Privacy Policy

1. Data Controller

The data controller for your personal data is Netz Informatique SAS (SIREN: 818 347 346), with its registered office at 1A Route de Schweighouse, 67500 Haguenau, France. President: Mikail LEKESIZ.

Contact: [email protected]

2. Data collected

As part of the Reflektif platform, we collect the following personal data:

• Identification data : name, first name, email address
• Profile data : age range, education level, geographic location (city)
• Psychometric data : personality test results (RIASEC, Big Five, Professional Values)
• Debriefing data :contents of conversations with the AI advisor
• Guidance data :favorite professions, career rankings, admission files
• Documents :uploaded documents (school reports, CVs, diplomas)

3. Purposes and legal basis of processing

4. Processing by Artificial Intelligence

Reflektif uses artificial intelligence (Google Gemini) to generate personalized career guidance reports. Your psychometric test results and debriefing conversations are processed for this purpose. The AI-generated reports are a decision-making tool and do not replace the guidance of a professional advisor.

Data transmitted to AI: test scores, debriefing conversation content, profile information (age range, academic level). Your identification data (name, email) is not transmitted to the AI.

5. Recipients and subcontractors

Your data may be shared with the following providers:

• Supabase — Database hosting (EU servers)
• Google Gemini — AI analysis engine
• Stripe — Payment processing (PCI DSS compliant)
• Manus — Application hosting infrastructure

6. Retention period

• Account data: account lifetime + 30 days after deletion request
• Psychometric data: account lifetime
• Payment data: 10 years (legal obligations, Stripe references only)
• Uploaded documents: account lifetime

7. Your rights

In accordance with the GDPR (EU Regulation 2016/679), you have the following rights:

• Right of access (Art. 15) — Obtain a copy of your data
• Right of rectification (Art. 16) — Correct your inaccurate data
• Right to erasure (Art. 17) — Request the deletion of your data
• Right to data portability (Art. 20) — Receive your data in a structured format
• Right of objection (Art. 21) — Object to processing
• Right to restriction (Art. 18) — Request processing limitation

To exercise your rights, contact us at [email protected]. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr

8. Cookies

Reflektif only uses technical cookies strictly necessary for the service to function (session cookies). No advertising or tracking cookies are used. Web analytics are provided by Umami, a tool that does not place any cookies and does not collect IP addresses.

9. Protection of minors

Reflektif processes the data of users under 15 years of age only with the consent of their legal representatives. For users under 15, account creation must be carried out by a parent or legal representative.

10. Security

We implement appropriate technical and organizational measures to protect your data: encrypted communications via HTTPS, passwords hashed with bcrypt, secure session cookies (httpOnly, secure), role-based access control.

11. Modifications

This privacy policy may be updated at any time. In the event of substantial changes, you will be informed by email.