Privacy policy

Data controller

CLOUDXL, a SASU whose registered office is at 14 rue Bausset, 75015 Paris, France, is the controller of the processing described on this page. For any question: contact@cloudxl.fr.

Contact form

• Data: name, email and message, plus company, phone and needs if you provide them. We also record the language and the page the request is sent from.
• Purpose: answering your request and discussing your project with you.
• Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
• Retention: three years from our last exchange, then deletion.
• Recipient: your request reaches us by email through Resend, our email delivery processor. It is never sold or transferred.

Audience measurement

We use PostHog to measure traffic on the site, understand how it is used and spot technical errors. The data is hosted in the European Union.

• Without your consent, by default or if you decline: measurement runs without cookies: only your choice is remembered in your browser. Visits are counted anonymously, with no persistent identifier. Legal basis: our legitimate interest in measuring the site’s audience.
• With your consent: PostHog stores an identifier in a cookie and in your browser’s local storage, which links your visits together. Legal basis: your consent, which you can withdraw at any time.

Bot protection

The contact form is protected by Cloudflare Turnstile, which checks without any action on your part that the request is not sent by a bot. To do so, Cloudflare processes technical data about your browser and connection, including your IP address, only for this check. Legal basis: our legitimate interest in protecting the form from abuse.

Cookies

This site sets no advertising cookies. The only audience measurement cookie is PostHog’s, set only if you accept it. It expires after one year.

You can change your choice here at any time, or from the “Manage cookies” link at the bottom of every page.

Hosting and transfers

The site is hosted by Vercel, which processes the technical data needed to serve pages, such as your IP address. Vercel, Resend and Cloudflare are based in the United States: data transfers to these providers are covered by the European Commission’s standard contractual clauses, and for Resend and Cloudflare, which are certified under it, by the EU-US Data Privacy Framework.

Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability.

To exercise them, write to us at contact@cloudxl.fr. If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).