Terms of use

In force as of 21 October 2026

This is a translation of the Conditions générales d'utilisation, provided for convenience. If the two versions differ, the French version prevails.

1. Purpose

These terms govern the use of Postyli, available at postyli.com: browsing job offers, tailoring a CV to an offer, exporting it as PDF, sending applications from your own Gmail account and tracking when they are opened. Using Postyli, with or without an account, means accepting these terms.

2. Publisher and contact

Postyli is published by the Postyli team, who can be reached at support@postyli.com for any question, complaint, request about your data or report of a security flaw.

3. Account

• An account is optional for candidates; it is required to publish offers on behalf of a company.
• You undertake to give an accurate email address and to keep your password confidential. Any action taken from your account is deemed to be taken by you, unless you have told us of fraudulent access.
• A company guarantees that it is entitled to represent the company it declares and that its offers are real, up to date and lawful.
• You can delete your account at any time from My account: your account data is then erased.

4. Permitted use

You undertake to use Postyli fairly and lawfully. In particular, it is forbidden:

• to send unsolicited bulk messages (spam) or messages to people you are not entitled to contact;
• to publish or send false, misleading, defamatory, discriminatory or unlawful content, or a fictitious job offer;
• to impersonate a person or a company;
• to collect the offers or data of the service automatically (bots, scraping);
• to disrupt the service, overload its servers or introduce malicious code into it.

5. Circumventing the protections

Part of Postyli runs in your browser, which you can technically modify. This gives you no additional right: the limits and checks that matter are verified by our servers, and a local change does not lift them. Any circumvention, or attempted circumvention, of the service's protective measures is strictly forbidden, in particular:

• modifying, injecting or replaying requests, or altering the application's code, to exceed the sending limits, the code checks or an account's rights;
• multiplying accounts, IP addresses or devices to escape a limit or a suspension;
• accessing, or trying to access, another user's data or non-public parts of the service;
• looking for flaws without authorisation. If you find one, report it to support@postyli.com without exploiting or disclosing it: a good-faith report will not be pursued.

Any circumvention found leads to the immediate suspension or deletion of the account concerned and the blocking of the access used, without notice. Postyli reserves the right to claim compensation for the harm suffered and to refer the matter to the competent authorities. The technical logs needed as evidence may be kept for the duration of the proceedings.

6. Your applications

The emails leave from your Gmail account, with an app password that you provide and that is kept only in the open tab. You alone are responsible for the content of your messages, the choice of their recipients and compliance with Gmail's rules. For a bulk sending, you must have obtained the addresses lawfully. If you turn on open tracking, you are responsible for informing your recipients where the law that applies to them requires it.

7. Artificial intelligence

To tailor a CV, write a letter or translate an offer, the content needed is sent to the AI provider you choose, under its own terms. Text produced by the AI may contain errors: read it before sending anything, you remain responsible for it. Your AI key is only used for the duration of the request and is never kept by Postyli.

8. Job offers

Offers not marked “Verified company” come from third-party job sites, which remain their publishers; verified offers are published by the companies themselves. Postyli guarantees neither the accuracy nor the availability of an offer and takes no part in recruitment. You can report a suspicious offer from the application.

9. Personal data (GDPR)

Postyli applies the General Data Protection Regulation (GDPR) and collects the minimum: without an account, your profile, your letters and your settings stay in your browser and are not sent to us, except for the time of a processing (tailoring the CV, generating the PDF, sending).

What we keep, why and for how long

• Account (email, account type, hashed password): to provide the service you ask for (performance of the contract). Until the account is deleted; a sign-up never confirmed is erased after 7 days.
• Synchronised data (CV, saved offers, applications), only if you turn on On my account too: performance of the contract. Until you go back to Only in this browser or delete the account.
• Company (the company's details, verification, offers): performance of the contract. Until the account is deleted.
• Sending limits (scrambled IP address, never in clear, and the time of the email): security and abuse prevention (legitimate interest). 24 hours.
• Open tracking (dates and number of opens, with no recipient or subject): only if you turn it on. 90 days.
• Reports (offer and reason, without identifying the person reporting): until they are handled.
• Audience measurement: page views, country and device type counted globally, with no advertising cookie (legitimate interest).

Service providers. We neither sell nor rent your data. It is processed only by the providers the service needs: Vercel (hosting of the website and audience measurement), Contabo (hosting of the API and the database), Brevo (sending the verification codes by email) and, at your request, the AI provider of your choice. Where a provider processes data outside the European Union, the transfer is covered by the safeguards the GDPR provides (standard contractual clauses or an adequacy decision).

Local storage. Postyli saves your working data in your browser's storage, only to make the application work. No advertising cookie or third-party tracker is used.

Your rights. You have a right of access, rectification, erasure, restriction, objection and portability regarding your data. Most of them can be exercised directly in the application (edit, export a backup, delete the account); otherwise write to support@postyli.com, we answer within one month. You can also contact the data protection authority of your country, for example the CNIL in France or the INPDP in Tunisia.

10. Security and incident notification

Postyli protects your data with appropriate measures: encrypted connection (HTTPS), hashed passwords, time-limited verification codes, a capped number of attempts and sending limits checked by the server.

If a data breach or a circumvention of our protections affects your data, we undertake:

• to take, without delay, the measures needed to end it and limit its consequences;
• to notify the competent data protection authority within 72 hours of becoming aware of it, where the law requires it;
• to warn you by email and with a message in the application as soon as possible when the incident poses a risk to you, stating what happened, the data concerned, the measures taken and what we advise you to do (for example change your password).

11. Intellectual property

The Postyli name, its logo, its templates and its code belong to their authors. You keep all rights to your CV, your letters and your content; you only authorise us to process them to provide you with the service.

12. Availability and liability

Postyli is provided as is. We do our best to keep it available and reliable, without being able to guarantee that there will be no interruption or error. Postyli does not guarantee that you will get an interview or a job. We cannot be held liable for indirect damage, nor for damage resulting from a use contrary to these terms, within the limits permitted by law.

13. Suspension and termination

You can stop using Postyli and delete your account at any time. We may suspend or delete an account that does not comply with these terms, informing you except in case of serious abuse or circumvention (article 5).

14. Changes to the terms

These terms may change. In case of a significant change, account holders are notified by email or in the application before it comes into force. Continuing to use Postyli after that date means accepting the new terms.

15. Disputes

In case of disagreement, first contact support@postyli.com to look for an amicable solution. If you are a consumer, you keep the protection granted to you by the law of your country of residence.