Privacy Policy

JLAIEL STUDIO AI, SASU, registered at 39 Rue de Bel Air, 45110 Saint-Martin-d'Abbat, France (contact@jlaielstudio.ai), acts in two distinct capacities.

As data controller, for its own customers' data: subscriber identity, account, billing, service usage. This policy describes that processing.

As data processor, within the meaning of Article 28 GDPR, for the data of people who call a customer's line: the controller of that processing is the customer — the professional who installs the agent — since the callers are their own prospects, clients or patients. We process such data only on their instructions, on their behalf, and never for our own purposes. The terms of that processing are set out in our Data Processing Annex.

In the course of providing the Service, we collect the following categories of data:

Your data is processed for the following purposes:

• Contract performance (Art. 6.1.b GDPR): provision of the AI voice answering service, account management, billing, phone number assignment
• Legitimate interest (Art. 6.1.f GDPR): service improvement, fraud prevention, anonymized usage statistics, customer support
• Consent (Art. 6.1.a GDPR): Google Contacts import, commercial communications (if applicable)
• Legal obligation (Art. 6.1.c GDPR): retention of invoices and accounting data for the legally required period

We implement robust technical and organizational measures to protect your data:

• ✓AES-256-GCM encryption of all sensitive fields in the database (names, phone numbers, emails, addresses, transcriptions, summaries)
• ✓HMAC-SHA256 hashing of phone numbers for anonymized lookup
• ✓TLS 1.2+ encryption for all communications in transit
• ✓Encryption keys stored separately from the database
• ✓Secure authentication with JWT tokens and HttpOnly cookies
• ✓Hosting on a dedicated server in France (OVH) with restricted SSH access

We rely on the following sub-processors:

Our database and mail server are SELF-HOSTED on our own OVH servers in France: no third-party vendor has access to them, and no database provider is a sub-processor of this service.

By default the active stack is entirely French: call content is transcribed, processed and synthesised by Mistral AI in France, on French OVH infrastructure — it does not leave the European Union. Where a customer enables a non-European model or stack, or in the event of a technical fallback, the corresponding transfers are governed by the Standard Contractual Clauses approved by the European Commission, pursuant to Article 46.2.c GDPR.

• •Account data (identity, email): duration of the subscription + 3 years after cancellation
• •Call data (transcriptions, summaries): 12 rolling months
• •Billing data: 10 years (legal accounting obligations)
• •Connection logs and IP addresses: 6 months
• •Imported contacts: duration of the subscription, deleted upon cancellation unless otherwise requested

Under the GDPR (Articles 15 to 22), you have the following rights:

• →Right of access: obtain a copy of all your personal data
• →Right of rectification: correct inaccurate or incomplete data
• →Right to erasure ('right to be forgotten'): request deletion of your data
• →Right to data portability: receive your data in a structured, machine-readable format
• →Right to object: object to the processing of your data on legitimate grounds
• →Right to restriction: request suspension of the processing of your data

The agent processes the conversation in real time: audio is streamed to the speech recognition and speech synthesis engine, which is French by default (Mistral AI). Call audio is not retained once the call ends.

Transcripts and summaries are generated server-side, encrypted (AES-256-GCM) and stored in our France-based database. Only the user who owns the agent can access them, from their dashboard. They are deleted automatically after 12 months by a daily purge.

For more information about cookie usage, please see our Cookie Policy.

JLAIEL STUDIO AI reserves the right to modify this policy at any time. In the event of a substantial change, Users will be informed by email or notification in the dashboard. The last update date is indicated at the top of this page.