Privacy Policy

1. Introduction

Kynto SAS ("Kynto", "we", "our") is committed to protecting the privacy and personal data of its users. This Privacy Policy explains how we collect, use, store, and protect personal data when you use the Kynto website and platform, in compliance with the General Data Protection Regulation (GDPR) and the Google API Services User Data Policy, including the Limited Use requirements.

2. Who We Are

3. Our Role Under GDPR

Under the GDPR:

• • Kynto acts as a data processor.
• • Our customers (companies) act as data controllers, particularly with respect to candidate and recruitment-related personal data processed through the platform.

4. Personal Data We Process

4.1 User (Client) Data

We may process the following data relating to business users:

• • First and last name
• • Professional email address
• • Company name and role
• • Authentication and account-related data
• • Connection data (IP address, logs, device information)
• • Billing and payment data (processed via Stripe)

4.2 Candidate Data (processed on behalf of customers)

• • CVs and application documents
• • Professional background, experience, and skills
• • Contact details
• • Evaluation notes and recruitment feedback
• • AI-generated scores and summaries
• • Interview transcriptions and recordings

Kynto does not intentionally collect sensitive data. If such data is included in candidate documents, it is processed solely under the responsibility of the data controller.

5. Use of Artificial Intelligence

Kynto uses artificial intelligence technologies to support recruitment processes, including CV analysis, scoring, recommendations, and interview assistance.

• • AI features are provided exclusively as decision-support tools.
• • All outputs must be reviewed and validated by human users.
• • Kynto does not perform automated decision-making within the meaning of Article 22 of the GDPR.

For the avoidance of doubt:

• • Artificial intelligence features operate exclusively on data explicitly provided by customers through the Kynto platform.
• • No data obtained via Google APIs (including Google Calendar or other Google user data) is ever transmitted to, processed by, or used within any artificial intelligence system or third-party AI service.
• • Google user data is never used to train, fine-tune, analyze, or improve AI or machine learning models.

6. Cookies

Kynto uses cookies and similar technologies to ensure the proper functioning, security, and performance of its website and platform.

Cookies are used to support essential features such as authentication, session management, security protection, and user preference management. Where required by law, additional cookies may be used only with your prior consent.

6.1 What are cookies?

Cookies are small text files stored on your device (computer, tablet, or mobile phone) when you visit a website. They allow a website to recognize your device and store certain information related to your visit or preferences.

Cookies may be set either by Kynto ("first-party cookies") or by trusted third-party service providers ("third-party cookies") acting on our behalf.

6.2 Types of cookies used

Kynto uses the following categories of cookies:

Strictly necessary cookies

These cookies are essential for the operation of the platform and cannot be disabled. They enable core functionalities, including:

• • secure user authentication and login sessions
• • access to restricted and secure areas
• • fraud prevention and security monitoring
• • load balancing and infrastructure stability

Without these cookies, the platform cannot function properly.

Optional cookies

Depending on your preferences, Kynto may also use optional cookies to support additional features, such as:

• • platform performance and reliability monitoring
• • aggregated usage statistics
• • service improvement and troubleshooting

Optional cookies are never placed on your device without your explicit consent.

6.3 Cookies we do not use

Kynto does not use:

• • advertising cookies
• • marketing or retargeting cookies
• • third-party ad networks
• • cross-site tracking technologies
• • data brokerage or profiling cookies

We do not sell, rent, or share cookie data for advertising purposes.

6.4 Cookie consent and management

When you first visit the Kynto website or platform, a cookie banner is displayed to inform you about our use of cookies and allow you to manage your preferences.

Through this banner, you may:

• • accept all cookies,
• • refuse non-essential cookies, or
• • customize your cookie preferences by category.

Strictly necessary cookies are always enabled, as they are required for the secure delivery of our services.

Your cookie preferences are stored and may be modified at any time through the cookie management settings accessible from the platform interface.

No optional cookies are placed on your device unless and until you have provided your consent, in accordance with the General Data Protection Regulation (GDPR) and applicable ePrivacy laws.

6.5 Cookie retention

Cookies may be either:

• • session cookies, which are automatically deleted when you close your browser; or
• • persistent cookies, which remain stored for a limited period or until deleted manually.

Cookies are retained only for the duration strictly necessary to achieve their intended purpose.

6.6 Managing cookies via your browser

You may configure your browser settings to block or delete cookies at any time.

Please note that disabling strictly necessary cookies may prevent certain parts of the platform from functioning correctly, including secure login and access to protected features.

6.7 Updates to this Cookies section

We may update this Cookies section periodically to reflect changes in legal requirements, technology, or our services.

Any updates will be published on this page with a revised "Last updated" date.

7. Use of Google User Data

Kynto's use of Google user data strictly complies with the Google API Services User Data Policy, including the Limited Use requirements.

7.1 Google Data Access

When a user connects their Google account, Kynto may access:

• • Basic Google account information (email address and public profile information)
• • Google Calendar data (read, create, update, and delete events)
• • Google Meet links (for meeting creation)

Kynto does not access Gmail or Google Drive data.

7.2 Purpose of Use

Google user data is accessed only to provide user-requested features, including:

• • calendar synchronization,
• • interview scheduling,
• • meeting creation.

Google user data is never used for:

• • advertising,
• • marketing,
• • analytics,
• • profiling,
• • artificial intelligence processing.

Google user data is strictly excluded from all artificial intelligence features of the platform.

7.3 Data Storage

• • Google Calendar data is accessed in real time and is not persistently stored by Kynto.
• • Any technical processing occurs temporarily in memory and only for the duration necessary to provide the requested functionality.
• • All infrastructure is hosted exclusively within the European Union.

7.4 Data Sharing

Google user data:

• • is never sold,
• • is never shared for advertising purposes,
• • is never transmitted to or processed by any artificial intelligence service or third-party AI provider.

Such data is processed solely within Kynto's secure infrastructure and by GDPR-compliant technical subprocessors that do not provide AI model training or inference services.

7.5 Data Retention and Deletion

When a user:

• • disconnects their Google account, or
• • deletes their Kynto account,

any associated Google user data is automatically deleted.

Users may also request deletion at any time by contacting privacy@kyntoai.com.

8. Data Security

Kynto implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.

Access to Google user data is strictly limited to authorized systems and is never accessed manually without necessity.

9. Data Subject Rights

In accordance with the GDPR, users have the right to:

• • access their data,
• • request rectification,
• • request deletion,
• • object to processing,
• • request data portability,
• • request restriction of processing.

Requests may be submitted to privacy@kyntoai.com.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version will always be available on the Kynto website.

11. Contact

For any questions regarding this Privacy Policy or the processing of personal data, contact:

privacy@kyntoai.com