Privacy policy
What FLORIA does with personal data, why, and how everyone keeps control over their own.
Version 3, in force since September 26, 2026.
Who is responsible
CYS Digital Solutions, the editor of FLORIA, is responsible for the processing described here. For any question or request: contact@cysdigital.co.
What FLORIA never does
FLORIA never sells or shares any personal data, shows no advertising and places no advertising or audience-measurement tracker.
An organisation never sees your phone number, your personal address, your failed attempts, your drafts or your exchanges with the mentor.
What is collected at entry
To open a talent account: an email address and a declared date of birth. The date is used to check the age of entry; a refused entry keeps only a non-reversible fingerprint of the address and the declared date.
To open an organisation’s account: the address, the organisation’s name, its nature and its sector, and the date of birth of the person who opens it.
The acceptance of the terms of use is kept with their version and its date, never with your network address or your device.
This information is required: without it, the account does not open. What you bring afterwards — your CV, your productions — serves the journey you choose to follow.
What your journey produces
Your CV file is encrypted, then destroyed as soon as it has been read; the lines drawn from it stay in your account.
Your exam productions, your defences, your declarations of the use of artificial intelligence tools, your exchanges with the mentor and what it retains of them — which you can correct —, your deliverables and their evaluations, and the proof pages you publish.
During an oral interview, the sound is never written to disk: only the transcript is kept, encrypted with a key of your own account.
If you reinforce your identity by phone, the number is neither written nor shown: only a fingerprint of it is kept. If you attach a professional account, only a fingerprint of the provider and the identifier is kept.
What an organisation sees
Without a subscription, an organisation sees in the pool only profiles without a name, a photo or a contact.
A subscribed organisation sees your name and may write to you only if you chose to enter the pool or authorised its project. The content of threads is encrypted.
What you publish
A proof page is published only if you publish it. It can then be read without an account by anyone who has its address, and search engines may index it; it is listed in no directory and in no sitemap.
Once withdrawn, it stops being served immediately.
Who reads a proof
FLORIA counts the distinct readers of a proof, week by week, from an encrypted fingerprint of the origin of the reading. It keeps neither the network address in clear, nor the precise time, nor the country, nor the device, nor where the reader came from.
Automated decisions
Exams, evaluations and recommendations are made by the platform’s agents, against published criteria: they are what establishes that a skill is confirmed on your proof.
Under every decision you find what it rests on — the criteria applied and the elements retained from your work —, its date and the agent that took it. You can contest it from the screen that shows it, then ask for a person to examine it.
Settling a dispute, ruling on a suspicion of fraud and closing an account are never automatic.
Integrity and security
To prevent fraud, FLORIA keeps a prevention register that holds only fingerprints. You can object to it from “My data”.
The platform’s journals name people by a pseudonym whose key can be destroyed. The entry server keeps a technical access log — network address, page requested without its parameters, date — kept in rotation for the security of the service.
Why: the legal bases
The performance of the service you ask for, under the terms of use: opening your account, keeping your journey, serving your proof.
Your consent: publishing your proof, entering the pool, accepting a verification requested by an organisation, serving as an example. It can be withdrawn at any time.
Legitimate interest: preventing fraud and protecting the security of the service.
Legal obligation: keeping invoices.
Who processes them with us
A hosting provider, in the European Union.
Providers of artificial intelligence models, used only if they keep nothing beyond the time of the call and train no model on what is entrusted to them: each person’s history lives at FLORIA. Speech recognition and synthesis run on FLORIA’s own servers.
A provider that sends the service emails.
The payment providers, which sell the subscription in their own name and handle payment data themselves: no card data passes through FLORIA, which receives only its type and last characters.
The authorities, when the law requires it, under a recorded procedure.
Where
The data is hosted in the European Union.
When a model provider processes a request outside the European Union, the transfer is governed by standard contractual clauses of the European Commission.
For how long
Each item your account holds has its own retention period and its reason. “My data” shows them one by one, with the date each one goes: this policy does not copy them, so that a period exists in one place only.
Your rights
You can see what your account holds (“My data”) and ask for a copy of it, correct your CV lines, your name and your settings, leave the pool, withdraw your proof at any time and free of charge, and object to the prevention register.
You can ask for your account to be deleted: your proof is revoked as soon as you ask, and you are left a period to change your mind and take your data away, whose date is given to you.
You can also ask for the restriction of a processing, object to a processing based on legitimate interest, and withdraw a consent at any time, without calling into question what was done before. An automatic decision can be contested and examined by a person.
For any other request, write to contact@cysdigital.co: you will receive an answer within the time the law sets. You may also refer the matter to the Moroccan data protection authority (CNDP), or to the data protection authority of your country of residence in the European Union.
Age
FLORIA opens at eighteen. No account is opened for a younger person.
Changes to this policy
This policy is versioned. The version in force is the one this page shows, with its date.