iyedy

Privacy policy

In force from 30 October 2026.

Who is responsible for your data

The controller of the processing described here is Youssef ASKRI EI, sole trader, publisher of iyedy, 96 rue Jean Jaurès, 95870 Bezons, France. For any question about your data or to exercise your rights: contact@iyedy.com. iyedy has not appointed a data protection officer.

This policy covers the iyedy.com site, the iyedy application (app.iyedy.com), its share links and the e-mails we send. When you work in the space of a customer organisation (Team and Enterprise plans), that organisation decides how its content and its members’ data are used: iyedy processes them on its behalf, under the data processing agreement. Contact the organisation first about that data.

Cookies and trackers

This site sets no cookie and loads no advertising script. It keeps in your browser (its local storage, never sent) your theme choice (light or dark), the pause of the animations if you asked for it, your audience measurement choices with their date and the version of the banner that asked for them and, if you asked for it, your refusal to be counted. Your measurement choices hold for 6 months, then we ask again; we also ask again if their purposes change. They stay in your browser and we keep no copy of them: the proof of your consent is this dated choice and the version of the banner it names, whose history is kept with the site’s code. You can change your choices or withdraw your consent at any time, as simply as you gave it, with "Manage my choices" at the bottom of every page or with this button.

The application only uses the cookies and browser local storage strictly needed for it to work (your sign-in session, your display preferences), which require no consent. The application’s audience measurement, described below, sets no cookie: anonymous for everyone and, once the application offers the detailed usage measurement (section 3), detailed only with your consent, which is saved with your account and not in your browser; the application then only notes, in local storage, that it reminded you of this choice on this device.

In Chrome and Edge, from your first gesture on the page (mouse, touch, wheel or keyboard), to offer you to continue with your Google account (see "Who receives your data"), the site asks the iyedy application whether your browser is already signed in there. This request reads the session cookie of app.iyedy.com and sets none. If your browser is signed in, the site offers nothing and its "Sign in" links open the application directly. If you close the offer, the site notes it in the tab’s session storage (erased when the tab closes) so as not to offer it again.

Audience measurement

To understand how this site is used, find navigation problems and improve its performance, we use Umami, an open-source tool we host ourselves, at umami.phroneez.com. It sets no cookie and collects neither your name nor your e-mail address.

Anonymous measurement, with your consent

Umami counts the pages viewed, the site you came from (its domain name only), a visit to the pricing, a few clicks on our buttons (sign-up, plans and trial, billing period, questions opened, film and demos, language) and how long pages take to load, with the device type, the browser and the operating system (without their version), the language and the rounded screen size. It then collects no campaign parameter and no advertising identifier: they are taken out of the page’s address as soon as it opens. Umami does not keep your IP address: it only uses it to estimate the country and city, then to compute a visitor identifier specific to this site that changes every month. These anonymous statistics are for our own use and are only read in aggregate: they are never combined with other data, never passed to third parties, and never linked to your use of the iyedy application. They are kept for 25 months at most. Beyond that, only anonymous monthly totals, with no visitor identifier, are kept. This measurement only takes place with your consent ("Anonymous audience measurement" in the "Your measurement choices" banner): before you choose, nothing is sent to Umami, not even the request for its script, and nothing is measured if you refuse. To object, turn on Do Not Track or Global Privacy Control in your browser, or use the button below: nothing is measured then, not even what you would have accepted.

What builds on it, with your consent

These measurements build on the anonymous measurement: accepting them accepts it too.

Campaign measurement. The campaign parameters of the address you arrive by (utm_source, utm_medium, utm_campaign, utm_content) go with the statistics of this page, to know which posts bring visitors and sign-ups; they are also copied onto the links to the iyedy application, in the link’s address only, with the version of your choice. Once the application offers the detailed usage measurement described below, if you sign up from that link, they are saved with your account as its sign-up campaign, to learn which publications bring active users (the detailed measurement uses it only if you accept that measurement in the application); you can erase it at any time in the application’s "Account settings…". They are read from the address when the page opens and kept for the life of the page only, never in your browser. Retention: 25 months at most with the statistics; with your account, 25 months at most after you sign up.
Visit replays and heatmaps. For some visits, Umami records what is shown and what you do on the page (pages, scrolling, movements, clicks), never the text you type, and where you click, to replay a visit and fix what gets in the way. Each replay and each click comes with the page’s full address, without the campaign parameters or advertising identifiers, already taken out. Retention: 3 months from recording, then deletion.
Advertising measurement. Not used: this site has no advertising pixel or tool. If this changes, this purpose will be offered to you and nothing will be measured without your consent.

Legal basis: your consent (article 82 of the French Data Protection Act, GDPR art. 6(1)(a)), asked for by the "Your measurement choices" banner on your first visit, purpose by purpose, "Refuse all" as simple as "Accept all". Without an answer or without consent, nothing is measured. You withdraw your consent at any time, as simply, with "Manage my choices" at the bottom of every page: the withdrawal applies at once, on the open page as on the next ones, and does not affect what was measured before.

In the application, without your consent: anonymous measurement

The application counts in the same way, without cookies, in a measurement site of its own: the pages viewed in a generic form (for example "a diagram", never its name or identifier), the use of its features as a label (for example "PNG export" or "proposal applied", never any content), the site you came from (its domain name only), the language, the device type, the browser and the operating system (without their version) and the rounded screen size, with no link to your account. Once the application offers the detailed usage measurement described below, it also counts, in the same anonymous way, how long pages take to load. With your yes to anonymous counts of your first steps (the question asked in the application, or your consent to audience measurement on iyedy.com, passed on by the sign-up link), it also counts, in the same way, how those first steps go: the way you started, the steps done, the rounded time to a first result, the guided tour and the tips, with a profile family drawn from the role you chose (for example "dev"), never a name or any content. Without that yes, nothing about these first steps is sent. The visit identifier is specific to the application and changes every month; your IP address is not kept. These statistics are only read in aggregate, are never combined with any other data, in particular your account’s, and are kept for 25 months at most. Legal basis: our legitimate interest in measuring and improving the service (GDPR art. 6(1)(f)); this measurement needs no consent (Article 82 of the French Data Protection Act). It never runs in organisations under an Enterprise contract.

Your right to object. You can object at any time, without giving a reason: do not count me in the application opens "Account settings…", where the box "Do not use my activity for product analytics" takes effect at once on the device where you tick it, and from the next page you open on your other devices. Do Not Track and Global Privacy Control in your browser also count as an objection. Once the application offers the detailed usage measurement, objecting also turns it off.

In the application, once offered and with your consent: detailed usage measurement

Once the application offers this detailed usage measurement, if you accept it, it also sends Umami, in a second, separate measurement site, the screens and features you use, with rounded counts (for example the number of changes proposed), the errors and rounded timings, linked to your account by a pseudonym our server computes with a secret key (never your e-mail address, your name or your account identifier), with your plan, your account type (personal or organisation), the interface language, the month and origin of your sign-up and, if you accepted campaign measurement on iyedy.com, your sign-up campaign. Never the content of your diagrams or your requests to the assistant. Why: to learn which features help our users, where they stop, and to improve the product. Only the publisher of iyedy can link this pseudonym to your account: it is personal data.

Legal basis: your consent (Article 82 of the French Data Protection Act, GDPR art. 6(1)(a)). Nothing is sent before you agree; with no answer or a refusal, only the anonymous measurement applies and the service stays the same. Your choice, once the application asks for it, applies to your account, on every device where you are signed in; it is saved with its date, its language and the version of the text that asked for it, which is its proof. It holds for 6 months, then we ask again, and sooner if what we measure changes. You withdraw it at any time, as simply, in "Account settings…": the withdrawal takes effect at once on the device where you make it, and within minutes on your other devices, and the detailed measurement data linked to your pseudonym is erased within 30 days; a new consent gives a new pseudonym. Retention: 25 months at most; the proof of your choices, while your account exists, then 5 years. This measurement is never offered to members of organisations under an Enterprise contract, nor to accounts managed by an organisation’s directory.

Technical logs

As on any website, every request goes through our reverse proxy (Nginx Proxy Manager, which we run on our server at OVH), which logs it for the security of the service and to diagnose failures: IP address, date and time, requested address, referring site and browser. This applies to this site and the application, and to the audience measurement requests sent to umami.phroneez.com. These logs are never used to measure the audience; they are kept for 6 months at most, then deleted.

The application also logs, for its security and diagnosis, the requests it receives with the user’s identifier, their organisation’s identifier and the IP address, never passwords, diagram content or requests sent to the assistant. These logs stay on our servers, with no third-party monitoring service, and are kept for 15 days. Legal basis: our legitimate interest in securing the service (GDPR art. 6(1)(f)).

Application data

Your account

Data: e-mail address, name, password (kept only as a hash by our identity service), the code that confirms your address, sign-in sessions; if you sign in with Google or your organisation’s directory, the identifier, address and name that service sends us; with Google, your Google profile photo, of which iyedy keeps a reduced copy, updated when you sign in with Google, to show it as your avatar in the application, to you and to the members of the spaces you work in. You can replace it with your initials at any time with "Use my initials instead" in "Account settings…"; it is erased with your account.
Why: to create and secure your account, sign you in and let you work with others. Legal basis: performance of the contract (GDPR art. 6(1)(b)).
Retention: while the account exists, then 30 days at most (the time to erase your sign-in account), then about 65 days in our encrypted backups.

Your sign-up campaign

Data: if you reach the application through a link from iyedy.com after accepting campaign measurement there, that link’s campaign parameters (utm_source, utm_medium, utm_campaign, utm_content) and the version of the choice that passed them on, saved with your account when it is created, never for an existing account, and only once the application offers the detailed usage measurement (section 3).
Why: to learn which publications bring active users. Legal basis: the consent you gave on iyedy.com (GDPR art. 6(1)(a)); they only join the detailed measurement if you also accept it in the application.
Retention: 25 months at most after sign-up. Once the application offers the detailed usage measurement, "Account settings…" shows the source, medium and campaign saved (utm_source, utm_medium, utm_campaign), when at least one of them is, with "Erase", which erases the whole sign-up campaign at once, utm_content and the version of the choice included; "Export my data" gives you a copy of all of it.

Your content

Data: your models, diagrams, views, documents, comments, decisions, imported files and their history, with the personal data you put in them.
Why: to provide the service. Legal basis: performance of the contract.
Retention: while the account exists; an item moved to the trash can be restored for 30 days, then it is permanently deleted. At the latest 30 days after the account is deleted, the encryption key specific to your account is destroyed in the live database; earlier backups, which still hold it, disappear at the latest about 65 days later, and your encrypted content is then unreadable everywhere. The account’s other data is erased from the live database when the account is deleted, except technical records that hold none of your content (audit trail, credit and assistant usage counts, memberships), kept until they are purged, and the data the law requires us to keep (identification and billing); it then disappears from our backups no later than about 65 days after it is erased.

The AI assistant

Data: your requests to the assistant and what it needs to answer them, namely the useful part of your content (most often an extract of the open diagram; for a change or a review, the recommended or avoided technologies and the reference patterns of your space, with their description; for research, extracts of the other diagrams, decisions and standards you may read, and the summaries of the landscape map; for the synthesis of a review, its comments, with their authors replaced by pseudonyms and e-mail addresses removed; if you ask it what is waiting for you, your "To do" list: titles, the diagrams concerned, excerpts of the comments that mention you, and the names of their authors and of the people waiting for your review or your changes), the context of the conversation, and the photo or PDF you attach, sent whole (a photo without its metadata, such as its location); the web search queries and page addresses the assistant uses to answer you, when it uses them; the conversation thread and the notes you pin; a record of your usage (date, credits, model tier), without the text of the requests.
Why: to answer your requests, count credits and prevent abuse. Legal basis: performance of the contract.
Retention: what is sent, with the search queries, is processed by our AI model provider, with no guarantee of processing inside the European Union, and deleted by it within 30 days, except content flagged by its safety checks, which it keeps under its own terms. iyedy does not keep the photo or PDF you attach: it is only used for the time of the request. The record of a longer request (a change, a review, research) is kept encrypted for 24 hours after it ends. The conversation thread is kept encrypted at iyedy for 30 days by default; an organisation can ask support for a shorter period, and you can erase it at any time. The usage record: while the account exists. iyedy trains no model on your data.

The landscape map

What it is: so that the assistant knows all of your diagrams and can answer questions that span them, iyedy groups the related elements of your diagrams and the assistant writes a short summary of each group. This is done in the background, after you save and every night, only for the groups that changed, once your diagrams hold at least 12 connected elements.
Data: for each group, the names of the diagrams concerned and, for their elements, the name, kind, technology, a short description and the links between them. It only uses diagrams that are not in the trash, not above the classification ceiling and not in a space where the assistant is off. This data goes to our AI model provider, on the same terms as your requests. A summary is shown only to people who may read every diagram it summarises.
When: the map is on by default in a personal account where AI is on; in an organisation, it stays off until an owner or a security admin turns it on. You turn it off at any time: the "File" menu, "AI settings and audit trail…", section "Advanced", switch "Landscape map" (in an organisation, section "Organisation", for its owners and security admins). The map and its summaries are then deleted at once, and nothing more is sent for it. Turning AI off stops it too.
Why: to let the assistant answer questions about all of your diagrams. Legal basis: performance of the contract.
Retention: what is sent follows our provider’s rule described above. The summaries are kept encrypted at iyedy while the map is on: each is replaced when its group changes and removed when its diagrams leave the map; all are deleted as soon as the map is turned off, or with your account.
Credits: the summaries use credits, within a monthly budget (section 7 of the terms).

Billing and payment

Data: name or company name, billing address, VAT number, plan, seats, invoices and payment history; your choices when ordering (personal or business purchase, request to start at once, acceptance of the data processing agreement). Your card details are processed by Stripe; iyedy never has access to them.
Why: to manage your subscription, take payment, invoice, apply VAT and your consumer rights. Legal basis: performance of the contract and our legal, accounting and tax obligations (GDPR art. 6(1)(c)).
Retention: invoices and accounting records 10 years (French Commercial Code, art. L123-22); for a contract of 120 € or more, the record of the contract 10 years (French Consumer Code, art. L213-1); other billing data 5 years from the end of the contract, in a restricted-access archive, as proof of the contract and of your choices when ordering.

Purchase intent

Data: when you follow a link to a paid plan or to the Pro trial, what the link carries (the plan, the billing period, the trial, the business purchase), when it was recorded (at your sign-up, at your sign-in or from your account already signed in) and its date, tied to your personal account by a pseudonymous identifier. One intent per account: the latest replaces the previous one.
Why: to show you the order summary of the plan you chose, without having to look for it again in the application. Legal basis: steps taken at your request before entering into a contract (GDPR art. 6(1)(b)).
Retention: the intent is no longer used after 30 days, nor once you have ordered your subscription: it is used for 30 days at most, kept while the account exists and erased with your account.

Audit log

Data: who did what and when in a space (action, object, date, IP address, browser), without the content of your diagrams.
Why: the security and traceability of spaces, proof of actions. For a personal account (Free and Pro plans), iyedy is the controller, on the basis of its legitimate interest (GDPR art. 6(1)(f)). In an organisation (Team and Enterprise), iyedy keeps this log on the organisation’s behalf, as a processor, under the data processing agreement.
Retention: by plan, 30 days (Free), 90 days (Pro), one year (Team, which the organisation can reduce to 30 days) or the period the organisation sets within the limit of its contract (Enterprise, up to 7 years). After a change of plan, the period of the new plan applies, including to events already recorded.

Security and abuse prevention

Data: IP address and e-mail domain at sign-up, signs of abnormal use.
Why: to stop serial sign-ups and abuse of welcome credits, and to protect the service. Legal basis: our legitimate interest (GDPR art. 6(1)(f)).
Retention: 48 hours for the per-network sign-up counter; the sign-up IP address stays 30 days in the sign-in logs of our identity service and, in the audit trail, for that trail’s retention (30 days on Free, 90 days on Pro).

Free trials

Data: for the Pro trial, pseudonymous keys of the account, the person and the card: the account’s identifier, the person’s and a fingerprint hashed with a secret key (HMAC) of the card fingerprint Stripe sends us, never the card number nor Stripe’s fingerprint itself; for the Team trial, the person and the verified business domain of their e-mail address. No e-mail address and no card number.
Why: to grant one Pro trial per account, per person and per card, and one Team trial per person and per domain, to prevent abuse of free trials. Legal basis: our legitimate interest (GDPR art. 6(1)(f)).
Retention: 3 years from the trial, including after the account is deleted, then automatic erasure.

Service e-mails

Data: your address and the content of service messages (confirmation code, invitations, order confirmation with the terms as a PDF, billing notices, renewal reminder, withdrawal receipt).
Why: running your account and our obligations to you. Legal basis: performance of the contract and our legal obligations. We send you marketing e-mail only with your prior consent, which you can withdraw at any time.
Retention: while the account exists.

Messages you send us

E-mails sent to contact@iyedy.com or support@iyedy.com are only used to answer you and follow up your request. Legal basis: our legitimate interest in answering you, or steps taken at your request before a contract.
Retention: 3 years from the last exchange, or until the limitation period ends if there is a dispute.

AI assistants you connect to iyedy (MCP)

You can connect a supported AI assistant to your iyedy account through the Model Context Protocol (MCP): today, Claude, Claude Code, ChatGPT, Codex, VS Code (GitHub Copilot), Zed, Cursor and Gemini CLI. The assistant then reads and checks your diagrams, and proposes changes to them, through requests it sends to iyedy under your account. This section covers that connection only; iyedy’s own assistant is described under "The AI assistant", in "Application data".

Data: for each request of the assistant, the tool it calls and its inputs (for example a diagram, a search text, or a proposed change to a diagram and its explanation), with the access token issued when you sign in and approve the connection, which identifies you and the assistant; the IP address and the software that sent the request. iyedy never receives your conversation with the assistant, its memory or your files: only what the assistant puts in its requests.
Why: to answer each request, that is, to check your access rights, read or check the diagrams concerned and, when you ask for it, store a proposed change that a person reviews in iyedy. The assistant never changes a diagram itself: a proposal is only applied to it if you, or a person who can edit that diagram, accept it in iyedy. Legal basis: performance of the contract (GDPR art. 6(1)(b)); for the audit log and the technical logs, our legitimate interest in securing the service (GDPR art. 6(1)(f)). In an organisation (Team and Enterprise), iyedy processes this data on the organisation’s behalf, as a processor, under the data processing agreement.
What the assistant receives: only what your iyedy account may read, namely your spaces and diagrams and what iyedy derives from them (findings, impacts, versions, proposals), with the personal data they hold, for example the name of a proposal’s author. Values that look like secrets are masked in the content of the diagrams it reads. Diagrams classified above the limit set for connected assistants ("Confidential" by default on a personal account, "Internal" in a Team or Enterprise organisation) are never listed, found or returned. These answers go to the assistant you connected, under your account with its publisher, whose own terms and privacy policy govern your use of it.
Retention: proposals are kept encrypted and deleted 30 days after they are made, whether open, accepted, rejected or withdrawn (a change accepted in iyedy then belongs to the diagram, like any other edit: see "Your content"). Each request leaves an entry in the audit log (date and time, account, tool, assistant, permissions granted, outcome, diagrams concerned, IP address and software that sent the request), without the content of your diagrams, kept for the period of your plan or organisation (see "Audit log"). Your approval (the assistant and the permissions granted) is kept by our identity service with your sign-in account, until the access is removed on iyedy’s side or that account is erased; the connection ends after 30 days without use at the latest, sooner depending on the assistant, and each access token is valid for 15 minutes. Your sign-ins to connect an assistant stay 30 days in the sign-in logs of our identity service, and the requests 15 days in the application’s logs and 6 months at most in the proxy’s (see "Technical logs"). Deleted data then leaves our encrypted backups as described in "Backups".
Sharing: we do not sell this data and never use it for advertising, and iyedy trains no AI model on it. Our host, OVH SAS (France), processes it on our behalf.
Your choices: you decide whether to connect an assistant. iyedy’s consent screen names the assistant and the permissions it asks for, and nothing is connected until you allow it. To stop the access, disconnect iyedy in the assistant. To remove the access on iyedy’s side as well, write to support@iyedy.com: once we have removed it, the access stops within 15 minutes at most. In an iyedy Team or Enterprise organisation, connected assistants stay off until an owner of the organisation asks us to turn them on, at the same address; on the Enterprise plan, only the assistants that owner names are then allowed. Your other rights, and how to exercise them, are described in "Your rights".

Who receives your data

The publisher of iyedy, who alone administers the service.
Hosting: OVH SAS (France), which hosts the site, the application and their data in a data centre in the European Union.
Sending e-mail: OVH SAS (France), which provides our mailbox.
Backups: OVH SAS (France), Object Storage, Paris region, which only receives backups encrypted before they are sent.
Payment: Stripe (Stripe Payments Europe, Limited, Ireland), for payment, invoicing and VAT calculation.
AI model provider: when you make a request to the assistant, for what it needs (part of your content, or the photo or PDF you attach) and the assistant’s web search queries; and, while the landscape map is on (the default in a personal account), for the elements of your diagrams it summarises in the background.
The applications you connect to iyedy yourself, for example your own AI assistant: they read what you allow them to read, under your account with their publisher and its terms.
If you choose to sign in with Google once that option is offered, Google knows that you sign in to iyedy, under its own privacy policy. In Chrome and Edge, the iyedy.com site (from your first gesture on the page) and our sign-in screens (as soon as they open) may offer you, in a window of your browser, to continue with the Google account already open in it. Our pages load no Google script. But to show that window, your browser sends Google your IP address and the fact that the iyedy.com or app.iyedy.com site (with iyedy’s Google client identifier) offers sign-in, at the same time as it queries your Google session: Google can relate these requests before you make any choice. If you choose to continue, the sign-in goes on as with the "Continue with Google" button; if you close the window, nothing more is exchanged.
The members of your organisation, according to the roles and shares decided by you or by it, and anyone who has a public link you create.
Authorities, when the law requires it.

We do not sell your data, pass it to no advertising network and use it for no targeted advertising. The list of our providers by name is sent to you on request at contact@iyedy.com.

Transfers outside the European Union

Your data is hosted in the European Union. Two categories of providers may process part of it outside the European Economic Area: our AI model provider, for what the assistant sends it (your requests and what they need, and the elements summarised for the landscape map), processed with no guarantee of location inside the European Union; and Stripe, whose group processes some payment data in the United States.

These transfers are covered by the standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914) or, where it applies, by an adequacy decision. For Stripe, the EU-US Data Privacy Framework, which Stripe, Inc. has joined, and the standard contractual clauses of its data processing agreement; for our AI model provider, the standard contractual clauses of its data processing agreement. You can obtain a copy by writing to contact@iyedy.com. You can turn AI off in your personal account, and an organisation in its spaces: no content is then sent to the AI model provider any more.

Backups

Deleted data stays in our encrypted backups for 30 days, and at most about 65 days with the storage lock, before it disappears from them. The content of a deleted account stays encrypted there and becomes unreadable when the last backup holding its encryption key expires.

Security

Encrypted connections (HTTPS) between your browser and the service.
Diagram content encrypted with a key specific to each customer account, destroyed in the live database at the latest 30 days after the account is deleted.
Separation of each customer’s data enforced by the database itself.
Passwords kept as hashes; sessions identified by tokens of which only a hash is stored.
Chained audit log: any change or deletion of an event after it was recorded can be detected.
Administration consoles not exposed to the internet, segmented internal network, test environment separate from production (distinct space, database, keys and secrets) and holding no real data.

The details are in annex 1 of the data processing agreement.

Mandatory data and automated decisions

The data marked as mandatory at sign-up (e-mail address, name, password or sign-in account) and when ordering (billing address, VAT number for a business purchase) is needed to conclude and perform the contract; billing data is also required by law. Without it, we cannot create your account or process your order. Other data is optional.

iyedy takes no decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you (GDPR art. 22). The automatic check of sign-ups may hold back the welcome credits; you can ask for a review by a person at support@iyedy.com.

Your rights

You have the rights of access, rectification, erasure, restriction and portability of your data, the right to object to processing based on our legitimate interest, the right to withdraw a consent at any time, and the right to give instructions on what happens to your data after your death.

In the application, from "Account settings…", "Export my data" gives you a copy of your data and "Delete my account…" deletes your account; you can also export each view of your diagrams, and view and erase your conversation threads with the assistant. If you cannot use these features, write to support@iyedy.com; for any other right, to contact@iyedy.com. We answer within one month, which may be extended by two months for a complex request, and may ask you to prove your identity when there is a reasonable doubt.

If your data is in the space of a customer organisation, contact that organisation; we pass on the requests we receive.

You can lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (cnil.fr), or with the supervisory authority of your country.

Changes

We may update this policy as the service evolves. The date of the version in force is at the top of the page; we tell you about any significant change by e-mail or in the application before it applies.

On 30 October 2026, the section "AI assistants you connect to iyedy (MCP)" was added. It details a processing this policy already announced, for the applications you connect yourself (see "Who receives your data").

Back to the home page