EN
Français1. Data controller
Zyllio, a French SASU registered under SIREN number 994 131 274, with its registered office at 24 rue des Fleurs, 91470 Limours, France, is the controller of the personal data processing described in this policy.
For any question about your personal data or to exercise your rights, you can contact us at contact@zyllio.com or by post at the address above.
2. Scope
This policy covers:
- the showcase website available in particular at
https://zyllio.com; - the Zyllio Studio platform and associated services, available in particular at
https://www.zyllio.one; - exchanges with Zyllio, in particular sales, demo and support requests.
Applications built with Zyllio Studio may be operated by Zyllio’s customers. For personal data processed in these applications on behalf of a customer, that customer determines the purposes and means of the processing and is, in principle, the data controller. Where applicable, Zyllio then acts as a processor, solely to provide the Platform and in accordance with the customer’s documented instructions. This processing is governed by the data processing agreement entered into with the customer.
3. Data processed, purposes and legal bases
| Situation | Data concerned | Purpose | Legal basis |
|---|---|---|---|
| Browsing the showcase website | The showcase website does not collect any personal data or technical browsing data. | Not applicable | Not applicable |
| Creating and managing a Zyllio Studio account | Email address | Create the account, authenticate the user, provide access to the service and send communications required for the service | Performance of the contract or pre-contractual measures |
| Using Zyllio Studio | Data and content added by the user to the project: text, media, settings, configurations, technical identifiers, API keys or tokens | Host, process and make available the project and the requested features | Performance of the contract; processing on behalf of the customer when Zyllio acts as a processor |
| Subscription, billing and payment | Billing details, subscription history, invoices, payment status. Credit card data is processed by Stripe and is not stored by Zyllio | Manage the subscription, payment, invoicing, accounting and fraud prevention | Performance of the contract; legal obligations; legitimate interest in fraud prevention |
| Contact and support requests | Name, email address, content of the request and any attachments | Respond to the request, assist the user and track incidents | Zyllio’s legitimate interest or performance of the contract, depending on the request |
| Marketing communications | Email address and communication preferences | Send news and offers about Zyllio services | Consent, where required; or legitimate interest where permitted by regulations. You can object at any time. |
Zyllio asks you not to enter sensitive data, secret keys or unnecessary personal data in fields not intended for that purpose. When a user imports or configures data in a project, they remain responsible for ensuring that they have a legal basis for doing so.
4. Mandatory data
Data marked as required to create or use an account is essential to providing the service. Without it, the account may not be created or the contract may not be performed. Other data is optional; however, not providing it may limit our ability to respond to a specific request.
5. Recipients and processors
Data is accessible only to authorized Zyllio staff, within the limits of their duties, and to the service providers required to provide the service.
These providers may be involved in particular in hosting, sending emails, support, invoicing, payment or security. Zyllio governs their involvement through contracts that include appropriate confidentiality and data protection safeguards.
| Category | Provider | Data location | Role |
|---|---|---|---|
| Platform hosting | OVHcloud | France — Gravelines | Hosting and infrastructure |
| Payment | Stripe | European Economic Area | Payment processing |
| Email / support | Google Workspace | European Economic Area | Sending emails and support |
Zyllio does not sell, rent, exchange or transfer your personal data to third parties for commercial or advertising purposes. Zyllio only discloses it to authorized staff and to the providers described above, where such disclosure is necessary to provide, secure or improve the service, to comply with a legal obligation or to defend its rights.
6. Data transfers outside the European Economic Area
Data hosted in Zyllio Studio is stored in France with OVHcloud. Zyllio does not transfer this data outside the European Economic Area.
7. Retention periods
Zyllio retains data for no longer than necessary for the purposes described above, subject to legal retention obligations and limitation periods.
| Data category | Retention period | Final outcome |
|---|---|---|
| Account data | Duration of the contractual relationship, then one month | Deletion or anonymization, except for legal archiving |
| Project data | Duration of the subscription, then one month after the account is closed, including in backups | Secure deletion, unless required by law or instructed otherwise by the customer |
| Invoices and accounting records | Ten years from the end of the financial year | Intermediate archiving, then deletion |
| Contact / support requests | One month after the last interaction | Deletion or anonymization |
| Prospects and marketing communications | Until consent is withdrawn or three years after the last contact | Deletion or unsubscription |
| Security logs | One month | Deletion or anonymization |
8. Cookies and other trackers
The showcase website does not use any tracking, analytics or advertising cookies or trackers. No tracking cookie is placed on your device when you browse this website.
Zyllio does not use any marketing, advertising or analytics cookies or trackers. The Zyllio Studio platform only uses cookies or tokens that are strictly necessary for it to work, in particular for authentication, session security and remembering the user’s language preference.
9. Security
Zyllio implements appropriate technical and organizational measures to protect data against destruction, loss, alteration, disclosure or unauthorized access. Exchanges between your browser and Zyllio services are encrypted in transit using TLS. These measures include in particular access controls, backups, logging and security reviews.
Despite these measures, no transmission or storage of data can be guaranteed to be completely risk-free.
10. Your rights
Under the conditions provided for by regulations, you have the following rights:
- access your data and obtain a copy;
- request the correction of inaccurate or incomplete data;
- request the erasure of your data;
- request the restriction of processing;
- object to certain processing based on legitimate interest, including direct marketing;
- receive the data you have provided in a structured, commonly used format, where the right to data portability applies;
- withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
To exercise these rights, contact us at contact@zyllio.com. We may ask for proof of identity only if we have reasonable doubts about your identity. You also have the right to lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.
11. Minors’ data
Zyllio’s services are not intended for minors. Zyllio does not knowingly collect personal data about minors without the authorization required by applicable regulations. If you believe that a minor has sent us personal data without authorization, contact us so that we can take appropriate action.
12. Changes to this policy
Zyllio may update this policy to reflect changes to its services, practices or regulations. The last-updated date at the top of the document will then be changed. In the event of a significant change, Zyllio will provide appropriate notice, for example by email or within the platform where required.
13. Contact us
For any question about this policy or the processing of your personal data:
Zyllio
24 rue des Fleurs
91470 Limours, France
contact@zyllio.com