Version of 9 November 2026 — applicable to the websites haisoft.fr, sg-autorepondeur.com and mailjump.fr
This document is a translation provided for information only. Only the French version is legally binding. To the French version.
The controller of the processing described here is HaiSoft SARL, with a share capital of €250,000, registered with the Orléans Trade and Companies Register (RCS) under no. 451 475 651, whose registered office is at 7 rue Vieille Levée, 45100 Orléans, France. HaiSoft operates the websites haisoft.fr, sg-autorepondeur.com and mailjump.fr; SG Autorépondeur and MailJump are trade names of HaiSoft SARL.
This policy explains how HaiSoft processes personal data on its own behalf: that of its customers and prospects, of the users of its customer areas, of the visitors to its websites and of the people who contact it.
It does not cover the data our customers entrust to us as part of our services: content of hosted websites, mailboxes, databases, contact lists of the e-mailing service (SG Autorépondeur and MailJump). For this data, our customer is the controller; HaiSoft acts as processor, under the terms of its Data Processing Agreement.
Did you receive an e-mail sent with SG Autorépondeur or MailJump? The sender of that message is responsible for your data. To unsubscribe, use the link included in every message; to exercise your other rights, contact the sender. If you believe you are receiving unsolicited messages, you can also report this to abuse@haisoft.net.
| Purpose | Data concerned | Legal basis |
|---|---|---|
| Creating and managing your account, providing the services ordered | Identity, contact details, company, login credentials, services subscribed | Performance of the contract |
| Invoicing, payment, accounting | Identity, billing address, VAT number, order and payment history (bank card data is processed by our payment providers, not by HaiSoft) | Performance of the contract; legal accounting and tax obligations |
| Registration and management of domain names | Identity and contact details of the domain holder and contacts | Performance of the contract; registry rules |
| Assistance and support | Exchanges with our teams, technical information you send us | Performance of the contract |
| Security of the services, prevention of fraud and abuse | Connection logs, IP addresses, activity traces, reports received | Legitimate interest (protecting our services and our customers); legal obligations of hosting providers |
| Handling of abuse reports and requests from the authorities | Identity and message of the person reporting, elements of the report | Legal obligation (LCEN); legitimate interest |
| Replying to contact and quote requests | Identity, contact details, content of the request | Pre-contractual measures taken at your request |
| Information about our offers (customers and prospects) | Identity, e-mail address, history of the relationship | Customers: legitimate interest, for similar services; individual prospects: consent; business prospects: legitimate interest |
| Handling of disputes and complaints | Data necessary to defend our rights | Legitimate interest; legal obligation |
You may object at any time to receiving our commercial information, using the unsubscribe link included in every message or by writing to us.
| Data | Retention period |
|---|---|
| Account and contract data | For the duration of the contractual relationship, then 5 years (civil and commercial limitation period) |
| Identification data of hosting customers | 5 years after the end of the contract (decree no. 2021-1362) |
| Accounting documents and invoices | 10 years from the close of the financial year (article L.123-22 of the French Commercial Code) |
| Connection logs and technical data | 1 year (decree no. 2021-1362) |
| Payment data kept by HaiSoft | 1 year (decree no. 2021-1362), excluding accounting documents |
| Free account with no login | May be deleted after 12 months of inactivity, following an e-mail warning at least 30 days beforehand |
| Data of a terminated account (excluding the obligations above) | Recoverable for 60 days, then deleted; backup copies are erased at the latest 12 months later |
| Prospects | 3 years from their last contact |
| Contact and support requests | 3 years from the last exchange |
| Abuse reports | Duration of the handling of the report, then 1 year |
| Session cookie | Duration of the browsing session |
Your data is processed by authorised HaiSoft staff, each for what concerns them. It may be disclosed:
HaiSoft neither sells nor rents your data, and does not pass it on to any partner for commercial purposes.
Our servers and backups are located in France. Some recipients may nevertheless process data outside the European Union:
Where a transfer takes place, it relies on a European Commission adequacy decision, on standard contractual clauses or on the necessity of performing the contract you have entered into with us.
HaiSoft implements appropriate measures: hosting in France in data centres with controlled access, limited and named access, strong authentication for administration, encrypted connections, passwords stored in hashed form, regular backups and an incident management procedure.
In the event of a data breach presenting a risk to your rights, we notify the CNIL and, where the law requires it, the individuals concerned.
You have the following rights over your data:
To exercise these rights, write to gdpr@haisoft.net or to HaiSoft SARL, 7 rue Vieille Levée, 45100 Orléans, France. We reply within one month, which may be extended by two months for complex requests. We may ask you to prove your identity where there is reasonable doubt.
If you believe your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr).
Our websites use only one session cookie, strictly necessary for them to work: among other things, it keeps you logged in to your customer area. It is deleted at the end of your browsing session and does not require your consent.
We do not use any audience measurement, advertising or social network cookies. Should this change, we would obtain your consent beforehand.
Our services are reserved for adults and legal entities. We do not knowingly collect data concerning minors.
We may update this policy to keep up with the law or our practices. The update date appears at the top of the page; in the event of a significant change, our customers are informed by e-mail.
