Last updated: 02/11/2026
Draft text to be legally reviewed before public launch. In case of discrepancy, the French version prevails.
Global Digital Agency (GDA), publisher of MakeYouFirst.
Identity and contact details, professional profile (experience, education, skills), search criteria, imported offers, applications, files (CV templates, generated documents, copies of sent emails), settings (SMTP / IMAP app passwords are encrypted), technical logs and AI usage logs.
Your data is never sold or used for advertising.
Some processors may handle data outside the European Union; such transfers are covered by appropriate safeguards (standard contractual clauses).
Only after you click to confirm (or through Autopilot if you switch it on), from your own mailbox or from GDA’s domain with your address as reply-to.
MakeYouFirst uses cookies needed for the service to work: session, form security and your chosen language. Your browser may locally remember that you closed an information banner.
Ad measurement (Meta Pixel): only if you click “Accept” in the cookie banner, MakeYouFirst loads the Pixel of Meta Platforms Ireland to measure the effectiveness of its Facebook and Instagram ads (page view, sign-up, checkout start, Pro Pass purchase). Meta then sets its own cookies and receives technical data (IP address, browser, pages visited); no data from your CV or your applications is sent to it. Without your consent, nothing is loaded. Your choice is kept for 13 months in an “mf_consent” cookie; you can change it at any time with the “Cookies” link at the bottom of the page. Legal basis: your consent. Meta may transfer this data outside the European Union under its own safeguards.
Referrals: if you follow a user’s invitation link, a cookie keeps their code for 30 days so that your sign-up is credited to them. To prevent self-referrals, MakeYouFirst also keeps, for signed-in accounts, a random browser identifier and a one-way encrypted fingerprint of the IP address, for at most 90 days (legitimate interest: abuse prevention). This data is included in your account export.
For each payment, to prove your request for immediate access and your waiver of the right of withdrawal, MakeYouFirst keeps the date, the product, the version of the terms of use accepted, the text of the box you ticked and an encrypted (non-reversible) fingerprint of your IP address (legal obligation to confirm the contract and legitimate interest: proof of your consent). These data are kept with your account and included in its export.
For recruiters, MakeYouFirst processes account and company data (name, business contact details, SIREN/SIRET, logo, ads, view statistics) to provide the service (performance of the contract). The SIREN number is checked against the public company directory; directors’ data is never read. A candidate’s data (identity, contact details, CV, cover letter, message) is passed to a recruiter only when that candidate applies to the recruiter’s ad themselves; the recruiter then becomes responsible for it for that recruitment and deletes it when no longer needed. If the candidate deletes their account, the application is removed from the recruiter space. AI (Regulation (EU) 2024/1689, “AI Act”): AI (Anthropic) is only used to pre-fill an ad from the recruiter’s text; it does not sort, score or select any candidate, and no automated decision is made.
Messages: content, attachments, reactions and read receipts are kept with the participants’ accounts (performance of the contract) and included in the export; a deleted message is no longer displayed. Interviews: proposed time slots, the chosen slot, the meeting (date, participants) and a private note from the recruiter, visible to their team only. MYF Visio: image and sound travel from browser to browser (WebRTC) without passing through our servers and are not recorded; only connection data (participants, times) is kept, for 24 hours at most for technical connections. Matches: your visibility to recruiters is based on your consent (date and version kept, withdrawal at any time); the relevance score is calculated by rules and produces no automated decision; your decisions and matches are logged (traceability) and included in the export. Acceptance of the terms of use: the accepted version, the date and an encrypted (non-reversible) fingerprint of the IP address are kept to prove your agreement.
Enterprise Mode: members and roles, invitations, channel messages, project boards, shared files and new-hire onboarding paths are kept as long as the company’s workspace exists (performance of the contract); the company is responsible for them with regard to its staff. Projects & leads: imported calls for tenders, proposals, provider profile and portfolio are kept with your account and included in its export.
Freelancer showcase (published only if you decide so, without email, phone, address or full surname), missions, proposals, orders, deliverables, messages, reviews and payments (performance of the contract). “DAC7” legal obligation (Directive (EU) 2021/514): the freelancer’s legal identity (name, date of birth, address, tax number, VAT, SIRET) and income earned, reported each year to the tax authorities. Receipts, invoices, statements and DAC7 data are kept for 10 years (accounting and tax obligations), including after the account is deleted.
Until your account is deleted; technical logs are kept for a limited time.
Exceptions: accounting records (receipts, invoices, statements) and marketplace “DAC7” data are kept for 10 years; proof of consent (terms of use, waiver of the right of withdrawal) is kept for as long as needed to defend our rights.
Access, rectification, export (My account → Export my data), erasure (My account → Delete), objection and restriction. You can lodge a complaint with the French data protection authority (CNIL) or your local authority.