Privacy
Version of November 2, 2026.
The principle
Your documents are used to prepare your applications. They are never sold and never used to train any artificial intelligence model. They are only passed on to a company through the introductions described below, which you can switch off at any time.
Prizm is for people aged 15 and over.
Who is responsible for your data
Heyprizm Ltd, which publishes Prizm and is described in the legal notice, decides how your data is used and is accountable for it. For any question or request, write to contact@heyprizm.com.
What Prizm keeps, why, and for how long
Email address, password or Google sign-in
- Why:
- Create your account and protect it
- Legal basis:
- The service you asked for
- How long:
- Until your account is deleted
CV, cover letter, additional information, attachment, and what Prizm takes from them
- Why:
- Analyze your applications and prepare your documents
- Legal basis:
- The service you asked for
- How long:
- Until you replace them, or until your account is deleted
Job offers submitted, verdicts, adapted texts, files produced, tracking of your applications
- Why:
- Give you back your work and keep track of it
- Legal basis:
- The service you asked for
- How long:
- Until your account is deleted. An application removed from your list is kept until then
Your profile, while you are visible to recruiters
- Why:
- Introduce you to partner companies
- Legal basis:
- A legitimate interest
- How long:
- Until you switch your visibility off
Language, layout and section preferences, rating given to Prizm
- Why:
- Respect your choices
- Legal basis:
- The service you asked for
- How long:
- Until your account is deleted
Sex, inferred from how your CV refers to you, editable in your settings
- Why:
- Use feminine or masculine wording in the texts Prizm writes for you
- Legal basis:
- The service you asked for
- How long:
- Until your account is deleted
Referrals: your code, who invited you, dates of sign-up and first CV
- Why:
- Credit the applications promised and pay partner creators
- Legal basis:
- The service you asked for
- How long:
- These dates are kept after your account is deleted, with no link to you
Messages written to the team and attached screenshots
- Why:
- Reply to you
- Legal basis:
- The service you asked for
- How long:
- Until your account is deleted
Emails to help you, tell you what's new or ask for your feedback, and your replies
- Why:
- Improve Prizm
- Legal basis:
- A legitimate interest
- How long:
- Until your account is deleted. Each email lets you stop them
Pack purchases: order, amount, date, version of the terms accepted, confirmation email
- Why:
- Keep the accounts
- Legal basis:
- A legal obligation
- How long:
- 6 years. Prizm never sees your bank card. The payment provider also asks for your postal address, to calculate VAT; it keeps it itself, Prizm neither reads nor keeps it
Fingerprint of your network address
- Why:
- Curb abuse, such as mass sign-ups
- Legal basis:
- Security of the service, a legitimate interest
- How long:
- 3 days at most
Duration and cost of each call to artificial intelligence, without its content
- Why:
- Keep costs under control
- Legal basis:
- A legitimate interest
- How long:
- Kept with no link to you after your account is deleted
Anonymous usage measurement in your browser: pages visited, steps taken
- Why:
- See where the journey gets stuck and improve it
- Legal basis:
- A legitimate interest
- How long:
- 25 months at most
Key steps of your account: creation, referral
- Why:
- Measure what works and grow Prizm
- Legal basis:
- A legitimate interest
- How long:
- 25 months at most
Before you create your account, the CV and job offer dropped on the home page stay in your browser and go nowhere. After one hour they can no longer be used, and they are erased on your next visit.
You can delete your account from your profile. Deletion takes effect 30 days later, a period during which one click is enough to cancel it. It erases your account, your documents, your applications, your files and your messages. An account with no sign-in for 5 years is deleted, after a warning email.
The artificial intelligence that reads and writes
Prizm entrusts the reading of your documents and the writing to an artificial intelligence provider, through its business offer. This provider does not train its models on this data and keeps it for 30 days at most to detect abuse.
The verdict is an opinion on your application, meant for you. Nothing is decided for you: you choose whether to apply, you review and correct your documents, and you send them yourself.
Introductions to companies
Prizm can introduce you to the partner companies that entrust it with job offers. This is on by default, and you can switch it off at any time in your settings.
While it is on, Prizm can search your profile for its partners' job offers, in every country. It first presents a summary without your name or contact details: title, skills, experience, country and city, languages. If the company wants to go further, it sends them your CV adapted to their offer, without your name or contact details. The compatibility verdict is never passed on. You get a notification each time it's sent, with the company's name and the role.
The company that receives your profile becomes responsible for it. It commits by contract to use it only for that offer, not to copy it elsewhere or resell it, and to erase it if it doesn't select you.
You can switch your visibility off at any time by unticking "Visible to recruiters" in your profile, under Settings: Prizm immediately stops presenting you. With no sign-in for 24 months, your visibility switches itself off, after a reminder. This service is free for you, and buying a pack gives no priority in it.
The organization space
When a company uses Prizm to prepare its consultants' skills files, the company decides about their data. Prizm processes it on the company's behalf, following its instructions and a data processing agreement. A consultant exercises their rights with that company, which Prizm helps to respond. No consultant data goes into usage measurement.
Prizm's service providers
Prizm entrusts some tasks to service providers, who receive only what they need and commit by contract to protect this data: hosting of your data and usage measurement, in the European Union; hosting of the website, by an American company on servers in Ireland; reading and writing by artificial intelligence, as well as sign-in with Google if you choose it, in the United States; PDF generation, in the European Union; sending emails and payment for packs, in the United States.
Outside the European Union
Heyprizm Ltd is established in the United Kingdom, which the European Union recognizes as offering protection equivalent to its own until 2031. For American providers, the transfer relies on the EU-US Data Privacy Framework and its UK extension for those certified under it; for the others, including the artificial intelligence provider, on the European Commission's standard contractual clauses, supplemented by the UK addendum. For a partner company outside the European Union, sending your profile relies on these same clauses, signed with it, except in a country the European Union recognizes as equivalent.
Your rights
You can ask to access your data, correct it, erase it, restrict its use, object to it, get it back in a readable format, and withdraw at any time an agreement you have given. In France, you can also say what happens to your data after your death. Write to contact@heyprizm.com: you'll get an answer within a month.
Complaints
If the answer doesn't satisfy you, you can contact the data protection authority of your country, the CNIL in France, or the ICO in the United Kingdom.
Changes
This page may change. Each version is dated and archived.
Usage measurement
Anonymous visit statistics, to improve Prizm.