Version 1.0, 1 November 2026.
The short version: you create an account with your e-mail address, you upload your own CV and certificates, and we use that data to match you with the right assignment. Your CV is analysed by Claude, an AI model by Anthropic, and your data only goes to the end client when we propose you with your consent. No resale, no third-party advertising, no profiling.
Who is responsible
Upstream Consulting bv, Schoolgatweg 2, 1501 Buizingen (Halle), Belgium, company number BE 0648.724.221. Questions about your data go to .
Which data and why
- your name, e-mail address and password (stored encrypted), to make your account work and to reach you;
- the CVs you upload, with the versions you keep, so we can propose you for an assignment;
- your certificates and other supporting documents, to substantiate your application;
- your signature, used to sign the right to represent per assignment;
- your applications: the answers to the screening questions, your desired day rate and your motivation;
- your language preference;
- the moment of registration and confirmation, as proof of your consent;
- your IP address at registration, login and on the contact form, solely to prevent abuse.
AI analysis with Claude
When you upload a CV it is analysed by Claude, an AI model by Anthropic: a summary, a career timeline and a skills overview, visible in your own account. When you apply, the same analysis compares your profile with the requirements of the assignment, as a non-binding indication; the result travels with your application for the person who reviews it.
An AI analysis is a tool, never a decision: people always review your application. Data sent through the API is not used by Anthropic to train its models. Anthropic is certified under the EU-US Data Privacy Framework and works with the European standard contractual clauses.
On which basis
The agreement with you (article 6.1.b GDPR) for everything needed to run the service; our legitimate interest (article 6.1.f) for preventing abuse and securing the service; your consent (article 6.1.a) for messages that are not needed for the service.
How long
As long as your account exists. To close your account, one message to is enough: we then delete or anonymise what refers to you within thirty days, except what the law obliges us to keep. A registration that is never confirmed is deleted after thirty days. Technical logs against abuse are kept for a limited time.
Who else sees it
- our own infrastructure in a Belgian data centre, where the website and the database run;
- the end client of the assignment you apply for: only when we propose you, with the right to represent you signed, and only what is needed for that;
- Cloudflare, for the Turnstile check on the registration, login and contact pages that verifies you are not a robot. That check processes your IP address and technical characteristics of your browser, solely for that decision; it builds no profile. Cloudflare is certified under the EU-US Data Privacy Framework;
- Anthropic, for the Claude analysis described above;
- Matomo on our own server, for visitor statistics: cookieless and with an anonymised IP address.
Your data is not resold. It is stored in the European Union; only the Turnstile check and the AI analysis may be processed outside the European Economic Area, under the safeguards above.
Cookies
We place no tracking cookies. One functional session cookie keeps you signed in. Visitor statistics run through Matomo on our own server, cookieless and with an anonymised IP address.
Your rights
You view and correct your data yourself in your account. For a copy of your data, an objection to a processing operation or closing your account, one message to is enough. If you are not satisfied with how we handle it, you can file a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.