Privacy Policy

CV Content is uploaded by Customers (consulting and recruitment firms) about their consultants, employees, or candidates. Versio acts as a processor for this data — the Customer is the controller and remains responsible for the lawful basis and notice to data subjects. Data managed:

• Personal details (name, job title, location, phone, email, website, summary)
• Work experience (company, role, dates, descriptions)
• Education (institution, degree, dates)
• Skills and skill categories
• Certifications, publications, languages
• Profile photos and CV version configurations

Photos. Profile photos are stored and rendered in CV exports. They are not sent to AI providers except (a) during CV import for automated headshot detection (a single image-classification call per candidate image) and (b) when text extraction fails on image-only PDFs, in which case rasterised pages may contain photos. In both cases the same no-training and 30-day retention terms apply (see Section 6.3).

We do not store payment card details. Payments are processed by Stripe. We store only Stripe customer ID, subscription ID, and billing status. See Stripe’s privacy policy.

We do not use tracking cookies, advertising cookies, or third-party profiling. We use Cloudflare Turnstile to protect certain actions (e.g., registration, login) from automated abuse. Cloudflare may collect your IP address, browser type, and interaction data to distinguish humans from bots. See Cloudflare’s privacy policy.

Your data is stored on servers operated by Infomaniak Network SA in Switzerland (Geneva) — ISO 27001 and ISO 9001 certified. Your data does not leave Switzerland for primary storage.

When you use AI Features, relevant Content is transmitted to our AI provider. See Section 6 for details.

Payments are processed by Stripe (US, with SCCs). Transactional emails are sent via our email provider with minimal content.

AI processing happens only when you actively use an AI Feature: CV import, AI generation, quality analysis, summary rewriting, ATS checking, candidate matching, or translation. If you don’t use these features, no Content is sent to AI providers.

We send the minimum Content necessary — typically CV text, job descriptions, or version content.

We do not send profile photos, payment information, account credentials, or other users’ data (unless required for candidate matching within your Organization).

• No training on customer content
• 30-day retention for trust & safety, then permanent deletion
• US processing — transfers via Standard Contractual Clauses (Anthropic Ireland Ltd)

AI is always user-initiated. You can use the Service without AI. You review all AI-generated content before accepting it. We may change AI providers while maintaining equivalent data protection standards.

The Candidate Matcher scores and ranks profiles against a job description using a three-stage pipeline: requirement extraction (LLM), semantic pre-filter (vector embeddings), and deep analysis (LLM). It produces a match score (1–10), matched/missing skills, and a recommendation.

The Matcher is available only to Business Customers and Recruitment Customers; it is not offered to Individual Users. Classification under the EU AI Act (Regulation 2024/1689) depends on the Customer’s use case:

• Business Customers (consulting / professional services) — matching their own employees / consultants for a client proposal. May fall within Annex III §4(b) (work allocation) if the result is used to allocate work to employees based on individual traits.
• Recruitment Customers — matching external candidates for presentation to third-party employers. Falls within Annex III §4(a) (recruitment and selection) — high-risk AI system.

Where the use case is high-risk, Versio is the provider and the Customer is the deployer. Provider commitments and deployer obligations are detailed in the Terms of Service (§6.5) and the DPA. Scores are advisory; the Service does not auto-shortlist, auto-reject, or auto-contact candidates.

Every Matcher run is logged (job description, candidate IDs, scores, model used, timestamp) and retained in the Customer’s account for audit. Customers may delete individual runs at any time.

Access all your data through the Service. Export in JSON, PDF, or Word format at any time.

Edit your data directly. Delete your account through settings — all Content is removed within 30 days.

Object to processing based on legitimate interest. Request restriction while disputes are resolved.

Where processing is based on consent (e.g., AI Features), withdraw at any time by ceasing use of the feature.