Data Security and Confidentiality
At Gisel, we believe the best way to protect personal data is to avoid retaining it any longer than strictly necessary.
1Our General Commitment
Handling CVs means handling sensitive personal data. We built our platform around that responsibility, not in spite of it.
2Two Processing Modes — You Choose
In standard mode (without the CV Library), no CV is retained on our servers beyond the processing time: the document is uploaded, processed to generate your consultant profile, made available for download, and then automatically deleted. In CV Library mode, CVs are retained only because you have chosen to activate this feature — and you retain full control over when they are deleted.
3End-to-End Encryption
Your data is protected at every step. It is encrypted in transit using HTTPS/TLS as it travels between your browser and our servers, and encrypted at rest using AES-256 encryption when stored in our database.
4100% French and European Hosting
All your data, without exception, is hosted in France by OVHcloud. We do not use any hosting provider located outside the European Union, eliminating any risk of data transfers outside the EU and ensuring full GDPR compliance.
5Access Controls and Full Audit Logging
Each client organization operates in a strictly isolated environment: it is technically impossible for one client to access another's data. Administrators have access to traceability tools that show which users have viewed or downloaded documents within their workspace.
6Regular Backups
We perform regular, encrypted backups of our entire database to ensure the availability and integrity of your data even in the event of a major technical incident.
7The Right to Complete and Immediate Deletion
You can delete your data at three levels: an individual CV or document, a consultant's complete profile, or your entire CV Library database. These actions are available directly from your account at any time, with no justification required.
8Your Data Is Never Used for Anything Else
We formally commit to never selling or renting your data to third parties, and to never using your consultants' CVs or information to train any artificial intelligence model. Your data is used solely to provide the service you have subscribed to.
9You Own Your Data and Can Export It at Any Time
At any point during your subscription, or when you decide to cancel, you can export all your CVs, generated consultant profiles and custom templates. We never want you to feel locked into our platform.
10Our Legal and Compliance Documents
We provide a detailed Privacy Policy, Terms of Use, and a GDPR Data Processing Agreement (DPA) compliant with Article 28, available upon request for any client who wishes to sign one.
Une question sur notre sécurité ou notre conformité RGPD ?
Our team is available to respond to any security questionnaire or DPA request: contact@gisel.io
