Privacy policy
Last updated: 2 November 2026
Who we are
The data controller is SIGNAL18 CLOUD SAS, 10 Villa Saint-Michel, 75018 Paris, France (SIREN 848 213 997), which runs signal18.io, cloud18.io and the Cloud18 service. Contact for any question about your data: security@signal18.io.
What we collect, and why
| Data | When | Why | Legal basis |
|---|---|---|---|
| Name, email, phone, company | When you create a Cloud18 account (directly or with Google or Microsoft) | Your account, support, billing, legal obligations | Contract |
| Name, email and profile picture sent by Google or Microsoft | Only if you choose "Continue with Google / Microsoft" | Create or sign in to your Cloud18 account, without another password | Contract |
| Billing details, invoices, credits | When you buy Cloud18 services | Billing and accounting | Contract, legal obligation |
| Contact form content | When you write to us | Answer you | Legitimate interest |
| Messages sent to the website assistant | When you use the chat on the site | Answer your question | Legitimate interest |
| Technical logs: IP address, date, page, browser | Every visit | Security, preventing abuse and attacks | Legitimate interest |
| Configuration of the database clusters you register | When you register a Replication Manager instance with Cloud18 | Provide the service | Contract |
We do not sell your data, and we do not use it for advertising.
Cookies
The site uses only the cookies it needs to work:
s18-session: keeps you signed in (up to 60 days);SERVER: sends your requests to the same server;s18lang: remembers your language.
No advertising or audience-measurement cookie is used. The contact forms use Google reCAPTCHA to block spam, which sets Google cookies on those forms only.
Who processes your data for us
- Hosting: our servers in France (OVHcloud data centers). Accounts, the CRM, our Git server and our chat run on our own servers.
- Google (reCAPTCHA on the forms; sign-in with Google if you choose it), Microsoft (sign-in with Microsoft if you choose it).
- Brevo (sending our emails).
- Anthropic (the AI model that answers in the website assistant: the messages you type there are sent to it).
Some of these providers may process data outside the European Union, under the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
- Your account: as long as it is active, then deleted 3 years after your last activity (invoices excepted).
- Invoices: 10 years (French accounting law).
- Technical logs: 12 months.
Your rights
You can access, correct, delete or export your data, object to its use or ask us to limit it, by writing to security@signal18.io. We answer within one month. You can also lodge a complaint with the CNIL (www.cnil.fr).