Privacy & Commercial Counsel

Founded in 2019 and part of Y Combinator's 2020 cohort, Photoroom is the leading visual solution for e-commerce.
We've raised Series B funding and reached 300+ million users worldwide, processing over 5 billion images annually and serving both small businesses and major enterprises like Amazon, DoorDash, and Decathlon through our mobile app, web platform, and API.
We're a remote-friendly team of 100+ passionate builders giving e-commerce businesses superpowers to create visuals that help them grow, making the hardest parts of selling online disappear. We focus on craft, innovation, and collaboration, creating exceptional impact for e-commerce businesses worldwide.

We're looking for a Privacy and Commercial Counsel to join us as the second person in Photoroom's legal team. Working closely with our Head of Legal, you'll take full ownership of being a key partner to the sales, growth, tech, and people teams to help them navigate the many laws and regulations impacting their work.

Location: Paris-based, 3 days/week in the office. We offer relocation within Europe.

Privacy and Data Protection: Take our privacy compliance to the next level.

• Run our GDPR compliance operations. Own data subject requests end-to-end. Keep our core documentation accurate and current — the registry of processing activities, DPAs, and privacy policy — and produce new compliance artifacts as the business requires them, including DPIAs and LIAs.

• Embed privacy and security compliance in the product. Stay close to product developments so feature teams understand the legal implications of what they're building, and work directly with the ML and tech teams to ensure our data processing and server-side practices are compliant by design.

• Stay ahead of privacy regulation and keep teams informed. Monitor developments under the GDPR and across the patchwork of foreign privacy laws that are relevant to our business, assess how they affect our work, and proactively brief the teams that need to act on them.

• Grow into the DPO role. As the privacy program matures and you deepen your ownership of it, there's the opportunity to step into our Data Protection Officer role.

Commercial:

• Own commercial contracting day-to-day. Be the first port of call for the sales team's contract needs — reviewing, drafting, and negotiating sales agreements, and handling the steady daily flow of requests from business teams.

• Support the Head of Legal on whatever the business needs - Managing trademark registrations, corporate, labour, public affairs and beyond - you’ll expand your skillset and knowledge as the business keeps expanding.

• You bring solid legal experience in data protection/privacy. You have 3 to 5 years under your belt (internships not included), either at a top-tier or tech-focused law firm, as an in-house counsel at a tech company (ideally a SaaS start-up or scale-up), or both. You have experience drafting compliance documentation (DPAs, DPIAs, LIAs…)

• You are comfortable owning a steady volume of commercial and sales contracts, and confident reviewing, drafting, and negotiating independently.

• You hold a Master's degree in law. Bar admission is a plus but not required.

• You're fluent in French and English. You can draft, negotiate, and hold your own in both languages, written and spoken.

• You think like a business partner. You read legal questions in their commercial context, propose workable options rather than theoretical ones, and know when good and clear beats perfect and late. You have the ability to work credibly with technical teams (ML, infrastructure, front-end/back-end).

• You're comfortable with how we work. We're async, remote-friendly, and fast-moving. You manage multiple workstreams independently and keep stakeholders informed without being chased.

• Ideally, you’re familiar with AI technologies and their legal implications, including the EU AI Act. We care more about your ability to learn fast than what you already know.If you think you have what it takes but don't meet every single point above, please still apply. We'd love to chat and see if you could be a great fit.

• Regular team gatherings, including yearly company offsite and team retreat and social events like winter party and hackathons.

• 25 days annual leave + RTT, and local public holidays

• Competitive equity package with stock options/BSPCE, giving you ownership in our growing company

• €1,000 annual learning and development budget for training, courses, books, and skill development

• Private health insurance

• Access to personalised mental health support, including 1:1 sessions with therapists or coaches, self-care tools, and well-being resources via MokaCare

• Sports and cultural activities reimbursement

Note: Visa sponsorship and relocation support are only available for positions based in France. We cannot sponsor visas for remote positions outside of France.

1. Screening call with Talent Manager (30min)

2. Technical interview with Hiring Manager (45min)

3. Take-home assignment (duration varies by role) and live review with the team (45min)

4. Culture fit interviews and meet the team (~3h in total)

5. Reference check and offer

Support: We value diversity and aim to create an inclusive experience for all applicants. Please let us know if there’s anything we can do to make the process more accessible for you.

We're committed to enabling everyone to feel included and valued at work. We believe our company and culture are strongest when composed of diverse experiences and backgrounds.

That's also why we have flexible working hours, trust people to work remotely, and extended parental leave.

All qualified applicants receive consideration for employment without regard to age, color, family, gender identity, marital status, national origin, physical or mental disability, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws.