same company, the CV kept this way is also used to offer you the same CV (reused by default, without AI, with your CV's current photo) rather than a different one. When you confirm that a job seen on one site is the same as one seen elsewhere ("Yes, same job"), the link between them (their identifiers) is saved to your account and they share a single application: if each had one, they are merged (history, note and sent content). You can remove the link with "Unlink". The note is never sent to the AI: don't put sensitive data in it and only note about another person (recruiter…) what is useful to you. Legal basis: performance of the contract.
• Email tracking (optional, only if you connect your mailbox): a small program you install, the Trakrio connector, reads your inbox and sent emails on your computer, read-only (headers and the beginning of the text, never attachments); the mailbox password is stored in your system’s keychain. None of this is sent to Trakrio or to the AI, except an email you choose to report (below) and the date of a follow-up (below): emails are sorted without AI in your browser, and only those from recruiters or about a tracked application are kept there (sender, recipients, date, subject, beginning of the text); their full text is read again on your computer when you open it. They contain other people’s data (recruiters’ names and addresses), used only to show you your conversations. When an email suggests a new status (acknowledgement, interview, rejection, offer), Trakrio suggests it to you; only the status you confirm is saved to your account, with the origin “from an email”. An email you sent to the recruiter of a “Sent” application, at least two days after sending it, is noted as a follow-up: only its date is saved to your account (removable from the application’s history). “Reply” opens your email client: Trakrio sends no email. You can disconnect your mailbox at any time in the Account tab, which erases the password and the kept emails. Legal basis: performance of the contract (a feature you turn on).
• Questions to Sacha (only with your consent, when you ask): in the “Sacha” tab, the ready-made questions are worked out in your browser, without AI. A free question is sent to the AI with a summary of your search computed in your browser (number of applications per status, response rate, share of your CV filled in and, for at most 30 jobs, title, company, status, score and days since sending) and the latest messages of the conversation, never your CV or the job texts. The conversation stays in your browser until it closes or you sign out; Trakrio does not keep it. Sacha does, however, keep on your account the facts useful to your search that you tell it in a free question (background, plans, constraints, upcoming steps you announce; never health, origin, religion, opinions, private life or anything about another person), with, where relevant, the first sentence it will say when you open a later chat: these “memories” are sent to the AI with each free question, shown and erasable one by one in the tab (“Memories”), and memory can be turned off, which erases them. Legal basis: your consent.
• Interview preparation and interview debrief (only with your consent to the AI, when you ask): for a tracked application, “Prepare for the interview” sends the AI your CV (without photo, date of birth, nationality or address), the job (title, company, location, description), the questions you chose, your settings (type of interview, tone, length of the introduction, language), the job requirements the fit analysis considers unmet and, for a job of the same type, the questions you struggled with in previous interviews and what you want to improve. The resulting preparation (points to cover, answers to say out loud) and your edits are kept on your account. After the interview, your debrief (date, type of interview, how you felt, questions asked and what you answered, what went well, where you got stuck, announced next steps) is kept on your account without AI; “Go deeper with Sacha” sends it to the AI with the job title and company (neither CV nor job description) and keeps its follow-up questions, your answers and its summary. These debriefs are only used to prepare your own next interviews; they are never shared with other users. They can be deleted at any time in the application detail, are erased with it or with your account, and are included in your data export. Legal basis: your consent.
• AI call log: for each request made to the AI, Trakrio records the task (answers, tailored CV, document, page analysis, match analysis, reading an imported job or CV, interview to write or rewrite an experience, questions to improve the CV or link its skills, question to Sacha, interview preparation or debrief), the date, the duration, the outcome (success or error), the job title and company, the job's identifier on its site (never sent to the AI), the number of questions or documents, the action's credits (its price on the scale, taken or not depending on your subscription), for an application page only the site name, and technical data (model used, number of tokens, estimated cost) used only by the publisher to monitor its costs. Neither the content sent nor the AI's responses are included. You can view your calls (task, date, outcome, job, credits) in the Account tab of the extension, and the calls made for a job in its Job tab. Purposes: transparency towards you, monitoring costs and the proper operation of the service. Kept for 365 days. Legal basis: legitimate interest.
• Applications on a company website: with your permission (requested by the browser), the extension accesses the application website to locate the form. During this analysis, the extension prevents the page from sending anything; the form is never submitted on your behalf: you submit your application yourself.
• Form problems on websites: when the extension fails to detect or fill a careers site's form for a technical reason, it sends Trakrio the page address (without parameters), the step involved, the number of fields read or failed, their labels, the job identifier and the extension version — never the values you typed or the page content, and never anything from LinkedIn. You can turn this automatic sending off in the Account tab ("My data and privacy"). You can also report a problem yourself ("Report a problem"): your choice, your comment and, only if you tick the box, a capture of the application page (its code as displayed, without scripts, images or values typed in the fields; text shown by the page may be included) are then sent. Purpose: fix form detection and filling. Legal basis: legitimate interest for the automatic sending; your consent for the capture. Kept 90 days after the last report; only an anonymous count per site is kept afterwards.
• Misread emails (email tracking, only if you report one): "Misread?" corrects the email in your browser. If you choose "Correct and send", Trakrio receives the subject and the beginning of the text of that email, after the addresses, links, numbers and names found have been replaced with fictitious values, and as you read over and edited it before sending, together with the expected type, the type found, the matching clues (for a wrong application: company and job title) and your comment. Never the original email, its recipients or your mailbox. Purpose: improve email sorting (cases added, anonymised, to Trakrio's tests). Legal basis: your consent, given by sending. Kept for at most 90 days, deleted with your account, included in your data export.
• Disputed AI analyses (only if you send them): "Disagree?" corrects in your browser the AI's verdict on a requirement of the job posting, and the score is recalculated. If you choose "Correct and send", Trakrio receives the AI's analysis (requirements, verdicts, summary, date), your corrections and your comment, the text and title of the job posting (email addresses and links replaced with fictitious values) and a copy of your CV without any contact details (headline, summary, experience, education, skills, languages, certifications, projects; never your name, email, phone, address, photo, references or interests), together with the AI model and the version of the instructions that made the analysis. The offer and CV sent are the ones the AI received for that analysis, kept for this purpose in your browser (see "Data stored in your browser"). None of this is sent to the AI. Purpose: improve the match analysis (cases added, anonymised, to Trakrio's tests). Legal basis: your consent, given by sending. The CV, the offer text, your comment and whatever the analysis quotes from your CV are erased as soon as the report has been processed (added to the tests or dismissed); the rest (offer title, requirements, verdicts, corrections) is kept for at most 90 days. Deleted with your account, included in your data export.
• Feedback on Trakrio (only if you send it): from the Sacha tab › “My feedback”, how you feel about Trakrio, the topic you chose, your message and your replies, the extension version and, if you tick “Also send me the replies by email”, the address you give. A person from the Trakrio team reads them and may reply, signing with their name; the reply is shown in the extension and, if you asked for it, sent to that address by email (you can untick this at any time). None of this is sent to the AI. Purpose: hearing your opinion, fixing what doesn't work and replying to you. Legal basis: your consent, given by sending. Kept at most 365 days after the last message, deleted with your account, included in your data export.
• Improving the score without AI: when you apply, Trakrio keeps with the application the compatibility score computed without AI, the AI analysis if you had run it (the job's requirements judged met or not, without its summary) and a copy of your CV without any contact details (headline, summary, experience, education, skills, languages, certifications, projects; never your name, e-mail, phone, address, photo, references or interests). The publisher compares them in pseudonymised form (without your account or an identifiable job) to bring the score without AI closer to the AI's. This data is never sent to the AI or to a third party and is kept as long as the application. Legal basis: legitimate interest (improving the service); you can object at any time by unticking “Help improve the score without AI” in “Account”, which erases what was kept.
• Subscriptions, credits and payments: if you take out a subscription or buy credits, payment is handled by Stripe; Trakrio never sees or stores your card details. Trakrio records the customer identifier Stripe assigns to your account, your subscriptions (free trial given at sign-up, chosen plan, price paid, start, renewal, cancellation and end dates, with the history of these changes — subscription, plan change, cancellation, resumption, failed payment, end and its cause), your credit balance and its movements (purchases with their price, credits given each week, credits used by each AI action with its date and type, credits returned after a failure). Stripe processes the payment data on its side (name, email address, payment method, country) and produces the accounting records. Purposes: provide the paid plans, apply the credit scale, keep the accounts and answer your requests. Legal basis: performance of the contract (terms of use); legal obligation for keeping accounting records.
• Free-trial anti-abuse fingerprint: so that the free trial week is only given once per person, even after an account is deleted and created again, Trakrio keeps a pseudonymised fingerprint of your LinkedIn identifier (computed with a secret key, from which the identifier cannot be recovered), with no link to your account or to any other of your data. It is kept for 3 years, including after your account is deleted. Legal basis: legitimate interest (preventing abuse of the free trial).
• Referrals: each account has a referral code made of the initials of its first and last name followed by random characters, which you can share. When someone creates their account with your code, Trakrio records the link between your two accounts, its date and the subscription days offered to you; that person's first name is shown to you once, to let you know (they are told so when entering the code). The share buttons open the app of your choice (WhatsApp, Messenger, Instagram, email): Trakrio sends nothing and does not know your contacts. Purpose: providing the referral benefits. Legal basis: performance of the contract (terms of use). Retention: as long as both accounts exist.
• Abuse and fraud detection: to protect the service (programs firing requests in a row, AI usage at a pace no person could reach, daily AI action cap exceeded, calls not coming from the extension), Trakrio records technical signals: your account, the kind of signal, the API route concerned, counters (number of requests, threshold), the extension version and a pseudonymised fingerprint of your IP address (computed with a secret key, from which the address cannot be recovered), never the content of your requests. They are used to temporarily slow down abnormal use and, after human review, to suspend an account that abuses the service (you then keep access to your data, its export and account deletion). They are kept for 180 days. Legal basis: legitimate interest (security of the service, prevention of abuse and fraud).
• Technical logs: IP address, date, requested page address and errors, kept for 30 days. Purpose: security and proper operation of the service. Legal basis: legitimate interest.
• Service emails, sent from no-reply@trakrio.com (to write to us: contact@trakrio.com). Essential, with no unsubscribe: welcome, account security (address changed, suspension, deletion confirmed), subscription (end of free access, failed payment, cancellation, lifetime access, reminder before a long subscription renews as required by French consumer law, art. L215-1), important changes to these terms, the warning before an inactive account is deleted, and the team's replies to your feedback if you asked for them. Optional, received by default and can be turned off at any time (Account › Preferences › Emails, or the “Unsubscribe from these emails” link at the bottom of each): weekly AI credits used up (at most every 14 days), free days earned through referrals, reminders and the weekly summary of your applications (computed without AI). A spam complaint turns off all optional emails for the account. If you write to contact@trakrio.com, your message (sender address, subject, text and attachments) is received by our sending provider, read by the team in its internal tool and linked to your account if the address is your account's; its text is kept in this log, the full message with its attachments for 30 days only; a message judged as spam, infected or spoofed is discarded. Legal basis: legitimate interest (replying to you). Trakrio keeps a log of these emails (type of email, address, subject, date, and what the sending provider reports: delivered, rejected, marked as spam), never the text of an automatic email (only the text of an email that someone from the team writes to you is kept); it is kept for 365 days, deleted with your account and included in your data export. An address that permanently rejects our emails or marks them as spam receives no more of them: Trakrio keeps a fingerprint of it (computed with a secret key, from which the address cannot be recovered), even after the account is deleted, to respect this refusal. Only if you accept it in the extension (Account › My data and privacy, off by default), an invisible image also tells us when you open our emails: Trakrio keeps only the date, never your IP address or device; legal basis: your consent, which you can withdraw at any time. Legal basis: performance of the contract (account, subscription), legal obligation (renewal reminder) and legitimate interest (welcoming you, reminding you of your applications, giving you the chance to keep your account, making sure our emails are delivered).

The match score between your CV and an offer is computed in your browser without AI (and, if you ask for it, by the AI); it is only shown to you: Trakrio makes no automated decision about you.

3. Data stored in your browser

The extension keeps in your browser storage your session (sign-in token), a copy of your CV, the last 30 saved versions of your CV (to go back to a previous one, for example after saving by mistake), your drafts, the offers viewed, the scored offers you opened (title, company, location and, until the AI analyses them, their text; also erased by "Clear the list and scores"), with a fingerprint of their text (a series of numbers from which the text cannot be rebuilt) to recognise the same job seen on another site, and the pairs of jobs you said were different, for your last 500 AI match analyses, the offer text and a copy of your CV without any contact details as the AI received them (so they can be attached if you dispute the analysis; erased with the offer and by "Clear the list and scores"), the applications being prepared (form read, answers, tailored CV, documents, instructions) and, for applications on a company website, the address of the application pages you visited with the related offer (to resume the application when you come back to the form; 30 days without changes at most). The coach also keeps the date you last opened the panel and whether your first application has been filled in, for its encouragement. All of it is removed from the browser when you sign out (see below), and the offers viewed are also erased when the browser closes. Only your preferences (language, theme, date format, score threshold for the AI, coach display, last extension version announced) are kept.

It also keeps a copy of your application tracking (saved on your account), the notice of an application it saw being sent (24 hours at most, until the browser closes), the job and time of your LinkedIn Easy Apply applications sent in the last hour (to advise you to slow down if you send many; until logout) and, until the browser closes or you sign out, your conversation with Sacha; until you sign out, the question Sacha will ask at your next conversation to follow up on a step you told it about (30 days at most) and the list of welcome messages already shown.

When you sign out, so that you find your offers and applications again when you sign back in (including on a shared computer, where each account only sees its own), this data — except the session, the copy of your CV and the offers viewed — is kept in your browser in encrypted form, with a key specific to your account stored on our server: it can only be read once you are signed back in to your account. It is erased if you do not sign back in on this browser for 90 days, by "Erase my data from this browser" (Account tab) and by deleting your account (the key is then deleted and the encrypted copy becomes unreadable). On a public computer, use "Erase my data from this browser".

Jobs imported from a document (job text, information entered and origin) are kept there until you delete them (“Remove from the list”, “Clear the list and scores”) or sign out.

If you connect your mailbox (email tracking), the recruiter emails found are kept there (sender, recipients, date, subject, beginning of the text, type of email and linked application), along with the suggested statuses and the state of the last check, for at most 365 days and until you disconnect the mailbox or sign out. The connector keeps the mailbox settings (server, username) and the last email read per folder on your computer; the password is in your system’s keychain. Trakrio never has access to them.

4. Cookies

The website uses no advertising or audience measurement cookies. It only sets two preference cookies, when you choose them, for one year: "trakrio_locale" (language) and "trakrio_theme" (light or dark theme). They are necessary for the service you request and therefore do not require consent.

If the Trakrio extension is installed in your browser, it only tells the Trakrio website's pages (and no other website) that it is present, so that they show “Open Trakrio” instead of the install buttons and open its panel when you click one of these buttons. This signal stays in your browser: nothing is sent to our servers or recorded, and the website learns neither your account, nor your subscription, nor any other extension data.

5. Recipients and processors

Your data is only accessible to the publisher and to the following providers, solely for the needs of the service:

• Hosting of the website, API and database: Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg (https://aws.amazon.com) (EU — AWS eu-west-3 (Paris), eu-west-1 (Dublin)).
• Artificial intelligence: state-of-the-art AI models, selected and re-tested every month on the quality of their answers, provided by Anthropic, PBC (United States) or OpenAI, L.L.C. (United States), only if you have given your consent. Under their commercial terms, neither Anthropic nor OpenAI uses this data to train its models; it is only kept for a limited period (30 days at most at OpenAI), for safety and abuse-prevention purposes.
• Sign-in: LinkedIn Ireland Unlimited Company, which identifies you when you sign in with LinkedIn.
• Sending emails: Amazon Simple Email Service (Amazon Web Services EMEA SARL), EU.
• Payments: Stripe Payments Europe, Limited (Ireland), which processes payments for subscriptions and credits; Trakrio never receives your card details.

Within the publisher, only authorised staff access your data, through an administration tool protected by a strong password and locked after several failed attempts, for support, billing and abuse prevention; every action there is logged.

6. Transfers outside the European Union

Sending data to Anthropic or OpenAI is a transfer to the United States. It is governed by the European Commission's standard contractual clauses included in each provider's data processing agreement, and only takes place with your consent.

Payments are processed by Stripe Payments Europe, Limited (Ireland); some payment data may be transferred to Stripe, Inc. (United States). This transfer is governed by the European Commission's standard contractual clauses included in Stripe's data processing agreement.

Your data is hosted in the European Union by Amazon Web Services, the European subsidiary of an American company. AWS's data processing agreement includes the standard contractual clauses in case access from the United States is required.

7. Retention periods

• Account, CV and prompts: until your account is deleted. An account without any activity for 3 years is deleted automatically; an email warns you 30 days before, and simply signing in again keeps it.
• Data sent to the AI: not kept by Trakrio.
• AI call log (without its content): 365 days, then deleted automatically.
• Application tracking (history, note, sent content and kept job included): until you stop tracking a job (“Not tracked”) or delete your account; a shared public job is deleted as soon as no application refers to it anymore (daily purge).
• Sacha’s memories: until you erase them, turn memory off or delete your account.
• Interview preparations and debriefs: until you delete them, remove the application or delete your account.
• Form problem reports (and attached page capture): 90 days after the last report, then deleted; the anonymous count per site is kept.
• Email tracking: emails kept in your browser for at most 365 days (erased when you disconnect the mailbox or sign out); settings and password kept by the connector on your computer until “Disconnect the mailbox” or its uninstallation. Trakrio only keeps the emails you report (below).
• Misread emails you reported: 90 days after sending, then deletion.
• Disputed AI analyses you sent: content (CV, offer text, comment) erased once processed, the rest at most 90 days after sending, then deletion.
• Feedback sent from Sacha and the exchanges with the team: 365 days after the last message, then deleted.
• Log of emails sent by Trakrio: 365 days after sending, then deleted.
• Messages received at contact@trakrio.com: full message with attachments 30 days, text 365 days, then deleted.
• Subscriptions, credits and their movements, Stripe customer identifier: until your account is deleted. Accounting records (invoices and payments, with the plan or credits bought and their price) are kept for 10 years, as required by law (article L123-22 of the French Commercial Code), including after the account is deleted; they never contain your CV or your other data.
• Free-trial anti-abuse fingerprint (not linked to your account): 3 years, including after your account is deleted, then deleted.
• Abuse detection signals (account, counters, pseudonymised IP): 180 days, then automatic deletion.
• Technical logs: 30 days.
• Extension data in your browser: until you sign out (or until the browser closes for the offers viewed). Match scores and analyses, like the list of scored offers, cover the last 5,000 offers at most, and the offer and CV received by the AI the last 500 analyses at most; applications being prepared and application pages visited are forgotten after 30 days without changes. After signing out, encrypted copy kept for at most 90 days without signing back in on this browser.
• Jobs imported from a document: in your browser, until you delete them or sign out.

8. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to withdraw your consent at any time and to set instructions regarding your data after your death.

• Directly in the extension: edit your information in "My CV" and "Account"; in "Account", download all your data (JSON file), withdraw your consent for the AI or permanently delete your account.
• By email: contact@trakrio.com. We answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (French data protection authority) or with the authority of your country: https://www.cnil.fr

9. Security

Communications are encrypted (HTTPS). Your account has no password: sign-in goes through LinkedIn. Access to data is limited to what the service needs, and the sign-in token of a deleted account is rejected immediately.

10. Minors

Trakrio is intended for people aged at least 15.

11. Changes

If this policy changes significantly, we will inform you in the extension or by email.