Privacy policy
1. Data controller
Illuminagy (Bessam Ouazzane), publisher of the CCO service. For any question about your data: support@illuminagy.com or the contact page.
2. Data collected and purposes
| Data | Why | Legal basis |
|---|---|---|
| Account: email address and password (stored hashed, never in plain text), or Google identifier if you choose Google sign-in | Creating, securing and opening your account | Performance of the contract |
| Content you enter or import: CVs, track record, job postings, produced documents and optional answers you give us | Providing the service you request | Performance of the contract |
| Service usage and technical logs (IP address, timestamps, errors) | Security, abuse prevention, tracking your usage, diagnostics | Legitimate interest |
| Country inferred from your IP address, on the fly and without storing it | Suggest the currency and apply the rules of your area | Legitimate interest |
| Origin of your visit (campaign, referring site, landing page) | Measuring our communication | Legitimate interest |
| Billing (name, country, payment method) | Payment and invoice, handled by the merchant of record | Performance of the contract and legal obligations |
| Measurement of advertising campaigns (Google, Meta) | Knowing whether a campaign brought you here | Your consent, withdrawable at any time |
3. Who with
Your data is neither sold nor transferred. It is processed by us and, each for its own task, by:
- our hosting provider, in the European Union;
- our artificial intelligence model provider, based in the United States, to produce what you request (analyses, suggestions, translations, letters);
- a merchant of record, for payment and billing;
- our email delivery service, in the European Union, for account emails;
- Google, only if you choose to sign in with your Google account;
- the campaign measurement tools (Google, Meta), only if you accept them or tick the box at sign-up.
Transfers to providers located outside the European Union rely on the safeguards provided by the GDPR (standard contractual clauses or adequacy decision).
4. Retention
Your data and content are kept as long as your account is active. You can request the deletion of your account at any time; it erases its content. Technical logs and billing data are kept as long as necessary for security and legal obligations.
5. Your rights
- Access and rectification of your data
- Erasure of your account and its content
- Restriction and objection
- Portability : receiving your content in a readable format
- Withdrawal of consent to campaign measurement, at any time (“Campaign measurement” link in the footer)
To exercise them: support@illuminagy.com or the contact page. You can also contact the CNDP (Morocco, www.cndp.ma) or, if you are located in the European Union, the data protection authority of your country of residence.
6. Cookies and campaign measurement
- Session cookie (essential): keeps you logged in. No consent required.
- Preferences (essential): your display and consent choices, stored in your browser, never sent to a third party.
- Measurement of advertising campaigns (Google, Meta) (Google, Meta): loaded only if you accept the notice, shown in the countries where the law requires it; elsewhere, the footer link lets you refuse. You can refuse without losing any feature and change your mind at any time.
7. Security
Encrypted communications, passwords stored hashed, data access limited to the needs of the service.