Privacy and cookies

Who handles your data?

Controller for account data and analytics: Adel Chetara, 35 allée de Bellevue, 94170 Le Perreux-sur-Marne, France. support@bidresolve.com.

For personal data in your quotes, you remain the controller or act for your own client. The publisher acts on your instructions under the data processing addendum.

Data used to provide the service

Email, account data and documents needed for your requests are processed to perform the pilot service. Security records and the register preventing repeated trials serve the legitimate interest of protecting the service. Optional analytics rely on your consent.

For documents, Adel Chetara acts as a processor on your instructions. Consultancies may upload their customers’ documents when authorized to appoint BidResolve as a subprocessor. Our addendum governs this processing and must be accepted before uploading. Sensitive data and information subject to secrecy obligations incompatible with the service remain excluded. Data Processing Addendum and security measures

Interpretation by OpenAI

Document text and, when necessary, images are sent to the OpenAI API. OpenAI does not use API data to train its models by default. Processing may take place outside the European Union.

Every request disables response storage with store=false. Documents are included inline in the request; BidResolve does not upload them to OpenAI Files. These settings do not remove abuse monitoring logs: OpenAI states retention of up to 30 days, subject to exceptions in its policies, including legal requirements.

Zero Data Retention and regional processing in Europe require prior OpenAI approval. They are not enabled for this pilot.

OpenAI API data policy · OpenAI data processing agreement

Other providers and transfers

Google Cloud hosts the application, database, documents and backups in the Paris region. Spacemail (Spaceship) processes the addresses and messages needed for email delivery. Support conversations may be forwarded to Gmail, operated by Google. These providers may use subprocessors outside the European Union under their data processing agreements.

Google Cloud · Spaceship · Google / Gmail

OpenAI’s Data Processing Addendum provides for transfers from the EEA or Switzerland under agreements containing Standard Contractual Clauses or an adequacy decision. These contractual safeguards do not mean that processing remains in Europe. Other providers’ mechanisms and scopes are described in the addendum; available information can be requested from support.

Document and backup retention

At the end of the pilot, after 30 days’ notice to export your data, the publisher deletes pilot accounts, their documents, models and results from the active application. You may also request account deletion earlier. Backups, provider logs and the trial-abuse prevention register follow the periods and exceptions described on this page.

Inactive projects are subject to deletion after 365 days. Account deletion removes active data, subject to records needed for security and abuse prevention. Backup copies expire separately: 30 days off the machine, then a further 7 days of technical recovery; 7 days for local encrypted copies.

After a restore, deletion requests made since the backup must be reapplied before returning to service. Support data is retained to follow up requests; ask support to delete it when that follow-up is complete.

Journey analytics

If you accept, a random identifier links pages and actions in this browser: site arrival, signup, document uploads, interpretation, acceptance, calculation and exports. Payment confirmations come from the server, never simply from returning from Stripe.

We also measure errors, page progress and estimates of active interaction. We do not record your screen, keystrokes, form text, document contents, passwords or card data in these statistics.

These data are pseudonymised, not anonymous. After sign-in, they may be associated with your account for export or deletion. Each browser keeps its own identifier; the same link may be opened on several devices without merging their identity. These internal analytics stay in this installation, without an external advertising tool.

Your choice is remembered for 180 days. Events are deleted after 90 days by the installation cleanup. Withdrawing consent erases this browser's events and analytics identifier; other browsers retain their own choice.

With your consent, an individual link received in a business exchange can associate this browser’s journey with the intended recipient’s private reference, to understand interest and difficulties. The link can be forwarded: it does not confirm your identity. Without consent, this attribution is not recorded in analytics.

Audience measurement with Google

If you accept analytics, the public presentation and information pages of the site also load Google Tag Manager, which triggers Google Analytics. The customer workspace, sign-up, sign-in and the pages of your documents do not load these tools.

Google then receives the address of the page viewed, the referring page, technical information about the browser and device, and the connection IP address. According to Google, Google Analytics does not store IP addresses. Advertising uses remain refused: ad_storage, ad_user_data and ad_personalization are sent as not granted.

Google Ireland Limited and Google LLC may process this data outside the European Union, including in the United States, under the EU–US Data Privacy Framework and standard contractual clauses.

Withdrawing your consent stops these tools from loading and deletes the Google Analytics cookies of this browser for bidresolve.com. Data already sent to Google follows the retention period set in Google Analytics.

Google privacy policy · How Google uses data from partner sites

Cookies needed for the service

Session and security cookies support login and protect forms. The preference cookie records your analytics choice. Language follows your browser settings, without a language cookie.

Stripe applies its own rules on its hosted checkout page. BidResolve does not measure fields or clicks within that page.

Free trial

Activation requires confirmation of your email address. A protected fingerprint of that address and the activation date are retained after account deletion to prevent repeated trials. This register contains neither your documents nor your answers and is not used for analytics.

Your rights and the installation controller

Your account lets you export your data and request deletion. Documents and records needed for security, decisions or billing follow their own rules, independently of optional analytics.

Adel Chetara, 35 allée de Bellevue, 94170 Le Perreux-sur-Marne, France, controls account data and analytics processing. Contact: support@bidresolve.com. You may request access, rectification, erasure, restriction, portability or exercise your right to object where applicable.

Analytics consent can be withdrawn at any time. You may lodge a complaint with the CNIL. cnil.fr