Privacy policy

1. Data controller

Novatis Agency, publisher of JobiClub, is the controller of the processing described here. It complies with the General Data Protection Regulation (GDPR) and Tunisian Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data.

Payments in dinars are processed by Novatis Tunisie for invoicing. Contact for your data: [email protected].

2. Data processed

Account: name, email address, password (hashed), language, time zone, preferences. Profile: title, experience, education, skills, languages, uploaded CVs, availability. Activity: applications, messages, interviews, alerts, posts, reviews, training requests, quotes.

Technical data: login and security logs, IP address to limit abuse, anonymized fingerprint for the ad frequency cap. No CV content, password or token is written to logs.

3. Purposes and legal bases

Providing the requested service (performance of the contract); keeping it secure and preventing fraud (legitimate interest); sending emails related to your account; with your consent, alerts and newsletters; measuring the effectiveness of our campaigns in aggregate.

B2B prospecting only targets business addresses, with one-click unsubscribe.

4. Accounts and pages prepared from Novatis's clientele

For companies that are clients of, or have a business relationship with, Novatis Agency or Novatis Tunisie, JobiClub may prepare an account and a company page (legitimate interest: offering a service related to that relationship). Data used: company name, city, country, website, sector; the contact's name and business e-mail. Before activation, nothing is published or indexed; the contact's details are never public.

You receive an activation e-mail, then at most two reminders with no click or activation. Every message lets you unsubscribe in one click. Without activation, the data stays private until you refuse; after a refusal, only a fingerprint is kept so that you are not contacted again, and you can ask for full deletion at [email protected].

5. Profiles created from a CV sent by a partner

When a firm or partner sends us a CV, an account is prepared in your name. It stays private: it does not appear in search, suggestions or the CV library, and no company sees it until you activate it.

You receive a single information email stating where your data came from, with two one-click choices: “Activate my profile” or “Delete my data”. Without an answer within 60 days, the account and CV are deleted automatically.

6. Recipients

Companies you apply to; recruiters from verified companies if your profile is visible to them (without your contact details); the training centre or client you send a request or quote to.

Our technical processors: host, email delivery service and AI provider (Anthropic's Claude API) for assistance features, which receives neither your contact details nor your identity.

7. Artificial intelligence

Some features (CV structuring, writing help, assisted reading of an application, translation) send the necessary text to an AI provider. Your contact details (email, phone) and identity are not sent; JobiClub keeps this text only in a 30-day technical cache, and the usage log (without content) for 13 months.

No decision about you is made automatically: a person always reviews the suggestion. You can use JobiClub without any AI feature.

8. Transfers

Data is processed in France by the publisher and in Tunisia for collecting payments in dinars, under contractual safeguards. AI features rely on a provider based in the United States; this transfer relies on contractual safeguards in line with Organic Law No. 2004-63 and is limited to what is strictly necessary: the text to analyse, without your contact details or identity.

9. Retention

Account and profile: as long as the account is active, then deleted on request. After 24 months without login, an email offers to keep or delete your account.

Applications: anonymized 2 years after the last activity (letter, answers, CV and attachment erased; only identity-free statistics remain). Technical logs (views, emails sent, processed events, read notifications): 12 months; audit log: 3 years; AI usage: 13 months; backups: 30 days.

Accounts prepared from a CV sent by a partner and never activated: 60 days. Prepared contacts and pages that did not join JobiClub: until they refuse, then only a fingerprint is kept so they are not contacted again. Invoices: 10 years.

10. Your rights

You can access, correct, erase and port your data, restrict or object to processing and withdraw your consent at any time. From Settings → Privacy, you can download all your data and delete your account. For any request: [email protected].

If you disagree, you can contact the CNIL (France) or the INPDP (Tunisia). JobiClub is for people aged 16 or over; age and acceptance of the terms (date and version) are recorded at signup.

11. Security

Encrypted connections, hashed passwords, two-factor authentication, uploaded file checks, data isolation between companies, log of sensitive actions.