Privacy policy

1. Data controller

Move2Cloud SAS, 66 avenue des Champs-Élysées, 75008 Paris, France. For any question about your data, or to exercise your rights: contact@move2cloud.fr.

2. Data processed

• Move2Cloud account: e-mail address, first and last name, chosen language. The password is only kept as a hash; the secret of the authenticator app (two-step sign-in) is kept by the sign-in service.
• Sign-in with Microsoft or Google: if you choose to sign in with one of them, it gives Move2Cloud the identifier of your account there, your name and your e-mail address. Move2Cloud never receives your Microsoft or Google password, and has no access to your e-mails, files or contacts.
• Sessions and security: devices and browsers signed in, IP address, dates of sign-in and of last activity, to show your open sessions, end them and detect unusual access.
• Contact form of the website: name, e-mail address, phone number, subject and message, to answer you.
• Chat window of the website: what you write in it, and the technical information of your browser it needs to work.

3. Purposes and legal bases

• Creating and running your account, signing you in to the Move2Cloud products, sending the e-mails of the account (address verification, password reset): performance of the contract.
• Securing accounts (two-step sign-in, sign-in log, abuse prevention): legitimate interest.
• Answering requests sent from the website: legitimate interest, or steps taken at your request before a contract.

4. What we do not do

Your data is neither sold nor used for advertising.

5. Recipients and processors

Your data is only accessible to the people at Move2Cloud who run the service, and to the following providers, for their part:

• Scalingo (France): hosting of the sign-in service of Move2Cloud accounts and of its database.
• Scaleway (France): sending of the account e-mails.
• Amazon Web Services (European Union, Ireland): hosting of the move2cloud.fr website.
• Microsoft and Google: only if you choose to sign in with them; their own privacy policies apply to your account with them.
• EmailJS: delivery of the messages of the contact form.
• tawk.to: chat window of the website.

6. Transfers outside the European Union

The data of the Move2Cloud account is hosted in France. Some providers of the website (EmailJS, tawk.to), and Microsoft and Google when you sign in with them, may process data outside the European Union; such transfers are then covered by the safeguards of the GDPR, in particular the standard contractual clauses of the European Commission.

7. Retention

• The data of the account is kept as long as the account exists, and deleted with it.
• Sessions end after 10 minutes without activity and at the latest 10 hours after signing in; the sign-in log is kept for a limited time, as security requires.
• Messages received from the website are kept as long as needed to handle the request and the relationship that may follow.

8. Security

• Encrypted connections (HTTPS).
• Passwords kept as hashes; two-step sign-in with an authenticator app asked of every account.
• Automatic sign-out after 10 minutes without activity in the products.

9. Cookies

The website uses one cookie to remember the chosen language. The tawk.to chat window sets its own cookies when it loads. The sign-in service only uses the cookies the session needs. There is no advertising cookie and no audience measurement tool.

10. Your rights

You have the right to access, rectify, erase, restrict, object to and port the data about you. You can delete your account from your Move2Cloud account page or from one of the products, or write to contact@move2cloud.fr. If the answer does not satisfy you, you can lodge a complaint with the CNIL (https://www.cnil.fr).

11. Changes to this policy

This policy may change; the date of the last update is shown at the top of the page. Account holders are told of any significant change.