Terms of use and privacy
NSI2 Consulting SAS · Ymmune SaaS · Version 2026-10-02
1. Provider and service
Ymmune is a SaaS service for professional network monitoring and management provided by NSI2 Consulting SAS, registered with the Grenoble trade register under number 951 870 401. Contact: contact@yggdra.cc. The cloud portal and local Ymmune Bridge software collect and display information from equipment you are authorised to administer. These terms govern service use; any prices, limits and purchased services are specified in the applicable offer or agreement.
2. Accounts, access and responsibilities
Provide accurate information, verify your email address and ensure you are authorised to act for the sites you add. Each person must use their own account. Site owners manage collaborators’ permissions and must remove unnecessary access. You are responsible for lawfully providing equipment data, configuring your networks and authorising operations. Unauthorised network access, service disruption and accessing another customer’s data are prohibited.
3. Passwords and sensitive information
Use a unique password of at least 14 characters, preferably generated and stored in a password manager. Do not reuse another service’s password or share your account. Never enter passwords, private keys, tokens or secrets in names, descriptions, comments, documents or other free-text fields. Supply only credentials explicitly requested in dedicated login or integration fields. Use technical accounts with the least necessary privileges, read-only where possible. Never email passwords to support. Promptly report suspected unauthorised access to contact@yggdra.cc.
4. Operation, availability and limitations
Ymmune is a management and monitoring tool, not a replacement for safety measures, human supervision or your backup procedures. Results depend on visible traffic, equipment, the Bridge and connectivity. An absence of alerts does not guarantee an absence of faults. Maintenance, incidents and changes may temporarily interrupt service. No contractual availability level applies without a separate written commitment. Trial features may change. Liability is governed by the applicable agreement and mandatory law; these terms do not exclude liability that cannot lawfully be limited.
5. Data and purposes
We process account details (name, username, email and password hash), permissions, sites, configurations, Bridge identities, network information (including IP, MAC, VLAN and topology), health and throughput measurements, ARP/PTP/SAP observations, RTP statistics, and records necessary for security and support. The audio/video content of analysed streams is not recorded by this measurement feature. These data are used to provide, secure and maintain the service, manage access and answer requests. Account and service processing relies on performance of the contract; security relies on our legitimate interest in protecting the service; legal obligations rely on applicable law. Acceptance of these terms is not consent to marketing.
6. Confidentiality and protection
Your site data remain under your control and are not sold. Access is limited to your authorised users, NSI2 Consulting staff when necessary for operations or support, and technical providers required to deliver the service, subject to confidentiality obligations. The service uses site access controls, encrypted connections and account password hashing. Absolute computer security cannot be guaranteed. If you provide other people’s personal data, you must have a lawful basis and inform them. Applicable data-processing obligations must be addressed contractually before processing that requires such an agreement. Session cookies support authentication and security.
7. Retention and deletion
Account data and site configuration are retained while the service is used. Measurement history is accessible for four hours by default, subject to the site setting and licence; recent ARP entries expire after five minutes. The account deletion button immediately disables account access and access to its owned sites, then schedules active data erasure seven days later. This includes sites you own, their data and Bridges, even when shared; sites owned by other customers are not deleted. Export what you need or contact us to arrange a transfer before confirming. Protected backups may remain for up to seven additional days and must not be returned to service without reapplying deletions. Records strictly required by law or a legal dispute may be retained separately for the required period. A technical reference without a name or contact details may remain to preserve the integrity of other customers’ records. Revoking a Bridge does not delete its local files: its administrator must remove credentials and data stored on that machine.
8. Your rights and contact
You may request access, correction, erasure, restriction and, where legally applicable, portability or objection by emailing contact@yggdra.cc. You may request earlier erasure by email without waiting for the automatic seven-day period. Proportionate identity verification may be necessary; do not send identity documents or secrets unsolicited. We normally respond within one month, subject to legally permitted and explained extensions. Legal obligations or others’ rights may limit erasure. You may complain to the French supervisory authority, CNIL (www.cnil.fr).
9. Ownership and changes
You retain rights to the data you provide. NSI2 Consulting retains rights to the service software, interfaces and content. Permission to use the service is limited to your subscription or authorised access and does not transfer ownership. Material changes to these terms are brought to your attention; renewed acceptance is requested where required. The accepted version, language and acceptance date are recorded.
10. Applicable law and jurisdiction
French law applies, subject to mandatory protections available to you. First contact contact@yggdra.cc to seek an amicable resolution. WHERE ALL PARTIES CONTRACT AS MERCHANTS, THE COMPETENT COURTS OF GRENOBLE ARE DESIGNATED FOR DISPUTES RELATING TO THE SERVICE. This provision applies only to the extent permitted by law, including Article 48 of the French Code of Civil Procedure. In other cases, statutory jurisdiction rules apply.
contact@yggdra.cc · CNIL — Right to erasure · Article 48 — Code de procédure civile
Optional website audience measurement
Controller: NSI2 Consulting, contact@yggdra.cc. With your consent, we measure only the YMMUNE website: pageviews, visits, activity after ten seconds, returning visits, simplified browser/device categories and approximate country/city. The IP address is processed transiently against our local geolocation database; it is neither stored in the audience tool nor sent to a geolocation provider. An encrypted random identifier cookie lasts at most 90 days; the server uses a pseudonym independent of your account. Your accept/reject choice is remembered for 180 days. Visits and statistics are retained for 90 days and accessible only to authorized administration. They are not sold, used for advertising or combined with accounts or site network data. Refusing does not restrict access to the service. Withdraw permission using the “Privacy · audience” button in the footer. Withdrawal stops collection and deletes pseudonymous visits; existing aggregate counters cannot identify you. During an outage, only the encrypted identifier needed to retry deletion is temporarily retained. Contact us to exercise access and erasure rights, or complain to the CNIL. Essential service security logs have a separate purpose described in this privacy information.