This translation is provided for convenience. The French version prevails.
Terms of use and sale
Last updated: 16 August 2026
1. Purpose and acceptance
These terms of use and sale (the “Terms”) govern access to and use of the Alydea site and the associated platform (the “Service”), together with the subscription of the paid plans relating to it. They are accepted when the account is created, and this acceptance is timestamped. Any use of the Service or subscription to a plan constitutes full and unreserved acceptance of the Terms, to the exclusion of any other document (in particular the Client's own general terms and conditions of purchase), unless otherwise agreed in writing.
2. Definitions
“Publisher”: the company identified in Article 3. “Client”: the professional (legal entity or sole trader) holding the account. “User”: any individual associated with the Client's account. “Client Data”: the data, documents and information imported into or entered in the Service by the Client or its Users, including data relating to the Client's own customers. “Generated Content”: the analyses, scores, reports, action plans, documents and other deliverables produced by the Service, including by means of artificial intelligence. “Subscription”: the access plan subscribed to (free or paid).
3. Publisher
The Service is published and operated by PAGES CONSULTING & INVESTING (trading under the “Alydea” brand), a société par actions simplifiée unipersonnelle (SASU — simplified joint-stock company with a sole shareholder) with a share capital of €1,000, registered with the Registre du commerce et des sociétés de Marseille (Marseille Trade and Companies Register) under number 951 364 975, whose registered office is located at 20 rue Augustin Fabre, 13006 Marseille, France. Intra-Community VAT number: FR14951364975. Publication director: Alexandre Pages. Contact: contact@alydea.com.
4. Hosting
The site is hosted by Website (alydea.com): Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States. Application (app.alydea.com): Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States. Processing and data (api.alydea.com): Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland — hosted in Europe (europe-west1).
5. Service reserved for professionals
The Service is intended exclusively for professionals (consultants, companies and organisations), acting for purposes falling within their professional activity. By creating an account, the Client represents that it acts in that capacity. The provisions of the French Consumer Code (Code de la consommation) specific to consumers do not apply to the contractual relationship, subject to any mandatory provisions applicable to certain professionals.
6. Account and access to the Service
Use of the Service requires creating an account and having equipment connected to the internet, the cost of which remains the Client's responsibility. Credentials are personal and confidential; the Client is responsible for keeping them secure and for actions carried out from its accounts, and undertakes to notify the Publisher without delay of any unauthorised use. The Client warrants the accuracy of the information provided on registration and its ongoing update.
7. Free “Découverte” (Discovery) plan
The Publisher offers a free discovery plan, whose functional scope is intentionally limited. This plan is provided “as is”, without any service-level commitment; its content may be modified, restricted or withdrawn at any time. It gives rise to no charge and creates no vested right to the continuation of any feature.
8. Nature of the Service — no advisory role
The Service is a tool to help prepare, structure and track cybersecurity compliance and audit processes (in particular ISO 27001, NIS 2, the ANSSI hygiene guide, DORA). The Generated Content assists the Client's own work: it does not constitute a certification audit, legal advice, professional advice, or a guarantee of compliance with any framework or regulation. Review, adaptation and validation of the Generated Content by a competent professional — the Client — remain necessary before any use or disclosure to a third party.
9. Artificial intelligence
Certain features of the Service rely on artificial intelligence models. The Client is informed that the Generated Content is produced in an automated manner and may contain errors, approximations or omissions, including where it appears plausible. The Publisher does not guarantee the accuracy, completeness or suitability of the Generated Content for any particular purpose. The Client undertakes to maintain human oversight over its use and remains solely responsible for the decisions taken and the documents disclosed on that basis. Client Data is not used to train general-purpose artificial intelligence models.
10. Rules of use
The Client undertakes to use the Service in accordance with applicable regulations and its intended purpose. The following are in particular prohibited: using the Service on behalf of unauthorised third parties or reselling it; bulk or automated extraction of content; any attempt at intrusion, circumvention of security measures or disruption of the Service; introducing malicious code; transmitting unlawful content; and importing special category data within the meaning of Article 9 of the GDPR that is not necessary for the purpose of the Service.
11. Availability, maintenance and evolution
The Publisher uses its best efforts to ensure the availability of the Service, without guaranteeing continuous, uninterrupted operation. Planned or corrective maintenance operations may temporarily suspend access. The Publisher may evolve the Service, its interfaces and its functional scope; substantial changes that significantly reduce the features of a current paid Subscription entitle the Client to terminate it without penalty.
12. Security and incidents
The Publisher implements technical and organisational measures consistent with the state of the art to protect the Service and Client Data (access control, encryption of communications, regular backups). The Client acknowledges, however, that no information system is infallible and that the Publisher is bound, in this respect, by a best-efforts obligation. In the event of a personal data breach within the meaning of the GDPR affecting Client Data, the Publisher will inform the Client without undue delay and cooperate with it in fulfilling its own obligations. The Client remains responsible for the security of its own equipment, its access credentials and any copies of data it exports from the Service.
13. Support
The Publisher provides email support at contact@alydea.com, handled on business days within a reasonable time. Unless otherwise agreed in a separate written agreement, support is not subject to any contractual commitment as to response or resolution time, and does not cover training or consulting or advisory services.
14. Suspension of the account
In the event of a serious breach of the Terms, a risk to the security of the Service or its users, fraudulent use, or non-payment, the Publisher may suspend access to the account, after formal notice has remained without effect, save in cases of justified urgency (in particular a security incident). Suspension does not preclude termination or the recovery of sums due.
15. Offers, prices and promotions
Prices for paid Subscriptions are shown exclusive of tax; applicable VAT is added at the time of payment. The prices in effect are those displayed on the day of subscription. Any promotional offer (in particular an “early bird” rate) is attached to the Subscription taken out and ceases permanently upon termination: a new subscription is made at the rate then in effect. The Publisher may change its prices; a price change is notified to the Client at least thirty (30) days before it takes effect and only applies from the next renewal, the Client remaining free to terminate before that date.
16. Subscription, payment and renewal
Subscription is carried out online; payment is processed by credit card via a secure payment provider (Stripe), to which the Publisher does not have access to full card data. The Subscription is entered into for the period chosen (monthly or annual) and automatically renews for identical periods, unless terminated before the renewal date. Billing occurs in advance at the start of each period.
17. Termination
The Client may terminate its Subscription at any time from its account or via the billing portal. Termination takes effect at the end of the current period, which remains due: paid access is maintained until that date, after which the account automatically switches to the free “Découverte” plan, with no loss of Client Data. Amounts paid for the period already begun are not refunded, save for any contrary statutory provision or discretionary commercial gesture. The Publisher may terminate the contract in the event of a breach by the Client not remedied within fifteen (15) days of formal notice.
18. Late payment
In the event of a failed payment that is not remedied, access to paid features may be suspended until the situation is regularised. In accordance with Articles L441-10 and D441-5 of the French Commercial Code, any sum unpaid at its due date automatically bears late-payment interest at the rate applied by the European Central Bank to its most recent refinancing operation plus ten (10) percentage points, together with a fixed recovery indemnity of forty (40) euros, without prejudice to further compensation on production of evidence.
19. Right of withdrawal
As the Service is reserved for professionals and subscribed to online (a contract concluded at a distance and not off-premises), the right of withdrawal provided for by the French Consumer Code does not apply. In the exceptional event that a mandatory right of withdrawal were to apply, a Client wishing immediate access to the Service expressly requests its performance before the end of the withdrawal period and acknowledges that, in the event of withdrawal, it will owe the price corresponding to the service already provided.
20. Personal data and processing
For account data (identity, connection, billing, usage), the Publisher acts as data controller, under the conditions described in the privacy policy available on the site. For Client Data — including personal data relating to the Client's own customers — the Publisher acts as a data processor within the meaning of Article 28 of the GDPR: it processes such data only to provide the Service and on the Client's instructions, implements appropriate technical and organisational measures, oversees its own sub-processors and assists the Client in complying with its own obligations. The Client, as data controller for that data, warrants that it holds a valid legal basis and the necessary authorisations to entrust it to the Service. Deletion of the account and associated data may be requested at contact@alydea.com.
21. Intellectual property
The platform, its structure, trademarks, text, visuals, document templates and software remain the exclusive property of the Publisher or its licensors; the Client benefits from a personal, non-exclusive and non-transferable right of use, limited to the term of its Subscription. Client Data remains the property of the Client. Generated Content may be freely used by the Client in the course of its professional activity, at its own responsibility; it may not be used to develop a competing service.
22. Confidentiality
Each party undertakes to preserve the confidentiality of the other party's non-public information of which it becomes aware in connection with the contract, during its term and for five (5) years thereafter. This obligation does not apply to information that has fallen into the public domain, or the disclosure of which is required by law or by a competent authority.
23. Reversibility and data export
The Client may, throughout the term of the contract, export its deliverables and Client Data using the Service's export functions (standard formats, in particular Word, Excel, ZIP). After termination of a paid Subscription, as the account retains free access, Client Data remains viewable and exportable. No portability fees apply to the return of data. If the account is deleted, data is deleted under the conditions described in the privacy policy.
24. Liability
The Publisher's liability may only be engaged in the event of a proven breach of its obligations and is limited to the direct and certain resulting loss, to the exclusion of any indirect damage (in particular loss of revenue, customers, data, operation or reputation, or loss resulting from decisions taken on the basis of the Generated Content). In any event, the Publisher's total cumulative liability is capped at the amount, exclusive of tax, actually paid by the Client over the twelve (12) months preceding the event giving rise to liability. Neither party is liable for a failure due to a case of force majeure within the meaning of Article 1218 of the French Civil Code.
25. Client warranties
The Client indemnifies the Publisher against any claim, action or judgment brought by a third party — in particular by the Client's own customers or by individuals concerned by Client Data — based on Client Data, on its import into the Service without sufficient right to do so, or on use of the Service or of the Generated Content contrary to the Terms or to applicable regulations. This indemnity covers reasonable defence costs, provided that the Publisher notifies the Client of the claim without delay and does not settle it without the Client's agreement.
26. Miscellaneous provisions
The Service's technical registers and logs are conclusive as between the parties, in particular for timestamping acceptance of the Terms and actions carried out on the account. If any provision of the Terms is held invalid, the others remain in force. Failure to rely on a breach does not amount to a waiver of it. The Client may not assign the contract without the Publisher's written consent. Each party waives reliance on Article 1195 of the French Civil Code (unforeseen circumstances — imprévision), each assuming the risk of an unforeseeable change of circumstances. Unless the Client objects in writing, the Publisher may cite its name and logo as a commercial reference.
27. Amendment of the Terms
The Publisher may amend the Terms, in particular to reflect developments in the Service or in regulations. Substantial changes are brought to the Client's attention at least thirty (30) days before they take effect; continued use of the Service after that date constitutes acceptance. A Client who refuses them may terminate its Subscription before they take effect.
28. Governing law and jurisdiction
The Terms are governed by French law. Failing amicable resolution within thirty (30) days of written notice, any dispute relating to their validity, interpretation or performance falls within the exclusive jurisdiction of the Tribunal des activités économiques de Marseille (the commercial court for Marseille), notwithstanding a plurality of defendants or third-party proceedings.