Privacy & Commercial Counsel

ABOUT US Founded in 2019 and part of Y Combinator's 2020 cohort, Photoroom https://www.photoroom.com is the leading visual solution for e-commerce. We've raised Series B funding and reached 300+ million users worldwide, processing over 5 billion images annually and serving both small businesses and major enterprises like Amazon, DoorDash, and Decathlon through our mobile app, web platform, and API. We're a remote-friendly team of 100+ passionate builders giving e-commerce businesses superpowers to create visuals that help them grow, making the hardest parts of selling online disappear. We focus on craft, innovation, and collaboration, creating exceptional impact for e-commerce businesses worldwide. ROLE SUMMARY We're looking for a Privacy and Commercial Counsel to join us as the second person in Photoroom's legal team. Working closely with our Head of Legal, you'll take full ownership of being a key partner to the sales, growth, tech, and people teams to help them navigate the many laws and regulations impacting their work. Location: Paris-based, 3 days/week in the office. We offer relocation within Europe. ABOUT THE ROLE Privacy and Data Protection: Take our privacy compliance to the next level. - Run our GDPR compliance operations. Own data subject requests end-to-end. Keep our core documentation accurate and current — the registry of processing activities, DPAs, and privacy policy — and produce new compliance artifacts as the business requires them, including DPIAs and LIAs. - Embed privacy and security compliance in the product. Stay close to product developments so feature teams understand the legal implications of what they're building, and work directly with the ML and tech teams to ensure our data processing and server-side practices are compliant by design. - Stay ahead of privacy regulation and keep teams informed. Monitor developments under the GDPR and across the patchwork of foreign privacy laws that are relevant to our business, assess how they affect our work, and proactively brief the teams that need to act on them. - Grow into the DPO role. As the privacy program matures and you deepen your ownership of it, there's the opportunity to step into our Data Protection Officer role. Commercial: - Own commercial contracting day-to-day. Be the first port of call for the sales team's contract needs — reviewing, drafting, and negotiating sales agreements, and handling the steady daily flow of requests from business teams. - Support the Head of Legal on whatever the business needs - Managing trademark registrations, corporate, labour, public affairs and beyond - you’ll expand your skillset and knowledge as the business keeps expanding. ABOUT YOU - You bring solid legal experience in data protection/privacy. You have 3 to 5 years under your belt (internships not included), either at a top-tier or tech-focused law firm, as an in-house counsel at a tech company (ideally a SaaS start-up or scale-up), or both. You have experience drafting compliance documentation (DPAs, DPIAs, LIAs…) - You are comfortable owning a steady volume of commercial and sales contracts, and confident reviewing, drafting, and negotiating independently. - You hold a Master's degree in law. Bar admission is a plus but not required. - You're fluent in French and English. You can draft, negotiate, and hold your own in both languages, written and spoken. - You think like a business partner. You read legal questions in their commercial context, propose workable options rather than theoretical ones, and know when good and clear beats perfect and late. You have the ability to work credibly with technical teams (ML, infrastructure, front-end/back-end). - You're comfortable with how we work. We're async, remote-friendly, and fast-moving. You manage multiple workstreams independently and keep stakeholders informed without being chased. - Ideally, you’re familiar with AI technologies and their legal implications, including the EU AI Act. We care more about your a