Trust & GDPR, feature by feature

A tool built on public data has to answer precisely. Here is, for each part of GemFlow, where the data comes from, what is done with it, and your obligations as well as ours.

Enriched files

The prospect file is the heart of the product: everything in it is public in origin, cross-checked and re-verified.

On what legal basis are files built?

On legitimate interest (art. 6.1.f GDPR), for business-to-business prospecting. Files cover professional activity only: never anyone’s private life.

Where does the information in a file come from?

From public sources, cross-checked against each other and re-verified over time. Every data point carries the date it was last confirmed: you always know what you are relying on.

How long is a data point kept?

As long as it remains publicly verifiable. Information that disappears from public sources is removed as re-checks run, and erasure requests are handled within one month.

Can a business owner have their information removed?

Yes. Anyone concerned can exercise their rights of access, rectification, erasure and objection (art. 14, 16, 17 and 21). One email is enough; we answer within a month.

contact@gemflow.cloud

Prospecting emails

Emails go out from your address, with built-in safeguards: they protect your recipients and your sender reputation.

Are the emails compliant?

Every email sent from GemFlow ends with an automatic information notice: who you are, where the contact details come from, how to opt out. Nothing for you to add.

What happens when a recipient opts out?

Opting out takes one click and is checked at every send: a recipient who objected no longer receives emails from any GemFlow account.

Does the AI assistant read my messages?

No. The assistant never ships your database or your conversations: only your writing instructions reach the model provider.

CSV exports

Your files follow you into your CRM: and responsibility follows the same path.

What does an export contain?

Your files with the contacts you have revealed, your statuses and your notes: in the format your CRM expects. What you have not revealed never leaves.

Who is responsible for the data after an export?

Once the data is imported into your tools, you become the data controller for it: objection requests must be honored there too. GemFlow remains responsible for the source database.

Trust

Public data, used responsibly

Everything that feeds your files is public knowledge. What you do with it stays yours.

Data that is 100% public

Every piece of information comes from public sources, cross-checked against each other and re-verified over time. Each file shows when a data point was last confirmed.

Built for the GDPR

Files are built on the legitimate-interest basis (art. 6.1.f) and cover professional activity only.

  • Rights of access, rectification, erasure and objection (art. 14, 16, 17 and 21)
  • Every request answered within one month
Exercise your rights

Your recipients are protected: and so are you

Every email sent from GemFlow ends with an information notice: who you are, where the contact details come from, how to opt out.

Opting out takes one click and is checked at every send: a recipient who objected no longer receives emails sent from GemFlow.

Your data stays your data

A file’s contact details stay hidden until you choose to reveal them. Once revealed, they are visible from your account only, and you become responsible for how you use them.

  • The AI assistant never ships your database: only your writing instructions reach the model provider
  • Every account is isolated: your pipeline, notes and emails belong to you

Your field prospecting, organized.

Less data entry, more doors: your prospect files arrive pre-filled, and your pipeline updates itself while you’re in the field.

Free trial, no credit card required.