Privacy Policy
Effective as of 1 October 2026
Table of Contents
- Preamble
- Principles Relating to the Collection and Processing of Personal Data
- Personal Data Collected and Processed During Site Navigation
- Data Controller and Data Protection Officer
- User Rights Regarding Data Collection and Processing
- Conditions for Modifying the Privacy Policy
- Data Security Measures
- Data Retention
- Data Transfers Outside the EU
- Cookie Policy
- Third-Party Services
ARTICLE 1 - Preamble
This privacy policy aims to inform users of the site:
- How their personal data is collected. Personal data is any information that allows identifying a user. This includes: names, first names, age, postal or email address, location, or IP address (non-exhaustive list);
- The rights they have regarding this data;
- The person responsible for the processing of collected and processed personal data;
- The recipients of this personal data;
- The site's policy on cookies.
This policy complements the legal notices and the General Terms of Use that users can consult at the following address:https://www.onlineresumeparser.com/terms-and-conditions
ARTICLE 2 - Principles Relating to the Collection and Processing of Personal Data
In accordance with Article 5 of the European Regulation 2016/679, personal data is:
- Processed lawfully, fairly, and transparently with respect to the data subject;
- Collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
- Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
- Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that is inaccurate, having regard to the purposes for which they are processed, is erased or rectified without delay;
- Kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed;
- Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.
ARTICLE 3 - Personal Data Processed Through the Site and Service
Article 3.1: Data collected
Depending on how you use HireLayer, the Provider may process the following categories of personal data:
- Account and authentication data, such as your name, email address, and account identifiers;
- Service data, including API key identifiers, usage and credit records, resumes, job descriptions and candidate information you submit, and the results produced from them (extracted data, job criteria, matching scores and rankings);
- Billing and subscription records, including Stripe customer and transaction identifiers;
- Support messages and information you choose to include in them;
- Technical information generated when you use the Site or Service, such as IP address, timestamps, request metadata, and browser or device information.
This information is processed to:
- Create and manage accounts and authenticate users;
- Provide the HireLayer APIs (resume parsing, job parsing, candidate matching, skills matching and candidate ranking), API access, and usage tracking;
- Manage subscriptions, payments, and customer support;
- Secure, maintain, and improve the Site and Service;
- Meet legal and accounting obligations.
Article 3.2: Data collection methods
Account and service data are collected when you register, sign in, submit a resume, a job description or candidate information through the dashboard or API, manage a subscription, or contact the Provider. Technical and security logs are generated when you access the Site or Service. Google Analytics and/or Umami analytics may also be used when configured for the Site.
Data is retained only for as long as needed for the relevant purpose, including account and service operation, security, support, billing, and legal obligations. Retention may vary by data category and by the feature used.
Where the Provider relies on a third-party service, that service receives only the information needed to perform its role, subject to the applicable service terms and data protection safeguards.
Article 3.3: Hosting and processing infrastructure
The Provider operates the Site. Resume parsing requests (HireLayer CV Extract) may be processed using Amazon Web Services (AWS), including AWS Lambda and Amazon Bedrock. Job parsing, candidate matching, skills matching and candidate ranking requests (HireLayer Job Extract, Match, Skills and Rank) are forwarded to a processing service operated by the Provider, which uses Amazon Bedrock. Submitted content is sent to the relevant providers only to provide the requested service. The operator's contact details are:
Louis Desclous
23 rue Jean Marie Kerling, 92350 Le Plessis Robinson, France
+33 7 82 67 88 75
ARTICLE 4 - Data Controller and Data Protection Contact
Article 4.1: The data controller
For account, subscription, billing, support, and Site security data, the data controller is Louis Desclous, operating HireLayer (formerly OnlineResumeParser).
When a business customer submits candidate resumes or candidate information for its own recruitment purposes, that customer determines the purposes and means of that processing. The Provider processes that data to deliver the requested service, in accordance with the applicable service terms and instructions. The customer remains responsible for its recruitment processing and for informing candidates.
The Provider can be contacted at:
Louis Desclous
23 rue Jean Marie Kerling, 92350 Le Plessis Robinson, France
+33 7 82 67 88 75
Article 4.2: Data protection contact
For questions about personal data or to exercise your rights, contact Louis Desclous using the details above. If you believe your rights have not been respected, you may lodge a complaint with the CNIL.
ARTICLE 5 - User Rights Regarding Data Collection and Processing
Any user affected by the processing of their personal data can assert the following rights, in accordance with the European Regulation 2016/679 and the Data Protection Act (Law 78-17 of January 6, 1978):
- Right of access, rectification, and erasure of data (articles 15, 16, and 17 of the GDPR);
- Right to data portability (article 20 of the GDPR);
- Right to restriction (article 18 of the GDPR) and opposition to data processing (article 21 of the GDPR);
- Right not to be subject to a decision based solely on automated processing;
- Right to determine the fate of data after death;
- Right to file a complaint with the competent supervisory authority (article 77 of the GDPR).
To exercise your rights regarding data for which Louis Desclous is the data controller, contact him by email at [email protected] or by mail at 23 rue Jean Marie Kerling, 92350 Le Plessis Robinson, France. For a resume submitted by a business customer for its recruitment processing, you may also contact that customer, which determines the purposes and means of that processing.
To enable the data controller to grant your request, you may need to provide certain information such as: your name, email address, and account number, personal space, or subscriber number.
Visit the sitecnil.frfor more information on your rights.
ARTICLE 6 - Conditions for Modifying the Privacy Policy
The publisher may update this Policy to reflect changes to the Site, the Service, or applicable law. The latest version and its effective date will be published on this page.
Where required by law, users will be informed of material changes before they take effect.
This policy was published and last updated on 25 September 2026.
ARTICLE 7 - Data Security Measures
The Provider applies appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. Access to personal data is restricted to what is needed to operate and support the Service. If a personal data breach occurs, the Provider will take the actions required by applicable law and notify the relevant parties where required.
ARTICLE 8 - Data Retention
Retention periods depend on the type of data and the feature used. Account, subscription, usage, and billing records are kept for as long as needed to provide the Service and manage the account, and may be retained longer where required for legal, accounting, security, or dispute-resolution purposes.
Resume files, job descriptions, candidate information and the results produced from them are processed to provide the requested service. The Provider does not use this content for advertising. Business customers remain responsible for the retention and subsequent use of the results they receive in their own systems. Users may contact the relevant data controller to request access, correction, or deletion, subject to applicable legal obligations.
ARTICLE 9 - Data Transfers Outside the EU
The Provider uses service providers that may process personal data in or outside the European Economic Area. Where a transfer outside the EEA takes place, the Provider applies a transfer mechanism and safeguards required by applicable data protection law.
ARTICLE 11 - Third-Party Services
Depending on the feature used and the Site's configuration, the Provider may use the following service providers:
- Resume parsing (HireLayer CV Extract): Amazon Web Services, including AWS Lambda and Amazon Bedrock.
- Job parsing, matching, skills matching and ranking (HireLayer Job Extract, Match, Skills and Rank): a processing service operated by the Provider, using Amazon Bedrock.
- Payments: Stripe.
- Transactional email: Resend.
- Sign-in and analytics: Google and Umami, when those features are enabled or used.
- Error monitoring: Sentry, where configured.
Each provider receives only the data needed for its role and processes it under the terms and safeguards applicable to that service.
