✦ Winner IAwards 2025 · AI-native sourcing by FreelanceRepublik · Try Jemmo in 2 minutes
Home/Privacy policy
GDPR · v3.2

Privacy policy.

How Jemmo collects, processes and protects your personal data. Compliant with the GDPR and the French Data Protection Act.

GDPR commitment.

Jemmo complies with the regulations on the protection of personal data, in particular regulation 2016/679 of 27 April 2016 (GDPR) and the amended French Data Protection Act.

In this context, Jemmo has appointed a data protection officer responsible for ensuring compliance with the regulations and for responding to all requests for information and/or advice relating to personal data.

Jemmo undertakes to ensure the confidentiality, security, integrity, availability and retention of the personal data processed and/or hosted, in accordance with applicable laws and regulations.

Data collected.

Data is collected and used by Jemmo to manage Clients' access and actions within the Services offered and to improve and personalize those Services.

Creating an Account and subscribing to the Services involves the collection and automated processing of information and data necessary to provide the Services.

Data relating to Clients, their staff, their customers and/or their activities may be collected, hosted, used, retained and shared with Jemmo's partners in order to provide the Services.

Data categories

  • Identification — first name, last name, email address, phone number
  • Account — credentials, password (hashed), preferences
  • Activity — connection logs, searches, candidate lists, usage history
  • Candidate data — imported, sourced or enriched profiles (public data or provided by the Client)
  • Billing — billing details, payment history (via Stripe)

Legal bases.

The processing of personal data by Jemmo is based on the following legal grounds:

  • Contract performance — providing the Jemmo service (account, sourcing, app)
  • Legitimate interest — aggregation of public professional profiles for B2B introductions, in compliance with GDPR principles
  • Explicit consent — newsletter and non-strictly-necessary cookies
  • Legal obligation — accounting retention, fraud prevention, anti-money-laundering

Security and hosting.

The data collected by Jemmo is processed and stored with the Site's and the Platform's host under conditions designed to ensure its security.

HostFLY.IO — Located in France (EU)
EncryptionTLS 1.3 in transit, AES-256 at rest
AuthenticationOAuth + 2FA available
BackupsDaily, kept for 30 days
Audit logsKept for 12 months
No client data is transferred outside the EU. The AI models invoked via MCP process requests in streaming and do not train any third-party model on your data.

Retention period.

The data collected is kept for one year beyond the period necessary to achieve the stated purposes. Beyond that, it is kept for statistical purposes only.

Active client accountDuration of the contractual relationship
Inactive client account3 years after last login
Billing data10 years (accounting obligation)
Public candidate profilesContinuously updated or deleted
Connection logs12 months
NewsletterUntil unsubscribe, +3 years

Your rights.

Under the applicable data protection legislation, you have the following rights:

  • Right of access — confirmation of the processing of your data, access to the data, purposes, categories.
  • Right of rectification — correction of inaccurate data.
  • Right to erasure — deletion of data processed unlawfully or whose purpose is no longer relevant.
  • Right to restriction — restriction of processing in certain circumstances.
  • Right to portability — receiving your data in a structured format and transferring it.
  • Right to object — objection to processing for reasons relating to your particular situation.

How to exercise them

The Client may exercise a request regarding these rights directly with Jemmo at contact@jemmo.io. Response time: 30 days maximum.

Complaint

Where applicable, a complaint may be lodged with the French Data Protection Authority — cnil.fr.

Amendments.

Jemmo reserves the right to amend this privacy policy at any time. These amendments may be made necessary to comply with legal developments, or for strategic or technical reasons.

The new version will take effect on the date of its publication. Jemmo undertakes to make its best efforts to inform the Client directly of any substantial change.

DPO contact.

Data protection officer

guillaume@jemmo.io

Reply within 30 days (statutory)

General enquiries

contact@jemmo.io

DPO postal address

Guillaume LEPERCQ
99 avenue Achille Peretti
92200 Neuilly-sur-Seine, France

Supervisory authority

cnil.fr

Need a PDF version?

All our legal documents are available as a timestamped PDF for your records and your legal department.

Download the PDF ↓