Privacy policy
Last updated: October 16, 2026
This policy explains how SAS Meduza Studio, publisher of Clozup, uses the personal data of Site visitors and people who contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. It also explains our role for data processed in the Clozup application.
1. Data controller
For the Site and our business relationship: SAS Meduza Studio, 126 boulevard Saint-Marceaux, 51100 Reims. Contact: contact@meduza-studio.com.
2. Data collected on the Site
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering a demo or contact request | Name, work email, company, team size, message | Pre-contractual measures (art. 6.1.b) | 3 years after last contact |
| Remembering your preferences on the Site | Language, theme, tracker choices | Strictly necessary trackers | See the cookie policy |
| Measuring traffic on the clozup.cloud marketing website and improving how it presents Clozup (Umami). Does not apply to the application. | Anonymous statistics: pages viewed, referring site, device and browser type, country. No cookies, IP address not stored. | Legitimate interest (art. 6.1.f), with a right to object via "Manage cookies" | Retention period of the Umami Cloud plan, anonymous statistics only |
3. Data processed in the Clozup application
When you use Clozup, you store data in it: your users, your clients and their contacts, the recipients of your proposals, and information about how your proposals are viewed (sign-ins, pages and documents viewed, time spent). For this data, your company is the data controller and SAS Meduza Studio acts as a processor within the meaning of article 28 of the GDPR, only to provide the service. The terms of this processing are set out in the terms of use.
Did you receive a proposal sent with Clozup? For any question about your data, first contact the company that sent you the proposal. You can also write to us: we'll pass your request on.
4. Recipients of the data
Your data is accessible only to authorized SAS Meduza Studio staff and our processors, within the limits of their tasks:
- hosting and server administration: Meduza Agency (MEDUZA SARL, Reims), in OVHcloud and Scaleway data centers located in France;
- transactional emails (access codes, invitations): Resend;
- audience measurement of the marketing website only: Umami Software, Inc. (Umami Cloud).
It is never sold or rented.
5. Transfers outside the European Union
Application and Site data is hosted in France, with no replication outside France. Application data is never transferred outside the European Union.
One exception, which concerns the marketing website only: traffic statistics are processed by Umami Software, Inc., a US company, and may be processed in the United States. These statistics are anonymous and cannot identify you. If you refuse audience measurement, nothing is sent to Umami.
6. Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent at any time. To exercise them: contact@meduza-studio.com. We reply within one month.
You may also contact the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
7. Security
Together with our host, we apply appropriate measures to protect your data:
- encrypted connections (HTTPS and TLS on every service);
- proposal access limited to invited recipients and checked with a single-use code;
- role-based permissions and data separation between client workspaces;
- server administration only through a private network, with named accounts and personal keys;
- critical security patches applied within 72 hours;
- automated daily backups, kept for 5 business days.
8. Changes
This policy may change. The update date appears at the top of the page. In the event of translation, the French version prevails.