Privacy Policy

The purpose of this Privacy Policy is to inform usersof the conditions under which Mendo collects and processes their personal data in connection with the use of its services.

It applies when users:

• access Mendo websites and applications (Mendo Web, Desktop, and Internal)

• participate in events, webinars, or surveys,

• contact support,

• apply for job offers

This policy does not apply to third-party sites or services accessible via external links, which have their own privacy policies.

Data controller:

This Privacy Policy and the data processing described herein are the responsibility of:

Mendo SAS - 5 Boulevard des Bouvets, 92000 Nanterre, France

https://www.mendo.cloud

privacy@mendo.cloud 

Purposes and collected data

The personal data collected by Mendo during the provision of services is necessary for the performance of contracts concluded with the client, to allow Mendo to pursue its legitimate interests, in compliance with the rights and freedoms of users. Some data may also be processed based on the user's consent, where required.

Account action and update

To enable the creation, activation, and update of the user account, Mendo collects identification data such as the professional email address and first name or pseudo. This data is essential for accessing the services and ensuring their proper functioning.

Statiscal analysis and service improvement:

Mendo processes data related to the usage of its applications, such as the number of completed lessons and the progress level, in order to improve its services and produce usage statistics. This processing is carried out for exclusively internal purposes, on aggregated data, and does not lead to any commercial prospecting.

Profile management and personalization:

To personalize the learning path and memorize learning preferences, Mendo may collect information on the selected learning options and elements necessary for the continuity of the user journey.

Support and training:

For assistance and sending educational content, Mendo may collect data such as the email address, first name, and, where applicable, the pseudonym. Indicators such as open or interaction rates may be measured to adapt the support provided.

Legal bases

The processing operations implemented by Mendo are based on the following legal bases:

• The performance of a contract or pre-contractual measures

• Mendo's legitimate interest, particularly for service improvement, security, and user assistance

• The user's consent, when required by regulation

• Compliance with legal obligations applicable to Mendo.

Data recipients

Personal data is accessible only to authorized persons, within the limits of their respective duties.

Internal recipients:

Mendo's technical, product, and support teams may access data strictly necessary for the performance of the services.
When services are provided in a professional context, certain data may also be accessible to the user's employer, to the extent necessary for license management and service usage.

Subprocessors:

Mendo may use third-party service providers, acting as subprocessors, for technical and operational needs.

 

 

Data transfers

Data processed by Mendo is hosted within the European Economic Area (EEA).
Should a transfer of data outside the EEA occur, it would be governed by the Standard Contractual Clauses (SCCs) 2021 adopted by the European Commission, and users would be informed beforehand.

Data retention

Data is retained for a limited period, proportionate to the purposes pursued.
Unless otherwise required by law, data is retained for the duration of the contractual relationship, and then for a maximum of one (1) year after the user's last connection or the end of the contract, before being deleted.

Cookies

When using Mendo services, cookies and similar technologies may be placed on the user's device. These cookies are used exclusively to ensure the proper functioning of the services, the security of access, the management of user sessions, and the technical measurement of service usage.
Mendo does not use cookies for advertising purposes or commercial profiling.

Strictly necessary cookies for service operation

These cookies are essential for the provision and secure operation of Mendo services.

They are used for:

• user authentication and secure access to the services

• the management and continuity of user sessions

• the proper functioning of the application infrastructure, including load balancing and session persistence

• the protection of the services against unauthorized access, abnormal behavior, or fraudulent use

• the technical identification of the user environment for security and integrity purposes.

Without these cookies, the services cannot function correctly, and certain features may be unavailable. As they are strictly necessary for the provision of the service, these cookies are exempt from consent under applicable regulations.

Technical usage measurement and customer relationship cookies

These cookies allow Mendo to carry out technical measurements of service usage and to manage interactions with users through customer relationship and support tools.

They are used exclusively to:

• measure aggregated usage and interaction indicators

• ensure the proper functioning of support and communication tools

• improve service quality, reliability, and user experience

• record technical preferences related to cookie management.

The data collected through these cookies is used only for statistical, organizational, and service improvement purposes. They do not enable advertising targeting, commercial profiling, or cross-site tracking.

Disabling strictly necessary cookies may result in degraded service functionality or prevent access to certain features.

Data Security

Mendo implements appropriate technical and organizational measures to protect personal data against any breach of their confidentiality, integrity, or availability, as well as against any unauthorized access.

These measures include:

• Encryption of data during transmission and storage

• Access control and authentication mechanisms adapted to usage

• Logging of access and operations for security purposes

• Backup and service continuity devices

• Protection measures aimed at preventing unauthorized access, alterations, and abusive use

• Regular audits and controls intended to verify the effectiveness of the measures implemented.

The data is hosted within the European Union on infrastructures offering appropriate security guarantees.

Data Subject Rights

In accordance with regulations, you have the following rights:

• Right of access: obtain confirmation that your data is being processed and receive a copy

• Right to rectification: have inaccurate data corrected

• Right to erasure (right to be forgotten): request the deletion of your data under the conditions provided by the GDPR

• Right to restriction of processing

• Right to object: when processing is based on legitimate interest

• Right to data portability: receive your data in a structured format

These rights can be exercised by contacting Mendo either:

• via the form available in our applications: Help & Support

• by email at: privacy@mendo.cloud

• or by post at: Mendo SAS - 5 Boulevard des Bouvets, 92000 Nanterre

Contact

Any question concerning this Policy and your rights can be addressed by email to: privacy@mendo.cloud  or by post at:

Mendo SAS - 5 Boulevard des Bouvets, 92000 Nanterre.

Policy update

Mendo reserves the right to modify this policy to reflect legal or technical developments. Substantial updates will be notified via our various communication channels.

Date of last update: February 10, 2026