Your professional data in Bluelake

Public professional data: name, job title, employment history, experience, skills and technologies, industry sector, education, professional location, and public professional profile URL. When one of our clients asks for it, also your professional contact details: work email address and mobile number. We never look for a personal email address, and we process no sensitive data.

This data is not collected directly from you. It comes from publicly accessible professional information and from third-party providers specialized in professional data. Contact details come from FullEnrich, a provider specialized in professional contact data, which we ask only when a client requests them: we send it your name, public profile link and current employer.

We use this data to map the Data & AI ecosystem and identify relevant profiles for our clients' and users' needs (sourcing and market intelligence). This processing relies on our legitimate interest (Article 6.1.f of the GDPR) in mapping the Data & AI ecosystem, balanced against your rights and freedoms. We may also contact some of these professionals ourselves, about Bluelake, in connection with their role: see Prospects in our privacy policy.

Bluelake and the authenticated users of our platform, within the limits of their plan. Access always requires an account and acceptance of our terms; this data is never public on our website. Your contact details, once a client has requested them, are visible only to the users of that client's company. The users of a client company can also copy your profile into their company's CRM, such as BoondManager, or download it in an export. Billy, our agent in Bluelake, reads this data to answer our users' questions: the data it needs is sent to our AI provider, Anthropic, which does not use it to train its models and deletes it within 30 days, unless a legal obligation or a breach of its usage policy requires keeping it longer. We do not sell your data. Our technical providers act on our behalf and comply with the GDPR.

Profiles are kept while they remain current in public sources. Profiles that become inactive (no public activity for 24 months or more) are deleted. Contact details are deleted with the account of the client company that requested them; FullEnrich keeps a history of its searches for 3 months. If you object, your data is deleted within one month.

Where data is transferred outside the EU/EEA, those transfers are framed by the safeguards provided for by the GDPR (standard contractual clauses or equivalent mechanisms). FullEnrich is run by a company in the United States; the search for contact details is framed by standard contractual clauses. The AI model behind Billy (Anthropic) involves processing in the United States, framed by the standard contractual clauses provided for by the GDPR.

You have the right to access, rectify, erase, object to, restrict and port your data under the GDPR. If you ask us to correct or delete your data, we pass your request on to the client companies that unlocked your profile in Bluelake. To object or request removal, write to privacy@getbluelake.ai with your name and your public profile URL; we process the request within one month. You may also lodge a complaint with the CNIL (the French supervisory authority).

See also our approach to data and our Privacy Policy.