Privacy policy

1. Data controller

The data controller for the personal data collected on BIMaturity is the project owner, whose legal entity is currently being incorporated (see the legal notice). For any question relating to your data, contact contact@bimaturity.com.

2. Data collected

Depending on how you use the service, we collect:

• Account data: name, email, firm, role in the workspace;
• Assessment data: answers to skills grids, scores, notes, and, for assessed candidates: name and, if the assessor enters them, experience, salary expectations, availability and commuting time;
• Firm data: name, address, headcount, business sectors, logo;
• Billing data, in the case of a paid subscription (processed by Stripe);
• Contact form data: name, email, firm, country, firm size, message, and your choice, if any, to receive our news.

3. Purposes

This data is used to provide the service (account, assessments, maturity tracking, invitations), provide support, respond to your contact requests, send you our news if you have requested it, and comply with our legal obligations.

4. Legal basis

Processing is based on the performance of the service you use, on our legitimate interest in securing and improving it, and, for the contact form and the news, on your consent. You may withdraw your consent at any time.

5. Recipients and processors

Your data is hosted via Supabase / Lovable Cloud. Emails are sent via Resend and Lovable's messaging infrastructure, and payments are processed by Stripe. The site's fonts are loaded from Google Fonts, which transmits your IP address to Google. No data is sold to third parties.

Some of these providers are located outside the European Union, in particular in the United States; transfers are governed by the safeguards provided for by the GDPR (standard contractual clauses or adequacy decision).

6. Cookies and trackers

BIMaturity uses neither advertising cookies nor third-party audience measurement tools. Only technical storage strictly necessary for the operation of the service is used (keeping your login session, display preferences, progress of the guided tour).

The presentation video on the home page is hosted by Vimeo. The player is only loaded when you click "Watch the video"; Vimeo may then receive your IP address and set its own cookies. We ask Vimeo not to track your session.

7. Retention period

Account data is retained for as long as the account exists: deleting the account from the profile settings takes effect immediately. Assessments carried out within a firm's workspace remain available to that workspace for as long as it exists; you may request their erasure at any time. Contact form messages are retained for the time necessary to process your request.

8. Your rights

In accordance with the GDPR, you have the right of access, rectification, erasure and portability of your data, as well as the right to object and to restriction of processing. To exercise them, contact contact@bimaturity.com or use the Contact page. You may also lodge a complaint with the CNIL (cnil.fr).