Updated: 4 October 2026
Chris-Loïc, a sole trader operating under the trading name Kaya Studio, is responsible for the processing described here. Address: 1 square de la Brasserie, 91170 Viry-Châtillon, France. For questions or requests about your data: kayaxstudio@gmail.com.
We use information you provide and some technical data. Without required form fields, we cannot process the corresponding request. Optional choices, including newsletters and review publication, do not determine access to apps.
Name, email, optional company, project type and message. Required fields allow us to respond; company is optional.
Legal basis: Pre-contractual steps requested by you; legitimate interest for other enquiries.
Retention: While handling and following up on your request and any resulting relationship. Records needed for a legal obligation or dispute may be kept separately for the applicable period.
First name, email, hashed password, verification, declared referral source, newsletter preference and encrypted AI key. A key is required to reuse apps that request it.
Legal basis: Performance of the requested service; legitimate interest in understanding referral sources and improving the service.
Retention: For the lifetime of the account, until deletion is requested. The key can be removed in settings. Sessions and verification links expire according to their technical time limits.
Email, first name and subscription choice. Subscription is optional.
Legal basis: Consent, which can be withdrawn at any time without affecting earlier processing.
Retention: Until you unsubscribe through settings or by contacting us. Information needed to honour your objection may be kept solely for that purpose.
Liked project, account or browser identifier; review text and chosen display name. Private feedback is sent to our mailbox and published only with separate permission.
Legal basis: Requested service for likes and comments; consent for publishing a review.
Retention: Likes until removed; public reviews until removal is requested or publication ends. Account-linked reviews can be removed in settings. Private feedback is kept while handling and following up on it.
Trial identifier, counter, dates and technical outcomes. Account actions (sign-in, key setup, trials, likes, reviews, errors) remain separate from audience measurement.
Legal basis: Performance of the service; legitimate interest in preventing abuse and diagnosing errors.
Retention: 90 days for detailed new actions. Trial counters remain needed while the one-trial-without-key rule applies. App sessions expire according to their technical lifetime.
Separate browser identifier, day, path without query parameters, referring domain and device category. No link between this identifier and your account; no named page history.
Legal basis: Legitimate interest in measuring and improving this site alone.
Retention: 12-month cookie without automatic extension; statistics for 12 months. No cross-site matching or advertising use.
VibeTest sends Google Gemini information needed for your interview: role, job posting, optional résumé, voice and transcript for feedback. Kaya Studio does not record VibeTest audio or retain these contents after the session. GmailVibe accesses Gmail only after Google authorization; consulted messages and voice requests may be sent to Gemini to fulfil your request. Optional indexing and diagnostics limited to the pilot account have specific terms detailed below.
AI responses are suggestions, not recruitment decisions or automated decisions with legal effects. Using your own key does not prevent content transmission to Google. Avoid confidential information and unnecessary third-party data. Google's processing rules depend on service, region and project terms; in the EEA, its paid-service content processing terms also apply to unpaid quotas.
Technical cookies support sign-in, security, trials and likes. Browser storage also holds app state. You can clear it in browser settings, which may sign you out or remove current state. The kayax_audience cookie only estimates kayaXstudio traffic for twelve months without automatic extension or account matching. Do Not Track and Global Privacy Control disable this measurement. This system does not install advertising cookies.
Main technical cookie lifetimes: public account session, seven days with renewal during use; GmailVibe session, thirty days; vibetest_visitor trial identifier, twelve months. Temporary sign-in and security cookies expire according to the flow. Signing out removes the browser session; it does not automatically delete the account.
Authorized Kaya Studio operators access data needed for their tasks. Hostinger hosts the server; Brevo sends emails and manages subscriptions; Google provides Gemini, Gmail connection and the mailbox receiving your requests. Published reviews are public. External images may load from Unsplash, sending technical information including your IP address to that provider. Linked external sites have their own policies.
Some providers may process data outside the European Economic Area. Processing locations and safeguards (adequacy decisions, standard contractual clauses or safeguards in the applicable agreement) depend on the provider and service. Contact us at the address above for information and a copy of safeguards applicable to your processing.
Under the GDPR's applicable conditions, you may request access, correction, deletion, restriction, object to processing based on legitimate interest and request portability for data processed under contract or consent. You can withdraw consent to newsletters or review publication at any time. You may also provide instructions concerning your data after death.
Email kayaxstudio@gmail.com with your request and the relevant account email, without sending a password or AI key. We normally respond within one month; complex requests may require two additional months, and we will inform you. Proportionate identity verification may be needed. Some data may be retained when necessary for a legal obligation or legal claims.
You can lodge a complaint with the CNIL, the French data protection authority.