Privacy Policy

Data controller

The data controller is DAVAI, a French SASU registered with the Paris Trade and Companies Register under number 928 433 929, with registered office at 29 rue Tronchet, 75008 Paris, France. You can contact us at contact@davai.co.

Scope

This policy explains how Davai processes personal data when you visit davai.co, contact us through the website, apply for a role, or otherwise exchange with us in relation to our services.

Data we collect

When you use the contact form, we collect your name, email address, message, and the technical information required to deliver the message.

When you apply for a role, we collect your name, email address, role applied for, LinkedIn profile if provided, motivation text, and any related application information you choose to send.

When you browse the website, our hosting and security providers may process technical data such as IP address, user agent, requested URL, date and time of access, referrer, and security event data. The website also sends a visit notification containing the page path, referrer, IP address, browser name and version, approximate location derived from hosting metadata, and an automated assessment of whether the visit appears to come from a bot. We use this information to understand basic audience activity and prevent abuse.

Purposes and legal bases

We process contact messages to answer enquiries and manage commercial discussions. The legal basis is our legitimate interest in responding to people who contact us and, where discussions concern a potential contract, pre-contractual steps.

We process job applications to review profiles, communicate with candidates, and manage recruitment. The legal basis is pre-contractual steps at the candidate's request and our legitimate interest in recruiting.

We process technical, hosting, security, and visit data to operate the website, secure it, prevent abuse, measure basic audience activity, and improve the website. The legal basis is our legitimate interest in providing a reliable and secure website.

We may process limited records to comply with legal, accounting, tax, regulatory, or litigation obligations. The legal basis is compliance with legal obligations or our legitimate interest in establishing, exercising, or defending legal claims.

Recipients and processors

Personal data is accessed only by Davai team members who need it for the purposes described in this policy.

Contact submissions, job applications, and visit notifications are delivered to Davai through Discord, which we use as an internal notification service.

We may share data with technical service providers that help us host the website, secure traffic, receive form submissions, send notifications, manage email, and operate our business tools. These providers act under their own terms or under data processing commitments where applicable.

We do not sell personal data.

Retention periods

Contact and commercial enquiry data is kept for up to three years after the last meaningful interaction, unless a longer period is required for legal claims or legal obligations.

Recruitment data is kept for the duration of the recruitment process and, if the application is not successful, for up to two years after the last contact unless you ask us to delete it earlier or agree to a longer retention period.

Technical, hosting, security, and visit data is kept only for the period needed for security, troubleshooting, audience measurement, and operational purposes, subject to the retention periods applied by our providers.

Records needed for accounting, tax, legal, or litigation purposes may be archived for the period required by applicable law.

International transfers

Some providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as European Commission standard contractual clauses, adequacy decisions, or equivalent contractual and technical protections.

Your rights

Subject to the conditions set by applicable law, you can request access to your personal data, rectification, deletion, restriction of processing, portability, or object to processing based on legitimate interest.

You can exercise your rights by contacting contact@davai.co. We may ask for information needed to confirm your identity and process your request.

You also have the right to lodge a complaint with the CNIL, the French data protection authority, at cnil.fr.

Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No online service can be guaranteed to be completely secure.

Cookies and trackers

Information about cookies and similar technologies is available in our Cookie Policy. The website does not intentionally set advertising cookies or sell tracking data.

Updates

We may update this policy to reflect changes to the website, our services, our providers, or legal requirements. The date at the top of the page shows when it was last updated.

Language

This English version is provided for convenience. If interpretation is needed for obligations governed by French law, the French version should be used as the reference.