See this page in French.
Privacy Policy
This page explains which personal data Cadence.CI (the “Site” and the “Services”) processes, why, for how long, and how to exercise your rights. It complements the Terms of Service, in particular their article 13, and the legal notice.
Who is responsible
Mélodium SAS, 2 rue Crucy, F-44000 Nantes, France, registered with the Nantes trade and companies register under number 952 331 072, is the data controller of the data described below.
Contact: contact 🌀 melodium.tech
Data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, name, language, country and time zone of your user account | Create and run your account, send you the codes to log in and the messages about your account | Performance of the agreement |
| Sessions: sign-in dates, addresses and software used | Keep your account safe, detect abuse, let you review and end your sessions | Legitimate interest in security |
| Account of a provider you log in with (GitHub, GitLab or Google): the provider’s identifier of your account, your login there, your email, and your name | Let you log in with that account | Performance of the agreement |
| Organization, members and roles, runs, logs, artifacts and caches, secrets and keys that you or your organization create in the Services | Provide the Services | Performance of the agreement |
| Billing information: billing name and address, VAT number, plan and invoices | Bill the Services, meet accounting and tax obligations | Performance of the agreement, legal obligation |
| Messages you send us (contact form, feedback) | Answer you | Legitimate interest, or pre-contractual measures |
| Pages visited on the Site | Measure the audience of the Site | Legitimate interest |
Logging in with GitHub, GitLab or Google
When you log in with one of these providers, we ask it for your account identifier, login, email and name, and we use your email to register you only if the provider states it is verified. The provider’s access token is used once to read these data, then dropped: it is not stored. We never publish anything on your behalf and never read your repositories.
Your account is recognized by the provider’s identifier, never by your email alone: an account of a provider is attached to your user only when you link it yourself, from your profile. You can unlink it at any time from your profile, unless it is your only way to log in. Unlinking ends the sessions opened with it.
The provider applies its own privacy policy to what it knows of you.
Data you entrust to the Services
What you run, store or send through the Services (programs, logs, artifacts, caches, secrets, cloud credentials) is your data. It may contain personal data. For it, you are the data controller and Mélodium acts as data processor, as set by article 13.3 of the Terms of Service.
Who receives your data
Only authorized Mélodium staff, bound by confidentiality, and, on request, the competent judicial and administrative authorities. Our subcontractors receive the data they need to host or operate the Services, act on our instructions and must protect them: for hosting, Clever Cloud SAS, Scaleway SAS and OVH SAS, all located in France (see the legal notice).
We do not sell your data and do not use it for advertising.
Where your data are
We do not transfer your personal data outside the European Union, nor to a country not recognized as ensuring an adequate level of protection.
How long we keep them
- Account and Services data: while your agreement lasts, then one (1) year at most from its termination, except what must be kept longer by law, such as invoices;
- Sessions and sign-in records: for as long as needed to keep your account safe, and no longer than the account;
- Messages you send us: the time needed to handle them.
Cookies and similar storage
The Site keeps in your browser what it needs to work: your session, your choice of organization and your preferences. These are necessary to provide the Site you ask for. The Site also uses an audience measurement tool that counts visits to pages.
Your rights
You have a right of access, rectification, erasure, restriction, portability and objection on legitimate grounds regarding the data about you. You can also give directives on what becomes of your data after your death.
To exercise them, write to contact 🌀 melodium.tech or to Mélodium SAS, 2 rue Crucy, F-44000 Nantes, France. We may ask you to prove your identity.
If you consider your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL), on www.cnil.fr .
Changes
We may update this policy, for instance when the Services change. The date below is that of the last update, and we tell account holders of changes that affect them.
Last update: 9 November 2026.