Privacy

Two roles, and the difference matters

BerryMap wears two hats depending on the data. For your account — your address, your password, the language you chose — we decide, so we are the controller under Law 25.

For everything a business collects about its candidates — an application, a resume, interview notes — the business decides and we carry it out. We are its processor, we act on its instructions, and we use none of it for anything else. The privacy page of every career site already says so to candidates, and names us.

What we collect

• Your account: email address, name, language, password (never in clear text), and open sessions with their last activity.
• Your job-seeker profile, if you have one: what you write in it, the documents you upload, and whatever reading your resume produces.
• Your applications and what follows: the stage you are at, messages exchanged, interviews proposed, offers received.
• For a client business: what its team writes in the product, and a register of the actions that bind it.

Nothing is bought or gathered elsewhere. We build no profile from outside sources.

Where it is kept

In the United States, in the Ohio region: the database at Neon and the servers at Render are hosted there. Documents and backups are at Cloudflare R2.

We write it down because it is a question a Quebec employer has to ask: sending personal information outside Quebec requires a privacy impact assessment, and you cannot make one without knowing where it goes.

Before opening, we assessed this transfer outside Quebec, as the law requires (assessment dated [to fill: date of the signed assessment]). We looked at how sensitive the information is (a resume says a lot), what it is used for (hiring, nothing else), the protections that follow it and the laws of the United States. Our conclusion: it stays adequately protected there, because every provider is bound by a contract that forbids it from using the information for itself, everything is encrypted in transit, backups are encrypted before they leave our servers, and the database itself keeps one business from reading another's data.

Our main providers offer no Canadian hosting today. We will say so here the day that changes. A client business that has to make its own assessment can ask us for a summary of ours: write to soutien@berrymap.app.

Who else touches it

These providers receive something because the product does not work without them. None uses it on their own account.

• Render (United States, Ohio) — running the product.
• Neon (United States, Ohio) — the database.
• Cloudflare (global network) — domain names and certificates; with R2, resumes, letters, images and encrypted backups.
• Resend (United States) — sending and receiving email.
• Stripe — business payments. We never see a card number.
• Google (Gemini, United States) — resume reading and the BerryMatch score, only for a person with a confirmed BerryMap account, unless the business turned them off; resume reading also stops if the person declined it, the score continues; both stop if they turned off their BerryMatch score; assisted writing, only with the business's own AI key.
• Mapbox (United States) — maps, distances and travel times. Usually only a candidate's city, province and country are sent. If you choose a precise address as the starting point for your trips, that address is sent to place it on the map.
• Sentry (United States) — error reports. No request content, cookies or headers are attached.

For how long

A business sets its own duration for its candidates. By default: twenty-four months after an application closes, twelve months for a talent pool. A nightly task deletes or anonymises at the deadline, according to what the business chose.

Your account stays as long as you keep it. You can have it erased, and the erasure runs after seven days — the delay that leaves room to take back something done in anger or by mistake.

We back the database up every night. These backups, encrypted, are kept 30 days, then erased the following night. Erased information can therefore remain in them for 31 days at most.

An erasure removes everything from the database. A copy may still exist in our encrypted backups for 31 days at most, and in the database history, at Neon, for 7 days: it then disappears on its own, and we never restore it to look at it.

What you can demand

See what is held about you, get it in a file, have it corrected, have it erased. The legal deadline is thirty days, and the product carries these requests out itself rather than putting them in a queue somebody forgets.

If you have an account, these are in your settings. Otherwise, write to the business you applied to: that information is theirs, and we cannot decide in their place.

For a question, a request or a complaint about your personal information, write to the person responsible, named in “Contact us”, below. We answer in writing within 30 days. If you are not satisfied with the answer, you can turn to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

If you applied to a business that uses BerryMap, that business decides about your information: write first to its responsible person, named on the Privacy page of its career site. We help it answer you.

AI and your BerryMatch score

Without a confirmed BerryMap account, no AI reads your application: neither your resume nor your profile. Your file waits, with no score.

Once your email is confirmed, an AI (Google Gemini, United States) may read your resume to fill in your profile, then your skills to calculate your BerryMatch score. This score compares your profile with the open jobs of the employers you apply to. The AI uses BerryMap's Google account, or the employer's if they use their own.

Your resume is only read to fill in your profile or the application form. For the score, only the list of your skills goes to Google; the score itself is calculated on our side. Before any reading, we remove your social insurance number, date of birth, email, phone and address from the text, when we can recognise them.

The score sorts applications. It never hides or removes any, even those the AI rates lower: a person always decides.

In “Your profile”, under “AI tools”, you can turn off resume reading: your score then only uses what you write. You can also turn off your BerryMatch score: then no AI reads your resume or skills. To stop everything, delete your account.

Ranking, and who decides

BerryMap compares what a candidate declared with a job's requirements and produces a score. That score sorts a pile; it rejects nobody. A person always decides, that setting is locked and cannot be changed. You can give your observations and ask for a person to review your file: from your account if you have one, otherwise by writing to the business.

When AI is used (to read a resume or compare skills), it suggests and decides nothing. The text is sent to Google (Gemini, United States) to be read.

What the comparison looks at and what it ignores is written out in full, on the employer's side as on the candidate's.

Cookies

BerryMap sets only necessary cookies: the one that keeps you signed in and, if your account signed in on another device, the one that tells you so. Nothing measures your visit. On our clients' career sites, a banner asks for your choice before any audience measurement or interactive map; your choice is kept six months, and the “Cookie preferences” link at the foot of every page lets you change your mind. A business may measure its traffic there with Google Analytics, only if you accept it.

Contact us

[to fill: the legal name, the address, and the person responsible for personal information protection with their contact details (Law 25, section 3.1), in the console, “Site vitrine” screen]