Privacy and cookies

Data used to provide the service

Email, account data and documents needed for your requests are processed to perform the pilot service. Security records and the register preventing repeated trials serve the legitimate interest of protecting the service. Optional analytics rely on your consent.

You determine the content and purpose of your documents. Do not upload sensitive data, secrets whose disclosure is prohibited, or client documents without suitable authorisation and contractual arrangements. The pilot does not commit to exclusively European hosting of all processing.

Interpretation by OpenAI

Document text and, when necessary, images are sent to the OpenAI API. OpenAI does not use API data to train its models by default. Processing may take place outside the European Union.

Every request disables response storage with store=false. Documents are included inline in the request; BidResolve does not upload them to OpenAI Files. These settings do not remove abuse monitoring logs: OpenAI states retention of up to 30 days, subject to exceptions in its policies, including legal requirements.

Zero Data Retention and regional processing in Europe require prior OpenAI approval. They are not enabled for this pilot.

OpenAI API data policy · OpenAI data processing agreement

Other providers and transfers

Google Cloud hosts the application, database, documents and backups in the Paris region. Spacemail (Spaceship) processes the addresses and messages needed for email delivery. Support conversations may be forwarded to Gmail, operated by Google. These providers may use subprocessors outside the European Union under their data processing agreements.

Google Cloud · Spaceship · Google / Gmail

International transfers are governed by the mechanisms in provider agreements, including standard contractual clauses where applicable. You can request information about these safeguards from support.

Document and backup retention

At the end of the pilot, after 30 days’ notice to export your data, the publisher deletes pilot accounts, their documents, models and results from the active application. You may also request account deletion earlier. Backups, provider logs and the trial-abuse prevention register follow the periods and exceptions described on this page.

Inactive projects are subject to deletion after 365 days. Account deletion removes active data, subject to records needed for security and abuse prevention. Backup copies expire separately: 30 days off the machine, then a further 7 days of technical recovery; 7 days for local encrypted copies.

After a restore, deletion requests made since the backup must be reapplied before returning to service. Support data is retained to follow up requests; ask support to delete it when that follow-up is complete.

Journey analytics

If you accept, a random identifier links pages and actions in this browser: site arrival, signup, document uploads, interpretation, acceptance, calculation and exports. Payment confirmations come from the server, never simply from returning from Stripe.

We also measure errors, page progress and estimates of active interaction. We do not record your screen, keystrokes, form text, document contents, passwords or card data in these statistics.

These data are pseudonymous, not anonymous. After sign-in, they may be linked to your account for export or deletion. Devices are not linked together. The data remain in this installation, with no external advertising tool.

Your choice is remembered for 180 days. Events are deleted after 90 days by the installation cleanup. Withdrawing consent erases this browser's events and analytics identifier; other browsers retain their own choice.

Cookies needed for the service

Session and security cookies support login and protect forms. The preference cookie records your analytics choice. Language follows your browser settings, without a language cookie.

Stripe applies its own rules on its hosted checkout page. BidResolve does not measure fields or clicks within that page.

Free trial

Activation requires confirmation of your email address. A protected fingerprint of that address and the activation date are retained after account deletion to prevent repeated trials. This register contains neither your documents nor your answers and is not used for analytics.

Your rights and the installation controller

Your account lets you export your data and request deletion. Documents and records needed for security, decisions or billing follow their own rules, independently of optional analytics.

Adel Chetara, 35 allée de Bellevue, 94170 Le Perreux-sur-Marne, France, controls account data and analytics processing. Contact: support@bidresolve.com. You may request access, rectification, erasure, restriction, portability or exercise your right to object where applicable.

Analytics consent can be withdrawn at any time. You may lodge a complaint with the CNIL. cnil.fr