Privacy Policy

Last updated: April 3, 2026

1. Who We Are

Growth.Talent is operated by THE GOILLOT, a French company registered under SIREN 882 875 248. For any privacy-related inquiries, contact us at talent@growthtalent.org.

2. Data We Collect

  • Account data: When you sign in via LinkedIn OAuth, we receive your name, email address, profile photo, and LinkedIn profile URL.
  • Email subscriptions: When you subscribe to job alerts, we store your email address and category preferences.
  • Application tracking: When you apply to a job through Growth.Talent, we record the application event (job ID, timestamp).
  • Analytics: We use Plausible Analytics, which collects anonymized usage data (page views, referrer, country). Plausible does not use cookies and does not collect personal data.
  • Payment data: When you purchase a Boost for a job listing, payment is processed by Stripe. We do not store credit card numbers. Stripe handles all payment data under PCI DSS compliance.

3. Why We Collect Your Data

  • Job matching: To connect you with relevant growth marketing opportunities.
  • Email alerts: To send you weekly job digests based on your preferences.
  • Application tracking: To let you track your applications and help companies manage candidates.
  • Platform improvement: To understand how people use Growth.Talent and improve the experience.
  • Payment processing: To process Boost purchases for job listings.

4. Legal Basis (GDPR)

  • Consent (Art. 6(1)(a)): Email subscriptions and job alerts.
  • Contract performance (Art. 6(1)(b)): Account creation, job applications, Boost purchases.
  • Legitimate interest (Art. 6(1)(f)): Anonymized analytics to improve the platform.

5. Who We Share Your Data With

We do not sell your personal data. We share data only with these service providers:

  • LinkedIn: OAuth authentication (we receive your profile data when you sign in).
  • Stripe: Payment processing for Boost purchases.
  • Resend: Transactional emails (welcome emails, job alerts).
  • Plausible Analytics: Anonymized, cookie-free analytics. EU-hosted. No personal data shared.
  • Supabase: Database hosting (AWS us-east-1).
  • Vercel: Website hosting and CDN.

6. Data Retention

  • Account data: Retained while your account is active. Deleted upon request.
  • Email subscriptions: Retained until you unsubscribe.
  • Application data: Retained for 24 months, then anonymized.
  • Analytics data: Anonymized at collection. No personal data retained.
  • Payment data: Stripe retains transaction records per their data retention policy. We retain Boost activation records for accounting purposes.

7. Your Rights

Under GDPR (Articles 15-21), you have the right to:

  • Access your personal data.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten").
  • Port your data to another service.
  • Object to processing based on legitimate interest.
  • Restrict processing in certain circumstances.
  • Withdraw consent at any time (for email subscriptions).

To exercise any of these rights, email talent@growthtalent.org. We will respond within 30 days.

You also have the right to lodge a complaint with the CNIL(Commission Nationale de l'Informatique et des Libertés), the French data protection authority.

8. Cookies

Growth.Talent uses minimal cookies:

  • Session cookie: Required for LinkedIn OAuth authentication. Expires when you close your browser.
  • Admin cookie: Used for admin dashboard access only.

We do not use advertising cookies, tracking cookies, or third-party cookies. Plausible Analytics operates without cookies. No cookie consent banner is required.

9. International Transfers

Your data is hosted on Supabase (AWS us-east-1, United States). For transfers of personal data from the EU/EEA to the United States, we rely on the EU-US Data Privacy Framework and Standard Contractual Clauses as appropriate.

10. Payments & Stripe

The Boost feature is processed exclusively through Stripe. THE GOILLOT does not store, process, or have access to your credit card numbers. All payment data is handled by Stripe under PCI DSS Level 1 compliance. Invoices for Boost purchases are available upon request at talent@growthtalent.org.

11. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be notified via email to registered users. Continued use of Growth.Talent after changes constitutes acceptance of the updated policy.