BAPTOU

Privacy policy

Last updated: 6 October 2026

This policy explains what data BAPTOU collects, why, where it is stored and what rights you have. BAPTOU is operated by Baptiste Petit, who is the data controller. Contact: baptouai@gmail.com.

Data we collect

• Google account basics: your name and email address, used to sign you in and to email you about new offers (you can turn these emails off in your Profile).
• Documents you upload: CVs, transcripts, diplomas and past motivation letters, and the profile BAPTOU builds from them.
• What you create in the app: searches (internships, jobs, alternances, master's programmes), suggested offers, letters, application answers, email drafts and your questions to BAPTOU.
• Your nationalities, if you enter them, to answer work permit and visa questions and estimate tuition fees.
• Subscription data: your plan, its status and renewal date. Payments are handled by Stripe: BAPTOU never sees or stores your card number.
• Gmail data, only if you connect Gmail (see below).
• Usage counters: how much AI processing your account uses, to enforce monthly limits.

Gmail data

If you choose to connect Gmail, BAPTOU asks Google for two permissions:

• Read your email (gmail.readonly): when you ask BAPTOU to find people to contact, it searches your mailbox and reads the matching conversations, to suggest contacts and write emails that follow on from past exchanges. Every morning it also looks at the emails you received since its last check for replies to your applications (see below).
• Send email on your behalf (gmail.send): used only to send an email you approved by clicking “Approve & send” in the app. BAPTOU never sends anything on its own.

BAPTOU does not store the content of your emails. To recognise people you know at the organizations you apply to, it keeps an index of your correspondents, built from email headers only: their name and email address, how many emails you exchanged, the date and subject of your last exchange. Newsletters and automated senders are left out. It also stores what it produces for you: the contacts you ask it to write to (with a short summary of your past exchanges) and the email drafts. To write a draft, it reads your last conversation with that person at that moment, without storing it. The access token Google gives BAPTOU is stored encrypted.

Replies to your applications. Every morning, BAPTOU looks at the senders and subjects of the emails you received since its last check, and keeps those that come from an organization you applied to or contacted (or from its recruitment platform). Only those emails are read and analysed by Claude, to tell you what they say and what to do next. BAPTOU stores that summary with the sender, subject and date, not the email itself.

When you disconnect Gmail, you choose whether to keep the index (so offers still show people you know) or delete it. You can disconnect Gmail at any time in the app, which revokes BAPTOU's access immediately; you can also revoke it from your Google account settings.

BAPTOU's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Gmail data is used only to provide the features you request in BAPTOU; it is never sold, never used for advertising, and never used to train AI models. No person reads your Gmail data, except with your explicit consent for support, when required for security, or to comply with the law.

How your data is processed

• Google Firebase / Google Cloud (hosting, database, file storage), in the European Union (Belgium and the EU multi-region).
• Anthropic (Claude AI): to read your documents, research organizations, write letters and emails, and analyse the email excerpts relevant to a request. Anthropic processes this data to return results to BAPTOU and does not use it to train its models.
• Stripe (payments): your email address, payment details and billing history, if you subscribe. Stripe processes your payment details under its own privacy policy.
• Gmail: BAPTOU's own emails to you (new offers, invitations) are sent through Google's email service.

Your data is not sold or shared with anyone else.

Legal basis and retention

Your data is processed to provide the service you signed up for (performance of a contract) and, for Gmail, on the basis of your consent, which you can withdraw at any time by disconnecting Gmail. Your data is kept while your account exists. When you delete your account, it is deleted straight away, including your uploaded files. Billing records (invoices and payments) are kept for 10 years, as French accounting law requires.

Your rights

Under the GDPR you can access, correct, export or delete your data, object to or restrict its processing, and withdraw your consent. In the app, your Profile page has Export my data (a file with everything BAPTOU stores about you) and Delete my account. For anything else, email baptouai@gmail.com. You can also lodge a complaint with your data protection authority (in France, the CNIL).

Changes

If this policy changes, the date above is updated and significant changes are announced in the app.