Translation for information purposes only. This English version has no contractual value. Only the French version, available at https://arrmesh.ai/fr/legal/privacy, is legally binding and prevails before the courts, which have jurisdiction under French law.

Privacy Policy

This policy describes the personal data processing carried out by Atyos SAS (18a Route de Paris, 67117 Ittenheim, France), as controller, in connection with the https://arrmesh.ai website and its relationship with prospects and customers.

It does not cover the data that our Customers process using the ArrMesh service: for such data, Atyos acts as a processor under the Data Processing Agreement (DPA), and each Customer is responsible for informing its own users.

1. Data processed, purposes and legal bases

Processing	Data	Purpose	Legal basis	Retention period
Contact form	Name, company, business email, subject, message, plan of interest	Responding to your request	Legitimate interest in responding to enquiries	3 years from the last contact
B2B prospecting	Name, job title, company, business contact details, history of exchanges	Presenting our offers and news	Legitimate interest (you may object at any time)	3 years from the last contact
Customer management	Identity and contact details of the Customer's contacts (administrators, billing contact), Plan, order and exchange history	Performance of the contract, support, relationship management	Performance of the contract	Term of the contract, then 5 years (limitation period)
Acceptance of contractual documents	Version accepted, date and time, account identifier, IP address	Evidence of the formation of the contract	Legitimate interest and evidentiary obligation	Term of the contract, then 5 years
Invoicing and payment	Billing details, invoices, bank details and SEPA direct debit mandate (processed with our payment service provider)	Invoicing, collection, accounting	Performance of the contract and legal obligation	10 years for accounting records
Website security	Technical logs (IP address, timestamp, request)	Security and abuse prevention	Legitimate interest	12 months maximum

2. Recipients

The data is intended for Atyos's authorised teams (sales, support, administration, accounting). It may be disclosed to our technical service providers, acting on our instructions: hosting (Amazon Web Services EMEA SARL), email delivery, payment service provider (Qonto), as well as to our advisers and to authorities where required by law. Atyos does not sell your data.

3. Location and transfers

The data is hosted in the European Union. Where a service provider may access the data from a third country, the transfer is covered by an adequacy decision or by the European Commission's standard contractual clauses.

4. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection (in particular to prospecting), as well as the right to set guidelines regarding the fate of your data after your death. To exercise them, write to privacy@arrmesh.ai. Proof of identity may be requested in case of reasonable doubt.

You may lodge a complaint with the French data protection authority (CNIL — www.cnil.fr).

5. Cookies

The https://arrmesh.ai website does not use cookies requiring consent. See the Cookie Policy.

6. Changes

This policy may change. The version in force and previous versions are available at https://arrmesh.ai/fr/legal/privacy.