The key points
Here is what matters most. The details follow in the sections below.
- Your CV undergoes automated analysis to fill in your profile; you see the result live and can correct anything.
- Your match score for a job is calculated by fixed, transparent rules, not by a language model.
- A human recruiter always makes the decision: nothing is decided automatically on your behalf.
- Employers see your profile without your contact details until they unlock them, and every unlock is logged.
- You can hide your profile, export your data or delete everything, instantly, from your "My profile" area.
- You can make your profile invisible to specific companies, starting with your current employer, which is hidden by default.
- We do not sell your data, and we use no targeted advertising or analytics tools.
- LinkedIn is optional: your profile PDF, your data archive or sign-in. We only receive what you choose to send, and the archive is not kept.
Data controller
The data controller is Vision Business Consulting SARL, publisher of Maroc Emploi IT, a company incorporated under Moroccan law with its registered office at 105 boulevard Abdelmoumen, 20250 Casablanca, Morocco (RC No. 411997, Casablanca Commercial Court).
As it is established in Morocco, it is subject to Law No. 09-08 on the protection of individuals with regard to the processing of personal data. Where the GDPR applies, in particular for users located in the European Union, we also comply with its requirements.
For any question about your data, email contact@marocemploiit.com or contact@vision-business-consulting.com.
The data we process
We only collect what is needed for recruitment and for the service to run properly. For candidates, this includes:
- your CV file (PDF, Word or image);
- the profile extracted from it: first and last name, email, phone number, city, LinkedIn, GitHub or personal website links, headline, summary, work experience, education, certifications, languages and skills, together with the exact sentences from your CV that support them;
- what our code calculates from your CV: lengths of experience, seniority, depth and recency of each skill, evidence level ("proven" or "declared") and an estimate of your legal notice period;
- your answers on the screens that follow the upload: target city, work mode (onsite, hybrid, remote) and mobility; status (employed or available), remaining notice period, whether it is negotiable, and where your search stands (active, open, advanced process elsewhere);
- your contract preference (permanent, freelance or both), your expected pay as a net monthly salary (MAD) and/or a day rate (MAD or EUR), your freelance status (self-employed, company, umbrella company), your spoken French and English level, your openness to French companies and, where relevant, your EU work authorisation;
- your email if it is missing from your CV, and the list of companies you want to stay invisible to;
- your availability confirmations, proof of your consent (date, version of the text you accepted, IP address) and technical data (IP address at login, browser type for each session, security logs);
- messages that employers send you, and their pipeline stages, notes, feedback and decisions about you in their recruitment.
If you use LinkedIn
LinkedIn is an optional source of data, which you can use in three ways, always on your own initiative. We do not access any other data of your LinkedIn account.
- Your profile PDF (“Save to PDF”): it is processed exactly like an uploaded CV (same automated analysis, same recipients, same retention).
- Your data archive (.zip file): we only read the files of your profile, positions, education, certifications, languages, skills, projects, e-mail address and phone. The other files (messages, connections, invitations, posts…) are not opened. The profile is built by our code, without a language model, and the archive is not kept: we keep the resulting profile and a PDF CV laid out from that data, available to employers like an uploaded CV, after unlocking.
- Sign in with LinkedIn, when offered: LinkedIn sends us an identifier specific to our service, your first name, last name and e-mail address with the indication that it is verified. We receive neither your career history, nor your connections, nor your posts, and we never post on your behalf.
- We keep this identifier and the e-mail address received, attached to your candidate account, for as long as the account exists; they are deleted with it. The access token issued by LinkedIn is never stored: it is used once, at sign-in.
- Sign in with LinkedIn is for candidates only; recruiter accounts sign in with e-mail and password.
Employer and visitor data
For employer accounts, we process: name, job title, work email and phone number, password (stored only in irreversibly hashed form), company details and logo, job offers and hiring criteria, internal notes, feedback on suggested profiles (thumbs up or down, with a reason), messages sent, plus logs of logins, unlocks and generated documents.
When a recruiter shares a shortlist with a manager, we record the name the manager enters, their decisions (approve, pass, reject) and their notes.
If you use the contact form, we process your name, email and message for as long as it takes to reply.
If you ask to receive the CV upload link by e-mail (“CV not on this phone?”), we use your address only to send it to you: no account is created, and the e-mail is erased from our sending history within 48 hours.
Why we process it, and on what legal basis
Each processing activity relies on a specific legal basis:
- Reading your CV, building your profile and showing it to approved employers: your consent, given when you upload your CV. You can withdraw it at any time by hiding or deleting your profile.
- Managing employer accounts, analysing their job offers and giving them access to profiles: performance of the terms of use and of pre-contractual steps requested by the employer.
- Securing the service, preventing fraud and abuse, rate limiting and keeping an audit log: our legitimate interest in protecting the platform and its users.
- Responding to requests from authorities and keeping certain data when the law requires it: our legal obligations, where applicable.
- Sending service emails (login link, welcome, a single reminder if your profile is unfinished, an availability check every 30 days, expiry notice, messages from employers): running the service you asked for. We never send marketing emails.
How the automated analysis works
When you upload your CV, its content is sent to a language model (Claude, provided by Anthropic) so that a structured profile can be extracted from it automatically: experience, skills, education, languages and contact details.
Every extracted skill and job entry must come with the exact sentence from your CV. Our code checks that the quote really appears in the text: a skill without a verified quote is shown as "declared", never as "proven". The reliability of the results is never self-assessed by the automated processing.
Calculations are done by our code, not by the language model: lengths of experience, seniority, skill depth and recency, and an estimate of your legal notice period under Moroccan Decree No. 2-04-469, used only to pre-fill the notice question.
The profile appears in front of you while it is being built. You check it, fix anything that is wrong, and nothing is shown to employers before you confirm it.
When you are among the top 20 results for a job, a two-sentence summary is generated automatically from the score breakdown and verified quotes, without any identity data. Employers' job offers are analysed the same way as CVs.
What we never collect
The automated processing is configured not to extract this information, even if it appears on your CV, and our forms never ask for it:
- age and date of birth;
- sex or gender;
- nationality;
- family situation;
- photo;
- religion;
- health;
- national ID card or passport numbers;
- current salary.
The match score and human decision
The score comparing your profile with a job is calculated by rules written in our code, the same for everyone. With the default weighting: skills (35%), role (15%), experience (20%), pay (12%), location (10%) and availability (8%), adjusted for the languages the job requires and how recently your profile was confirmed. This score is not calculated by the language model.
Your name, photo, age and gender never count towards it. Your school is shown to employers, but it is never scored.
Employers can set a few deal-breaker criteria (contract type, language, city, etc.). They see how many profiles were set aside this way and can still view them. We never calculate any "departure risk" score.
This ranking is a form of profiling, but it does not produce any automated decision: a human recruiter chooses whether or not to contact you. You can object to it by hiding your profile.
Confirming you are still available
Every 30 days, we send you a "Still available?" email: one click is enough to answer yes, not anymore, or update your profile. Employers can see how long ago your profile was confirmed.
If you have not confirmed for 90 days, your profile is ranked slightly lower (factor 0.95), and employers are shown this. If you answer "not anymore", your profile is paused and no longer suggested.
Who can see your data
Your data is never sold. Only the following can access it, and only what is relevant to them:
- employers approved by our team: they see your profile without contact details, and only see your contact details and CV after an unlock, which is recorded in a log;
- managers to whom a recruiter sends a shortlist link: they see your anonymised profile, with no name or contact details;
- our internal team, for moderation and support;
- our technical subprocessors, listed below, who act only on our instructions.
Staying invisible to specific companies
At the end of the sign-up flow, we offer to make you invisible to your current employer, as read on your CV: this option is on by default. You can add other companies at any time.
A hidden company never sees you anywhere: not in its rankings, not in the profile search, not in shared links. Matching is based on the company's normalised name and its website domain.
When an employer contacts you
Once an employer unlocks your contact details or writes to you, it becomes responsible, on its side, for how it uses your data for its recruitment. It must then comply with Law No. 09-08 and, where applicable, the GDPR.
Messages from employers reach you by email; if you reply, your answer goes directly to the employer's address.
Our subprocessors
We work with a small number of providers, bound by contract and by confidentiality:
- Scaleway (France): hosting of the website, database and files;
- Anthropic PBC (United States): automated analysis of CV and job offer content (language model), and generation of summaries;
- our transactional email provider: delivery of service emails;
- Cloudflare, if enabled: anti-bot protection (Turnstile) on CV upload and sign-up.
Transfers of data outside Morocco
As the data controller is established in Morocco, using the service involves transfers of data outside Morocco: to France, where Scaleway hosts the website, the database and the files, and to the United States, where Anthropic analyses the content of CVs and job offers.
The transfer to Anthropic is governed by the standard contractual clauses adopted by the European Commission. The same applies to Cloudflare when anti-bot protection is enabled.
According to Anthropic's commercial terms for its API, content sent to it is not used to train its models.
Apart from these operations, data (hosting, database, files) remains stored in France.
How long we keep it
We do not keep your data longer than necessary:
- Candidate profile and CV: 24 months after your last activity, then full deletion (files, profile versions, match results, related decisions and notes, account). We email you 30 days beforehand; simply log in again to extend.
- Deletion at your request: immediate and real, files included.
- Shortlist links shared with a manager: 14 days by default, after which they stop working.
- Employer accounts: for as long as the account exists, then deleted.
- Security and audit logs: 12 months.
- Data received from LinkedIn: the .zip archive is never kept; the LinkedIn identifier and the e-mail address received at sign-in are deleted with your account.
- E-mail containing the CV upload link, requested without an account: 48 hours at most.
- Technical backups: automatically erased after 14 days, so deleted data may remain there for that period at most, without being used.
Security
We protect your data with appropriate technical and organisational measures:
- encryption of all communications (HTTPS);
- files are never public: a CV is only delivered after access rights are checked;
- access control on every feature, with separate roles (candidate, employer, administrator);
- passwords and login tokens stored only in hashed form;
- audit log of logins, contact unlocks, CV downloads and deletions;
- rate limiting and, where enabled, antivirus scanning of uploaded files on our own servers.
- shortlist links protected by a secret token stored in hashed form, time-limited and revocable.
Your rights and how to use them
You have the right to access, rectify, erase, restrict and port your data, the right to object, and the right to withdraw your consent at any time. Under French law, you can also give instructions on what happens to your data after your death.
The easiest way: from your "My profile" area you can edit your profile, replace your CV, hide it, export your data (JSON file) or delete everything, without having to ask us.
You can also email contact@marocemploiit.com or contact@vision-business-consulting.com. We reply within one month.
Complaints to a supervisory authority
If you believe your rights are not being respected, you can lodge a complaint with the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel), Morocco's competent authority: www.cndp.ma.
If you live in the European Union, you can also contact the data protection authority of your country (in France, the CNIL).
Feel free to contact us first: we will do our best to resolve the matter quickly.
Minimum age
Maroc Emploi IT is intended for adults or people of legal working age in the country where they are looking for a job.
If you are a minor, only use the service with the consent of your parent or legal guardian. If we learn that a profile was submitted in breach of this rule, we delete it.
Changes to this policy
We may update this policy, especially if the service changes. The date of the latest update is shown at the top of the page.
If there is a significant change, we will let you know by email or on the website, and ask for your consent again where required.
Contact
For any question about your data: contact@marocemploiit.com, +212 666-397722, Casa Nearshore, Casablanca.
You can also write to the publisher: Vision Business Consulting SARL, 105 boulevard Abdelmoumen, 20250 Casablanca, Morocco — contact@vision-business-consulting.com.