Last updated: 28 August 2026
Privacy Policy
Who we are
FindYourGalley is operated by Kryajet SAS, a French company registered under SIREN 995180866, with its registered office at 16 Rue Vernier, 06000 Nice, France. VAT number FR77995180866.
Kryajet SAS is the data controller for the personal data described in this policy.
For any question about your data, contact us at max@kryajet.com.
What we collect
Account data. Your email address and an encrypted password. We never store your password in readable form.
Your resume. The PDF file you upload, and the information we extract from it: your professional history, employers, aircraft types, licences, languages, training and current base.
Profile answers. The information you give us during sign-up: which passports you hold, which visas you hold, relocation preferences, employment types you accept, current employment situation and availability.
We ask which passports you hold — not for the documents themselves. We never ask for, receive or store passport numbers, passport scans, identity documents or any other official document. You type a country name, nothing more.
Usage data. Basic technical information generated when you use the service: IP address, browser type, pages visited and timestamps. We use this to keep the service running and secure.
We do not collect your age, date of birth, gender, physical characteristics or criminal record. Some employers publish requirements on these points; we display those requirements as information and leave the decision to you.
Sensitive information
The passports and visas you declare indicate your nationality. Under the GDPR this is closely connected to your origin, and we treat it with particular care.
This is a declaration you type, nothing more. We hold no document, no number and no scan. We never verify it, and we never ask you to prove it.
We collect it for one reason: the right to work in a given country is the single most decisive criterion in aviation recruitment. Without it, we cannot tell you which roles you are eligible for.
This information is used only to compute your matches. It is never shared with employers, never used for advertising, and never disclosed to third parties.
Why we process your data, and on what basis
| What | Why | Legal basis |
|---|---|---|
| Email and password | Create and secure your account | Performance of a contract |
| Resume and extracted data | Compute your matches and generate resume feedback | Performance of a contract |
| Profile answers | Refine your matches | Performance of a contract |
| Passports, visas, nationality | Determine which roles you are legally eligible for | Explicit consent, given when you complete your profile |
| Usage data | Keep the service running, secure and improve it | Legitimate interest |
You may withdraw your consent for the processing of nationality data at any time by deleting your account or by removing that information from your profile. Doing so will reduce the accuracy of your matches.
Automated processing
Your resume is read by an automated system. We send the text of your PDF to a large language model provider to extract structured information. That extraction is then used to compute your matches.
This is automated decision-making in the sense of Article 22 of the GDPR, but it produces no legal or similarly significant effect: it ranks information for you, it does not decide anything about you. No employer sees your profile through us, and no application is made on your behalf.
You can review and correct every extracted value in your profile settings at any time. If we got something wrong, you can override it.
Who we share your data with
We do not sell your data. We do not share it with employers or recruiters.
We use the following processors, who act only on our instructions:
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | European Union |
| Anthropic | Resume text extraction | United States |
| Lovable | Application hosting | European Union |
Transfers to processors outside the European Economic Area are covered by the European Commission's Standard Contractual Clauses.
We may disclose your data if required by law, or to establish, exercise or defend legal claims.
How long we keep it
Your account and its data are kept for as long as your account is active.
After 24 months of inactivity, we email you. If you do not log in within 30 days of that email, your account and all associated data are deleted.
When you delete your account, everything is removed within 30 days: your account, your resume file, your extracted profile and every match we computed. Deletion is permanent and cannot be undone.
Backups are retained for a further 30 days, after which they are overwritten.
Usage logs are kept for 12 months.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify anything inaccurate — most of it directly in your profile settings
- Erase your data, using the delete account function or by writing to us
- Restrict or object to processing based on legitimate interest
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time, without affecting processing carried out before withdrawal
To exercise any of these rights, write to max@kryajet.com. We will respond within one month.
If you believe we have mishandled your data, you may lodge a complaint with the CNIL, the French data protection authority, at cnil.fr.
Security
Your resume is stored in a private bucket, accessible only by your account. Database access is restricted per user through row-level security. All traffic is encrypted in transit.
No system is perfectly secure. If a breach affects your data and presents a risk to your rights, we will notify you and the CNIL as required by law.
Cookies
We use only the cookies strictly necessary to keep you logged in and to keep the service secure. We do not use advertising cookies, and we do not track you across other websites.
Changes to this policy
If we change this policy in a way that materially affects your rights, we will email you before the change takes effect.