Tierless
Privacy policy
Last updated: Coming soon
This is a translation provided for convenience. Only the French version has legal effect. In the event of any discrepancy, the French text prevails.
Who is responsible for your data
Coming soon, hereafter “Tierless”, is the controller of the personal data collected on this site.
For any question, or to exercise your rights: hello@tierless.fr.
What we collect, and why
If you are an independent consultant
| Data | Why | Legal basis |
|---|---|---|
| Email address | Signing you in, notifying you | Performance of the service |
| First and last name | Identifying your profile, introducing you once a conversation is opened | Performance of the service |
| The contents of your CV: roles, skills, education, languages | Building your profile | Performance of the service |
| Your company's registration number (SIREN or equivalent) | Checking that it legally exists | Legitimate interest: the platform's reliability |
| Day rate, availability, work setup, region | Matching against assignments, feeding the market rates in aggregate | Performance of the service |
| Messages exchanged | Making the conversation possible | Performance of the service |
| Connection data and technical logs | Security, diagnosis | Legitimate interest |
If you represent a company
| Data | Why | Legal basis |
|---|---|---|
| Email address, first and last name | Signing you in, identifying you | Performance of the service |
| Registered name, SIREN, activity code, headcount band | Checking the company and its eligibility | Performance of the contract and legitimate interest |
| The “end client” undertaking and its date | Evidence that our admission rules are respected | Legitimate interest |
| The contents of assignments posted | Posting and matching | Performance of the service |
| Messages exchanged | Making the conversation possible | Performance of the service |
| Billing data | Invoicing, meeting our accounting obligations | Legal obligation |
If you only leave your email address
You then have neither an account nor a profile, and all we know about you is that address and the list you left it on.
| Data | Why | Legal basis |
|---|---|---|
| Address left to be told when the directory grows | To write to you once, and only once | Consent |
| Address subscribed to the rates barometer | To send you one email a month, the medians and quartiles from the observatory | Consent |
| Address left to be told when new assignments arrive | To write to you once, and only once | Consent |
| Your company name, if you give it | To know who we are writing to | Consent |
You can withdraw at any time, in one click from the link in every email we send, or by writing to hello@tierless.fr. Withdrawing deletes the row and keeps nothing, not even a fingerprint of your address: we hold no list of unsubscribed people.
We do not measure whether these emails are opened or clicked. Your address is therefore never deleted because you do not read: it is deleted when we have sent you nothing for twelve months, or after three emails in a row refused by your mail provider.
What we do not collect
Your CV is read once, then discarded. We keep neither a copy nor its text: only the information drawn from it, which you can correct, goes into your profile.
We use no advertising trackers and no third-party analytics cookies, and we resell no data.
Audience measurement
We measure site traffic with Vercel Web Analytics, with no cookie and no lasting identifier: each visit is tied to a fingerprint computed from the request and reset every day, which cannot follow you from one day to the next or from one site to another.
We measure page loading times with Vercel Speed Insights, which records technical measurements with no cookie, no visitor identifier and no location beyond the country.
Only public pages are measured. The address sent never contains an identifier or a parameter: the pages of your own account, your conversations and your documents send nothing at all.
How long we keep your data
| Data | Retention |
|---|---|
| Uploaded document, CV or job description | Never kept: it is read, then discarded. Only the text drawn from it is stored |
| Active profile and account | For as long as the account exists |
| Dormant account: no sign-in and no availability confirmation for 24 months | Deleted after a warning sent 30 days beforehand |
| Raw output of a document reading, attached to a profile or an assignment | Lifetime of the account: it goes with what it produced |
| Raw output of a reading that produced nothing | 30 days |
| Body of the emails we send | 7 days. The record of the sending is kept: recipient, subject, date, outcome |
| Address left to be told when the directory grows | Twelve months after our last email or, failing that, after you signed up. Deleted immediately if you withdraw |
| Address subscribed to the rates barometer | For as long as the subscription lasts. Deleted immediately if you withdraw, and twelve months after our last email |
| Address left to be told when new assignments arrive | Twelve months after our last email or, failing that, after you signed up. Deleted immediately if you withdraw |
| Database backups | 35 days. One encrypted copy a day, kept outside our servers, then destroyed |
| Unused profile claim tokens | 7 days |
| Rate-limit fingerprints | 2 days |
| Sign-in sessions | 60 days after the last visit, then 2 days |
| Messages in a conversation | For as long as either account exists |
| Assignments posted | 36 months after they close |
| Searches run on the site | Recorded with no identifier at all: no account, no address, no fingerprint. They attach to no one |
| Billing data | 10 years, accounting obligation |
| Technical and connection logs | 12 months |
| Traffic and performance measurement | Coming soon |
| Aggregated market-rate data | No limit, as it no longer identifies anyone |
Deleting your account is immediate and real: profile, applications and messages received are erased. All that remains is the data the law requires us to keep, and the messages you sent to someone else.
A backup keeps what you deleted, for at most thirty-five days. Deletion is immediate in the database: your profile leaves the site at once. Daily backups, however, are frozen: the ones taken before your request still hold your data, and they are destroyed after thirty-five days. We only reopen them to restore the whole database after an incident, and we would then delete again whatever had to be.
Why the messages you sent remain. A conversation has two authors. Erasing half of an exchange would deprive the other party of what they received, and of the record of an agreement they may have made. Those messages are therefore kept for as long as your correspondent's account exists, separated from your identity: your name, your address and your profile no longer attach to them.
The legal basis is your correspondent's legitimate interest in keeping an exchange they took part in, article 6(1)(f) of the General Data Protection Regulation. That interest is balanced against yours: which is why the message survives, and not what identifies you.
Who else has access to your data
We use technical providers, who act only on our instructions:
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Site hosting, traffic and performance measurement, keeping the encrypted database backups | United States |
| Hostinger | Database hosting | Server in France |
| Anthropic PBC | Reading CVs and job descriptions, translating assignment texts. A consultant's headline, summary and experience are never translated | United States |
| MongoDB Inc. (Voyage AI) | Matching profiles with assignments | United States |
| Resend Inc. | Sending emails | United States |
| Coming soon | Collecting subscription payments | Coming soon |
| Coming soon | Issuing and transmitting invoices | Coming soon |
Four of these providers are established in the United States: Vercel, Anthropic, MongoDB and Resend. Your data is therefore transferred outside the European Union. These transfers rely on the standard contractual clauses adopted by the European Commission, and where applicable on the EU–US Data Privacy Framework.
The database itself is hosted on a server located in France.
The documents you upload are sent to Anthropic so that the information can be extracted from them. They are not used to train any model.
Automated decisions
Matching profiles to assignments is automatic. It produces a display order based on how close a need and a profile are, and on objective criteria: skills, day rate, availability, languages, location.
That ordering is a search aid, never a decision. No company hires automatically, no profile is set aside by the platform, and no one is assessed. You can correct the information about you at any time.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability. Most are exercised directly from your own account: changing any data, exporting your skills profile, deleting your account.
For anything else, write to hello@tierless.fr. We answer within one month.
If our answer does not satisfy you, you may refer the matter to the Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, 75007 Paris, France.
Cookies
We use two cookies, and no others. A session cookie, strictly necessary to keep you signed in, and tierless_langue, which remembers for one year the interface language you chose. Neither is used for analytics or advertising, and neither requires your prior consent.