

Privacy Policy
Last updated: February 27, 2026
At BLIFY, respecting your privacy and protecting your personal data is our priority.
This privacy policy (the "Privacy Policy") aims to inform you about how your personal data is processed when you use the website https://www.blify.co/ (the "Site"), in compliance with Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "GDPR"), and the French Data Protection Act No. 78-17 of January 6, 1978, in its latest current version (collectively the "Applicable Regulations").
This Privacy Policy does not describe how your data is collected and processed via cookies and other trackers ("Cookies") on the Site. For more information, please consult our Cookie Policy.
Capitalized terms have the same meaning as defined in our General Terms and Conditions.
Who is the Data Controller?
BLIFY’s legal classification varies depending on the nature of the processing:
When browsing our Site or, more generally, in the context of managing our contractual relationship with you, the Data Controller is BLIFY, a simplified joint-stock company (SAS), registered with the Nanterre Trade and Companies Register under no. 941 613 739, with its registered office located at 32 Rue de Paris, 92100 Boulogne-Billancourt, France ("We", "Us", "Our").
Regarding all User data processed for the provision of our Services (including sending quizzes, collecting responses, etc.), We collect and process users' personal data on behalf of our clients (the employers who subscribe to our Services). Therefore, our clients are the Data Controllers, and We act as a Data Processor. Consequently, this specific processing falls outside the scope of this Privacy Policy. The processing we carry out as a data processor is governed by the personal data clause in our General Terms of Use.
What data do we collect?
Personal data is any information that allows an individual to be identified directly or by cross-referencing with other data. We collect personal data falling into the following categories:
In the Context of Our Commercial Relationship:
Identification data (last name, first name, email and postal address, phone number);
Browsing data (IP address, pages viewed, date and time of connection, browser used, operating system, user ID, MAID);
Data from recorded phone calls between you and our customer service (call content, dates);
Any information you choose to provide when submitting a contact request.
In the Context of Our Recruitment Processes:
Professional life data (company name, resume/CV, position/title, LinkedIn URL if provided).
Mandatory data is indicated when you provide your information and will be clearly marked by any appropriate means.
Details on the processing of your personal data
Purposes | Legal Basis | Retention Periods |
Building a prospect database | Our legitimate interest in developing and promoting our business. | Your data is kept for 3 years from your last contact with us. |
Managing prospects and clients (quotes, monitoring the contractual relationship) | Performance of the contract you or your company has entered into with Us. | Personal data is kept for the duration of the contractual relationship. Additionally, data is archived for evidentiary purposes for 5 years. |
Analyzing Site usage, understanding expectations, and improving features (analyzing interactions, compiling browsing/audience statistics) | Our legitimate interest in improving our services. | Phone recordings with customer service: up to 6 months. Analysis documents: up to 1 year. Cookie data used to improve user experience: 90 days. Once anonymized, data is no longer considered personal as re-identification is impossible, and is kept as long as necessary. |
Sending newsletters, solicitations, and promotional emails | Our legitimate interest in retaining clients and informing them/prospects of our latest news. | Data is kept for 3 years from your last contact with Us. |
Responding to information, contact, and/or demo requests | Execution of pre-contractual measures taken at your request. | Data is kept for 3 years from your last contact. |
Retaining administrative information and documents | Compliance with our legal and regulatory obligations. | Invoices: 10 years. Transaction data (excluding bank details): 5 years. Contract data and signature elements: 5 years. |
Processing job applications and managing recruitment (screening, contacting candidates, interviews, finalizing recruitment) | Execution of pre-contractual measures taken at your request. | Active database: duration of the recruitment process until a hiring decision is made. If rejected: 3 months post-recruitment to provide explanations for the rejection. Intermediate archiving for evidentiary purposes: 5 years from the hiring decision date. |
Building a resume database | Your consent. | Data is kept for 2 years from the last contact with the data subject. |
Responding to data subject rights requests | Compliance with our legal and regulatory obligations. | Proof of identity (if requested): kept only for the time necessary to verify identity, then deleted. Opt-out requests for marketing: kept for 3 years. |
Who are the recipients of your data?
The following parties will have access to your personal data:
Our company’s staff;
Our subcontractors and service providers (hosting provider, newsletter distribution, audience measurement and analytics, email provider, secure payment provider, billing tool, cookie management tool, CRM, CMS, automation tools, video conferencing tool, online ad networks, telephony tools, corporate ERP);
Any legally authorized authority, in particular judicial, police, or administrative authorities, upon request.
Are your data likely to be transferred outside the European Union?
Throughout the processing period, your data is kept and stored on Heroku (Amazon Web Services) servers located within the European Union.
Through the tools we use (see the "Recipients" section regarding our subcontractors), your data may be transferred outside the European Union. Transfers in this context are secured using the following mechanisms:
The data is transferred to a country subject to an adequacy decision by the European Commission, per Article 45 of the GDPR (the country ensures a level of protection deemed sufficient and adequate to the GDPR); or
The data is transferred to a country whose data protection level has not been recognized as adequate: in this case, transfers are based on appropriate safeguards per Article 46 of the GDPR, tailored to each provider. These include, but are not limited to, Standard Contractual Clauses (SCCs) approved by the European Commission, Binding Corporate Rules (BCRs), or an approved certification mechanism; or
The data is transferred based on one of the appropriate safeguards described in Chapter V of the GDPR.
You can obtain a copy of the safeguards used to transfer your data outside the European Union by contacting us at the details provided in the "What Are Your Rights Regarding Your Data?" section below.
What are your rights regarding your data?
You have the following rights concerning your personal data:
Right to Information: This is exactly why we drafted this Privacy Policy, as required by Articles 13 and 14 of the GDPR.
Right of Access: You have the right to access all your personal data at any time, under Article 15 of the GDPR.
Right to Rectification: You can request the correction of inaccurate, incomplete, or outdated personal data at any time, per Article 16 of the GDPR.
Right to Restriction of Processing: You may request that we limit the processing of your data in specific cases outlined in Article 18 of the GDPR.
Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data and prohibit future collection for reasons stated in Article 17 of the GDPR.
Right to Digital Legacy: You can define directives regarding the retention, deletion, and communication of your personal data after your death.
Right to Withdraw Consent: For purposes based on consent, Article 7 of the GDPR allows you to withdraw your consent at any time. This withdrawal will not affect the lawfulness of processing carried out before the withdrawal.
Right to Data Portability: Under certain conditions specified in Article 20 of the GDPR, you can receive the personal data you provided to us in a standard, machine-readable format and require its transfer to a recipient of your choice.
Right to Object: Under Article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note, however, that we may continue processing despite this objection for legitimate grounds or the defense of legal claims.
You can exercise these rights by writing to us at the following address: privacy@blify.co
In cases of reasonable doubt, we may ask you to provide additional information, including documents to verify your identity.
If you have any questions or requests that remain unresolved, you have the right to lodge a complaint with the competent supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL), located at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.
Amendments
We may modify this Privacy Policy at any time, particularly to comply with any regulatory, jurisprudential, editorial, or technical developments. These changes will apply as of the effective date of the modified version. We invite you to regularly review the latest version of this policy. However, we will notify you of any significant changes to this Privacy Policy.
Effective Date: February 27, 2026


