Privacy policy.
This translation is provided for information only. The French version is the only legally binding version. Read the French version (in French).
Last updated: March 10, 2026
The company 2 MIN MAX, a simplified joint-stock company (société par actions simplifiée) with share capital of €60,000, registered with the Lyon Trade and Companies Register (RCS) under no. 987 618 659, whose registered office is at 11 rue du 8 Mai, 69110 Sainte-Foy-lès-Lyon (France), is the controller of the personal data collected through its website www.2minutesmax.com and its application app.2minmax.com.
1. What data is collected?
We only collect the data strictly necessary for the service to work:
For candidates
- Last name, first name, email address, goal (internship, salaried job, competition, admission…)
- Introduction video, profile title, viewing key, generated PDF, QR code
- History of profile creation, sharing, deactivation or deletion
- A thumbnail is automatically generated from the video as a preview of the profile (which the user can change)
- and, where applicable, the phone number (optional), used only if a technical need arises.
For professionals
- Last name, first name, company, email, phone
- Billing details (via Stripe)
- History of profile views
For profile visitors
- Professional email address entered to access a video profile
- Only the domain name is used for statistical purposes (e.g. @company.com)
- The domain name extracted in this way may be visible:
- to the candidate concerned, in the viewing statistics of their profile;
- and, where applicable, to an organization with access to the candidate’s profile and statistics (for example their educational institution or employment support organization).
The full email address is never disclosed to these organizations or to other users. See also the handling of your email address (page available in French only).
2. Why is this data processed?
- Purpose
- Legal basis
- Account creation and user management
- Performance of the contract
- Hosting and securing videos
- Legitimate interest
- Secure access via URL + key or professional account
- Legitimate interest
- Statistics and reports for Premium candidates
- Legitimate interest
- Sending support or reminder emails
- Legitimate interest / consent
- Payment and billing via Stripe
- Performance of the contract / legal obligation
3. Who has access to your data?
- The internal 2 MIN MAX team
- Our technical service providers:
- Hosting: OVH (France)
- Emailing: Brevo (EU)
- Payment: Stripe (outside the EU, covered by standard contractual clauses)
- Website audience measurement, only if you accept it: Google Analytics (Google Ireland Limited, see section 7)
Data is never sold, transferred or disclosed to unauthorized third parties.
4. How long is your data kept?
- Account data: 2 years after your last activity
- Profile videos: deleted after 12 months without any action on your part (login, edit or share)
- Visitors’ emails: 3 months maximum
- Visitors’ domain: 6 months maximum
- Billing data: 10 years (accounting obligation)
5. What are your rights?
You have the following rights at any time:
- Right of access to your data,
- Right to rectification or erasure,
- Right to data portability,
- Right to object or to restrict processing,
- Right to withdraw your consent (if applicable).
To exercise your rights, write to hello@2minutesmax.com. You can also lodge a complaint with the CNIL (the French data protection authority) (www.cnil.fr).
6. Data security
- Your videos are encrypted in storage
- Your passwords are stored securely (hashed)
- Only authorized people have access to the data
- Access to videos is protected by a viewing key or a validated professional account
- The candidate can select a thumbnail taken from their video, which will serve as the preview for their profile. This image remains strictly tied to the video itself and is not a personal photo.
7. Cookies and audience measurement
Our site uses cookies that are strictly necessary for it to work and, only if you accept them, Google Analytics audience measurement cookies. They tell us, statistically, which pages are visited and how the site is found. They are not used for advertising or to identify you.
- Purpose: website traffic statistics.
- Legal basis: your consent, requested on your first visit. Until you accept, nothing is sent to Google.
- Withdrawal: at any time, via the “Manage cookies” link at the bottom of every page. Your choice is kept for 6 months.
- Duration: 13 months at most for cookies, 14 months for statistics.
- Transfer: Google may process this data in the United States, under the EU–US Data Privacy Framework.
No advertising cookies are used. Videos embedded in the site only load when you click on them.

