Draft—not yet a binding policy. YSEND GROUP's corporate identity and current production hosting have been verified. Processing purposes, legal bases, retention periods, subprocessors, transfers, and contractual roles still require formal approval before this page can be indexed.

Privacy Policy

Draft updated: 22 July 2026

1. Who we are

XMS Cloud is published and operated by YSEND GROUP, the trading identity of YSEND, a French simplified joint-stock company registered under SIREN 843 222 746 and RCS Antibes, with registered office at 357 Chemin des Iscles, 06700 Saint-Laurent-du-Var, France. Contact: contact@ysendgroup.com.

YSEND acts as controller for its own website, account, security, support, and commercial relationship data. For operational data that customers place in XMS Cloud, YSEND generally acts as processor under the customer's documented instructions. The final Data Processing Agreement must define each processing activity.

2. What data we collect

[Account details, authentication data, usage and telemetry, support communications, and operational data processed on behalf of customers.]

3. How and why we use it

[Purposes and GDPR legal basis for each processing activity: contract, legitimate interests, consent, or legal obligation.]

4. Sharing and sub-processors

[Recipients and sub-processors for hosting, email, analytics, payments, and support. Link the approved sub-processor list.]

5. Hosting and international transfers

The current public production environment is hosted with Amazon Web Services EMEA SARL in the AWS Europe (Stockholm) region, eu-north-1. Any other processing location, support access, subprocessor, or transfer outside the EEA must be documented together with its applicable safeguard before this policy is approved.

6. Retention

[Retention periods by data category and deletion practices.]

7. Your rights

Under the GDPR you may have rights to access, rectify, erase, restrict or object to processing, and data portability. [Add the exercise process, response period, and complaint rights with the CNIL or relevant authority.]

8. Cookies and local storage

The static marketing site does not currently load third-party analytics. [Confirm all required functional cookies and browser-storage use before approval.]

9. Security

[Summarise approved technical and organisational measures, including encryption in transit, tenant isolation, access controls, audit, and incident response.]

10. Contact

Privacy and data-subject requests may be sent to contact@ysendgroup.com or by post to YSEND GROUP, 357 Chemin des Iscles, 06700 Saint-Laurent-du-Var, France.