Privacy policy

Controller

The controller is Publisher not stated, Entrepreneur individuel (micro-entreprise). SIRET: not stated. The public brand is Tafons. Contact: contact@tafons.com. The publication director is the publisher of the service.

No natural person’s name is published on this page. The legal name and the SIRET come from the service configuration.

Legal notice

Data

Account: email, password stored as a hash, role (candidate or recruiter), language, country (France or Morocco), referral code.

Profile: name, headline, cities, home city, maximum distance, timezone derived from the country, skills, years of experience, languages, optional minimum salary, remote preference, domain, contract types. A technical vector ranks offers.

CV: the PDF file, the extracted text and the skills found in that text.

Applications and swipes: offer, direction, score, status, date, and the message prepared for sending when you accepted sending.

Consents: type, text version, date and, when you accept, the IP address. The IP address is removed if you delete the account.

Google or Apple: only if you use those buttons, the provider’s technical subject linked to the account. For Apple, a refresh token or an authorization code may be kept so the access can be revoked with Apple when the account is deleted, when the Apple key is configured. Without that key, revocation is not called.

Recruiter: company name, optional SIREN, website, sector, size, city, and the offers that account publishes.

Location: if you tap “Use my location”, the browser shares a position only long enough to pick the nearest city in the catalogue. Coordinates are not stored. Only the chosen city is. You can pick a city without sharing a position.

Blocks: the company id or the name already shown on the offer, and, when a recruiter blocks a candidate, that account id. Nothing else. This hides offers or an application.

Purposes and bases — France (GDPR, CNIL)

Performance of the service you asked for (account, offer feed, profile, application): GDPR article 6.1.b.

Consent (Tafons sending an application, location used to suggest a city, sending data to an external language model, and any agreement you can withdraw in the profile): article 6.1.a. Withdrawal does not undo a message already sent.

Legitimate interests (account security, abuse limits, keeping the service running): article 6.1.f.

Proof of consent, with the IP address removed after account deletion: article 7.1.

You can contact the CNIL (cnil.fr) if you consider your rights are not met.

Morocco (Law 09-08, CNDP)

For a person in Morocco, collection relies on prior information and, where Law 09-08 requires it, on consent. Access, rectification and objection are exercised through the contact above.

Data is hosted in the European Union. That transfer out of Morocco has to be covered by the CNDP formalities (cndp.ma). Those formalities are the publisher’s duty and are not described here as already completed while the publisher configuration is still a value to fill in.

Hosting

The application is hosted on Render. The Postgres database is hosted on Neon in the Frankfurt region (European Union). Uploaded CVs are stored on the disk of the service that hosts the application.

Offers may be read from third-party job sites. Tafons sends your profile there only if you apply and the send mode is Tafons’s.

Recipients

The recruiter of an offer you apply to receives the application (name, email, headline, skills, message, CV). Tafons does not sell data. A card labelled Sponsored may appear in the deck, at most once every 8 to 10 swipes, and only after a choice: personalised, non-personalised, or none. With no choice, there are no ads, in France and in Morocco. Ads are not shown during signup, an application, CV upload, payment, or a legal page. An active Premium subscription removes them. On the web, Google AdSense loads only when ADSENSE_CLIENT is set and after that choice. In the Android and iOS apps, Google AdMob may read an advertising identifier only after the same choice. On Android, Google’s test ids are used until real ids are configured. On iOS, no ad is requested and that identifier is not read until an id for the iOS app is configured; the read then also waits for Apple’s tracking permission (App Tracking Transparency), and a refusal leaves it inactive. The website does not ask for that permission.

If a Careerjet key is set, opening the feed sends Careerjet the IP address, the browser, the search headline and the city, only to show offers. Tafons does not store those replies. With no key, that send does not happen.

Letter help: no name, headline, skill, years of experience, offer title or CV extract is sent to an external language model until you accept that sending in the profile. After that agreement, and only when an external model key is configured, those items are sent to that processor to draft the letter. With no key, or without the agreement, the letter is written on the service and does not leave it. You can withdraw the agreement in the profile.

The technical processors are the application host and the database host, in the European Union.

Cookies and audience measurement

Until you choose, Tafons does not store an audience or advertising cookie, and does not load Google Analytics. The banner offers three actions at the same level: “Accept all”, “Refuse all” and “Customize”. Customize separates audience measurement and advertising. No box is ticked in advance.

Audience measurement (Google Analytics 4) starts only if you accept it. The measurement id comes from the service configuration. When that id is empty, the script is not loaded. Google Analytics cookies are stored only after that agreement.

The choice is saved in the browser (local storage and the tafons_consent cookie) for 6 months, then the banner returns. That period stays under the 13-month cap the CNIL sets for a cookie’s lifetime. You can change your mind at any time with “Manage cookies” in the footer.

This choice is separate from consent to send an application, and separate from the choice asked in the deck for the Sponsored card. The same record decides whether the Google AdSense script may load: without the advertising box, that script does not load.

Google requires a certified consent-management platform for personalised ads in the European Economic Area. This banner is not one. Two options stay open, with no paid tool added here: Google’s own Privacy & messaging, or this banner with non-personalised ads only. Until the first is connected, any web ad is requested as non-personalised.

Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to your users based on their visit to tafons.com and/or other sites on the Internet. Google and partners may also use web beacons, IP addresses or other identifiers when an ad is served.

How Google uses data when it serves ads on a partner site is described at https://policies.google.com/technologies/partner-sites

You may opt out of personalised advertising from Google by visiting Ads Settings: https://adssettings.google.com/ You may also opt out of some third-party vendors’ use of cookies for personalised advertising by visiting https://www.aboutads.info/choices/ or, in Europe, https://www.youronlinechoices.com/

The page /en/cookies repeats these points in a separate cookie policy, for visitors who are looking only for that use.

Testimonials

The “Share your experience” form (/fr/temoignage) collects a first name, the initial of the last name, the account type (candidate or recruiter), an optional city and country, and the text. No email address is asked. Basis: your consent, given with a required checkbox. Purpose: showing the testimonial on tafons.com after a review by the team. A rejected testimonial is deleted. A published one stays online until you ask for its removal at contact@tafons.com, which deletes it.

Retention

Account data is kept while the account exists. On deletion, the data listed on the “Delete the account” page is erased or made non-identifying. The consent record without the IP address is kept so the agreement can still be shown.

Your rights

Access and portability: “Download my data” in the profile (JSON archive and CV). Rectification: the profile can be edited. Erasure: “Delete my account”, or contact@tafons.com. Objection and withdrawal of consent: in the profile, for automatic sending and for letter help by an external model. You can also contact the CNIL in France or the CNDP in Morocco.