Privacy policy
Version of 20 October 2026
What Proofseen does with your data, written from what the software actually does.
Who is responsible
The data controller is e-kigai, Société coopérative et participative par actions simplifiée (SCOP SAS, a French worker cooperative) with variable capital (brand Spar-X), 1 Allée des Écuries, 64600 Anglet, France, Bayonne Trade and Companies Register (RCS), SIREN 999 138 050. Details are in the legal notice.
For any question about your data: data@spar-x.fr, or by post: Siège social e-kigai, 1 Allée des Écuries, 64600 Anglet.
In short
- We sell no data and show no advertising.
- No audience analytics tool and no advertising tracker: only cookies the service needs to work are set.
- Your profile is public only if you publish it, and you can publish it under a reference (FR-XXXXX) rather than your name.
- Contact details are not exchanged outside the platform: a filter spots them in messages and public texts.
- No score is computed about a person; matches between missions and profiles rest on facts you can see.
- You can download all your data and erase your account from your settings.
What we process, feature by feature
Account and sign-in
Sign-in goes through Clerk, with a code sent to your e-mail address. Our database keeps your Clerk identifier, your primary e-mail address, your display name (first and last name, or the e-mail address if none), your role (freelancer or company) and the language of your e-mails. No password is stored on our side.
Freelancer profile
Headline, summary, city, work mode, daily rate, availability and the date it was last confirmed, skills, languages, experience, education, certifications, photo, portfolio, CV, the web addresses you declare and those you prove you own, missions confirmed by your clients. The profile stays private until you publish it. A web address is checked only by visiting your own site; LinkedIn and Malt are never fetched automatically.
To invoice and reassure your clients: billing identity (company name, SIRET, VAT number, address) and URSSAF compliance certificate. The SIRET is checked against the French government's public Recherche d'entreprises API; it is never published.
Companies
Company name and page, members and their role, published missions, freelancer pools, lists, saved searches, API keys created by the company.
Missions and applications
Mission listing, application, answers to the company's questions, attached CV, application status.
Messages and attachments
Messages exchanged, conversation state (pending, accepted, declined), attachments (JPEG, PNG, WebP or PDF, 5 MB at most each, 3 per message). Images are re-encoded to strip their metadata (including GPS position); a PDF with active content is refused. A filter spots contact details (e-mail, phone, link, messaging handle): it blocks the message, or flags it when a payment is under way between the two parties; we keep only a flag, never the extracted detail. A recent first contact may be reviewed by an operator.
Community
Posts, comments, reactions and shares, under a published profile or a company; a profile published under a reference never shows the account name. A post is public or limited to signed-in members, as you choose.
Invitations
When you invite someone, we keep the invited address, your personal note (run through the contact-details filter) and the state of the invitation. The link is kept only as a fingerprint. To accept, the person must be signed in with a verified address that is the invited address.
Mission confirmation by a client
For a past mission to show as confirmed, you give us your client's e-mail address; we write to them once, and they confirm or not.
Audience, without tracking
To tell you how often your profile was viewed or appeared in a search, we count visits without cookies. The IP address and browser are used to compute a daily fingerprint (HMAC with a key that changes every day); neither the IP address nor the browser is recorded, and the fingerprint is erased at the end of the day. Robots, prefetches and your own visits are not counted. Only daily totals remain; only you see those of your profile, and a company sees only the total number of searches by its team.
Notifications, e-mails and push notifications
E-mails are sent through Resend; the daily digest is optional and never contains the text of a message. If you turn on push notifications, we keep your device's subscription address and a short label such as "Chrome · Android" (never your full browser string). A notification contains only a sentence and a link.
AI visibility measurement
If you ask for one, we put recruiter questions to AI engines (OpenAI, Anthropic, Perplexity), built from your headline, skills, city and work mode. Your name, web addresses and e-mail are never in them: a check removes anything that would identify you, and the measurement is refused if nothing is left. Answers are analysed in memory; only the results (are you cited, where) are recorded. See also people cited by AI.
CV import and plain-language search
If you import a PDF CV to prefill your profile, its text (24,000 characters at most, contact details included) is sent to Anthropic to draw up a draft; you accept each item one by one and nothing is published automatically. If a company describes its search in a sentence, only that sentence is sent to Anthropic to suggest filters, which the company can edit; the model sees no profile.
Moderation and security
Operator decisions (hiding a profile or a post, suspending an account) with their reason, appeals, beta feedback, rate limiting by a fingerprint of the IP address or account. Server logs record an event and its date, never the text of a message or an e-mail address.
Payments
Payment on the platform is not open yet. When it opens, it will go through Stripe, which will receive the data needed for payment and payout; this policy will be updated first.
Legal bases and retention periods
The periods below are applied automatically by the application, which purges expired data several times an hour.
| Data | Legal basis | Duration |
|---|---|---|
| Account, profile, skills, experience, photos, portfolio, CVs | Contract | Until the account is erased. A new CV replaces the older ones, except those attached to an application that was not withdrawn. |
| Billing identity, SIRET, URSSAF compliance certificate | Legal obligation; legitimate interest (fraud prevention) | With the profile; the SIRET is re-checked every 30 days and never published. |
| Missions, applications, mission alerts | Contract; consent for alerts | Until they or the account are deleted. |
| Messages and attachments | Contract | Contact request left unanswered: deleted 1 year after the last message. Declined contact: messages deleted 1 year after the refusal, the refusal itself kept to prevent a new contact. Attachment never sent: 24 hours. Otherwise, until the account is erased. |
| Community posts and comments | Contract | Deleted post: emptied at once, erased 30 days later with its comments and reactions. Deleted comment: text erased at once. |
| Invitations (invited address, personal note) | Legitimate interest of the person inviting | Valid 14 days; an invitation never accepted is deleted 30 days after it expires. |
| Mission confirmation requests (client's address) | Legitimate interest (verifying a fact) | Valid 30 days; deleted 90 days after the answer or expiry. |
| Audience (a visitor's daily fingerprint) | Legitimate interest (statistics without tracking) | Fingerprint erased at the end of the day; counters kept 13 months. |
| Notification e-mails | Contract | 90 days after creation once sent; 1 year at most otherwise. |
| In-app notifications | Contract | Read: 90 days after reading. Unread: 1 year. |
| Push notification subscriptions | Consent | Until you unsubscribe, or 90 days without a delivered notification; sending queue: 24 hours. |
| AI visibility measurements | Contract | Results kept with the profile; finished measurement request: 1 year; raw engine answers: never recorded. |
| Beta feedback and appeals against a suspension | Legitimate interest | 1 year. |
| Log of moderation decisions | Legitimate interest (security, evidence) | 5 years, cannot be altered. |
| Trace of a suspended account later erased (fingerprint of the e-mail, reason, date) | Legitimate interest (preventing evasion) | 3 years. |
| Rate limiting (fingerprint of the IP address or account, never the address) | Legitimate interest (security) | 1 day. |
| Audit requests without an account | Consent | 3 years after the request. |
| Quotes, contracts and invoices | Contract; legal obligation (accounting) | Kept, and detached from the account when it is erased. |
| Database backups | Legitimate interest (incident recovery) | One copy a night, on the IONOS hosting server, readable only by the server administrator, deleted after 14 days. |
The database is backed up every night on the IONOS hosting server and the copies are deleted after 14 days. After an account is erased, its data may therefore remain in these copies for at most 14 days; they are never restored except to recover from an incident.
Who receives your data
Your data is accessible to our team as far as needed, and to the providers below, each for its role. What you publish is visible to everyone; your billing identity is shown to a company only when a contract with it is signed.
| Provider | Role | Data | Where |
|---|---|---|---|
| IONOS | Application server, uploaded files, database backups | All data processed by the application; files (photos, CVs, attachments); nightly database copies | IONOS hosting server |
| Railway | Database | Accounts, profiles, missions, messages, contracts, notifications and other application data (not file contents) | Railway Corporation, a company based in the United States |
| Clerk | Sign-in and sessions | E-mail address, first and last name if given, sessions; sending of sign-in codes | United States |
| Resend | E-mail delivery | Recipient address, subject and content of the e-mail (never the text of a chat message) | Company based in the United States; sending domain set up in the Ireland region |
| Anthropic | AI model: visibility measurement, spotting names in answers, reading an imported CV, turning a search sentence into filters | Measurement question without your name; engine answers; text of the CV you import; search sentence you type | United States |
| OpenAI | AI engine queried for the visibility measurement | Measurement question built without your name, address or e-mail | United States |
| Perplexity | AI engine queried for the visibility measurement | Measurement question built without your name, address or e-mail | United States |
| Web Push (Google, Mozilla, Apple, Microsoft) | Delivering notifications to your device, if you turn them on | Device subscription address and an encrypted notification (a sentence and a link, never the text of a message) | Depends on your browser's maker |
| API Recherche d'entreprises | Checking a SIRET number against the official French business register | The SIRET number only | French government public service (recherche-entreprises.api.gouv.fr) |
| IndexNow | Notifying search engines of new or changed public pages | Addresses of public pages (missions, profiles published under their reference), never a name or an e-mail | Participating search engines (including Bing) |
Hosts: IONOS SARL and Railway Corporation (see the legal notice).
Several of these providers are based in the United States. These transfers rely on the safeguards set out in their data processing agreements (European Commission standard contractual clauses or the EU–US Data Privacy Framework, depending on the provider). You can ask for details at data@spar-x.fr.
People cited by AI
The answers of AI engines queried for a measurement may cite other professionals. If that is your case, here is what we do with your name.
- We never search for your name and build no profile about you.
- To spot who is cited, the answer is sent to Anthropic, then analysed in memory. In the application, answers are never recorded: only results without names come out.
- For measurements our team runs with its internal tool, names are replaced by tokens before anything is written, the answer is encrypted, it carries a 72-hour expiry, and the tool deletes it as soon as it is run again after that expiry.
- We never show our users who appears in their place, and we do not reuse what AI says about you.
Legal basis: our legitimate interest in measuring, for a user, whether they are cited. As we do not know your contact details, we inform you through this page rather than individually (Article 14(5) GDPR). You can object, or ask for access or erasure, at data@spar-x.fr; beyond the analysis we generally hold nothing that could identify you, and we will tell you so.
No rating of people
Proofseen computes, stores and displays no score, rank or overall rating of a person, and reviews are not averaged. Search filters on facts (skills, city, work mode, availability, rate) and sorts by a criterion you choose.
Suggestions between missions and profiles compare facts one by one (shared skills, city, work mode, rate, availability, languages, proven address, confirmed missions, company active in the register, valid URSSAF certificate). They are ordered by the number of criteria met among those you count, then by shared skills and by date; each suggestion shows what matches and what is missing. No AI takes part in this matching, and no decision is made in your place.
Your rights and how to exercise them
You can access your data, have it corrected or erased, ask for restriction or portability, object to processing based on our legitimate interest, and withdraw your consent where it is the basis.
- Download your data: in the application, Settings, "Export my data" gives you a JSON file of everything the database holds about you (file contents are not included, only their description), with the list of what would remain after erasure.
- Erase your account: in Settings, "Delete my account", with a confirmation. Erasure deletes your Clerk account and your data on our side. It is refused while a contract is in progress or a payment is under way. What remains, detached from you: quotes, contracts and invoices (accounting duty), messages written on behalf of a company, comments emptied and shown as "Deleted account", the moderation log (5 years) and, for a suspended account, a 3-year trace. Backups delete themselves after 14 days.
- Correct: most information can be edited from your profile or settings. For the rest, or if your account is suspended, write to data@spar-x.fr.
We may ask you to prove your identity if we have reasonable doubt. We answer within one month.
Security
Encrypted connections, files stored on the server under a random name and served according to each person's rights (an attachment, to the parties of the conversation only), fingerprints instead of invitation links and IP addresses, rate limiting, a moderation log that can be neither altered nor deleted before 5 years, and no data used by us to train an AI model.
Complaints
If you believe your rights are not respected, write to us first at data@spar-x.fr. You can also contact the French data protection authority (CNIL): www.cnil.fr.
Changes
This policy follows the software: when a feature changes, it changes. The version date is at the top of the page; an important change is announced in the application or by e-mail.