Privacy Policy

This Privacy Policy describes how Latcha AI (hereinafter "we", "our" or "us") collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Data Controller

2. Data We Collect

We collect the following data:

2.1 Identification Data

• First and last name
• Email address
• Password (encrypted)
• Google account information (if logging in via Google)

2.2 Payment Data

• Transaction information (via Stripe)
• Purchase history
• Billing information

2.3 Usage Data

• Interview sessions (duration, date, configuration)
• Uploaded resumes (processed client-side, not stored on our servers)
• AI interactions during sessions
• Login and usage logs

2.4 Technical Data

• IP address
• Browser type and operating system
• Cookies and session identifiers
• Navigation data

3. Purpose of Processing

Your data is collected for the following purposes:

• Account management: Creating and managing your account
• Service provision: AI interview sessions, resume management, session tracking
• Payment processing: Billing and subscription management
• Service improvement: Usage analysis and optimization
• Communication: Customer support, service notifications
• Security: Fraud prevention and data protection
• Legal obligations: Compliance with legal and regulatory requirements

4. Legal Basis

Processing of your personal data is based on:

• Your consent: For specific processing operations
• Contract performance: For providing services you subscribed to
• Our legitimate interests: For service improvement
• Legal obligations: For compliance with our legal duties

5. Data Retention

• Account data: During account lifetime + 3 years after deletion
• Billing data: 10 years in accordance with accounting obligations
• Session data: During your active account period
• Technical logs: Maximum 12 months

6. Data Recipients

Your data may be shared with:

• Stripe: For payment processing (PCI-DSS compliant)
• OpenAI / Google Gemini: For AI functionality (anonymized data)
• Web hosting provider: For storage and service delivery
• Authentication services: Google OAuth for login

All our sub-processors are subject to strict security and confidentiality obligations in accordance with GDPR.

7. International Transfers

Some of your data may be transferred to countries outside the European Union (notably to the United States for OpenAI, Google, and Stripe services). These transfers are governed by appropriate safeguards (standard contractual clauses, Privacy Shield, etc.) in accordance with GDPR.

8. Your Rights

Under GDPR, you have the following rights:

• Right of access: Obtain a copy of your personal data
• Right of rectification: Correct inaccurate or incomplete data
• Right to erasure: Delete your data under certain conditions
• Right to restriction: Limit processing of your data
• Right to portability: Receive your data in a structured format
• Right to object: Oppose processing of your data
• Right to withdraw consent: At any time
• Post-mortem rights: Define directives regarding your data after death

To exercise these rights, contact us at: contact@latcha-ai.com

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr

9. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or disclosure:

• Encryption of passwords and sensitive data
• HTTPS protocol for all communications
• Restricted access to personal data
• Access monitoring and logging
• Regular backups

10. Cookies

Our site uses cookies to improve your experience. For more information, see our Cookie Policy.

11. Updates

We reserve the right to modify this privacy policy at any time. Any changes will be published on this page with a new update date. We encourage you to review this page regularly.

12. Contact

For any questions regarding this privacy policy or exercising your rights, contact us: