Privacy

The data controller is Clément Omnès, who publishes pathpipe as a private individual based in France (see the legal notice). For anything in this policy, write to [email protected].

Your account: email address, name, profile picture if Google or LinkedIn sends one, and either a password hash or the identifier returned by Google or LinkedIn if you signed in through them.

Your search: job preferences, the weight you give each criterion, exclusions, and every application you record with its status, dates, notes and the person who referred you (name and email address, entered by you).

Your CV: the file you upload to your profile, plus the skills read from it.

Your activity on postings: the ones you save, dismiss or review, and the match score each one gets.

What you send us: feedback and feature requests written in the app.

Operational data: the date of your last sign-in, single-use codes and links (email verification, password reset, two-step verification), and server logs needed to run the service and investigate abuse or failures.

Each use of your data rests on one legal basis under the GDPR (article 6).

pathpipe scores each opening against the criteria you set: titles, skills, seniority, location, salary and exclusions. This is automated processing, but it decides nothing about you: it only orders what you see, has no legal or similar effect, and you change the criteria whenever you want.

Nothing in your account is used to build advertising profiles, and no part of it is sold, rented or shown to recruiters.

Uploaded files are stored on your account and read to extract skills, seniority and domain. That extraction runs on our own servers; your CV is not sent to a third party.

Your data is visible to you only. The admin tools are reachable by the publisher alone, and are used for support, abuse handling and improving matching.

Postings come from employers and the systems that host their job boards, not from you. The sources are listed on the data sources page.

A posting can include the name or contact of a recruiter, published by the employer. pathpipe keeps it as part of the posting, on the basis of its legitimate interest in showing complete openings, and never contacts that person.

If you are named in a posting and want to object, write to [email protected].

Only the providers needed to run the service. Each one processes data on our instructions, under a data processing agreement.

If you sign in with Google or LinkedIn, they learn that you signed in to pathpipe and send us your name, email address, profile picture and account id. They act as separate controllers under their own privacy policies.

PostHog Inc. is a US company. Your analytics data stays hosted in the EU; any access from the United States is covered by the Standard Contractual Clauses in its data processing agreement.

The payment provider will be added here before paid plans open.

Traffic is encrypted with HTTPS. Passwords are hashed with bcrypt and never stored in clear. The session cookie is HttpOnly, so scripts cannot read it. Two-step verification by email code is available.

You can download all your data and delete your account yourself, in Settings.

Under the GDPR you can ask for access to your data, its correction, its deletion, a copy in a portable format, or the restriction of its processing, and you can object to processing based on legitimate interest.

You can withdraw your consent to analytics at any time in the Cookie settings. Withdrawing does not affect what was done before.

French law also lets you set instructions for what happens to your data after your death.

Write to [email protected] from the address of your account and you will get an answer within one month. If you think your rights are not respected, you can complain to the CNIL.

pathpipe is meant for people old enough to work. It is not aimed at children under 15.

If this policy changes in a way that matters, you will be told by email or in the app before it applies.