Legal information
Privacy policy
Last updated: 2026-11-05
This policy explains what personal data Guimauve Digital SAS processes when you use Allomi, why, who we share it with, how long we keep it and how to exercise your rights (GDPR).
Controller
Guimauve Digital SAS, 60 rue François Ier, 75008 Paris, France. Data protection contact: [email protected].
Data and purposes
| Data | Purpose | Legal basis |
|---|---|---|
| Mobile number, email, name, language | Create and secure the account, reach you | Performance of the contract |
| Assistant settings, contacts, notes, commitments | Run the assistant's memory | Performance of the contract |
| Calls: numbers, duration, transcripts, summaries | Provide the Service, report to you, bill minutes | Performance of the contract |
| Audio recordings (only if you turn them on) | Let you replay a call | Consent and the user's legitimate interest, see AI and recording |
| Payment data (handled by Stripe) | Subscription and invoicing | Performance of the contract, legal obligation |
| Technical logs (no call content) | Security, abuse prevention, rate limits | Legitimate interest |
What the people the assistant calls say is personal data about them: as a user, you are responsible for only calling people you are entitled to call.
Processors
| Processor | Purpose | Data location |
|---|---|---|
| OpenAI | Real-time voice (voice model) | À COMPLÉTER |
| Twilio | Telephony, numbers, verification SMS | À COMPLÉTER |
| Stripe | Payments and invoicing | À COMPLÉTER |
| Resend | Email (sign-in links, receipts) | À COMPLÉTER |
| Anthropic (via TeamCode) | Assistant reasoning (Claude model via TeamCode) | À COMPLÉTER |
Each is bound by a processing agreement. Some may process data outside the European Union; in that case appropriate safeguards (standard contractual clauses) apply. API keys are stored hashed, connector secrets are encrypted (AES-256-GCM), and prompts, transcripts, keys and audio are not written to logs. No data is sold or used for advertising.
Retention
- Call transcripts: deleted after 90 days by default; summaries stay attached to the contact.
- Audio recordings: deleted with the transcript, or earlier if you delete them.
- Contacts, notes and commitments: until you delete them or close your account.
- Closed account: data deleted within 30 days, unless the law requires keeping it (invoices: 10 years).
Your rights
You can request access, rectification, erasure, restriction, objection and portability of your data, and withdraw your consent at any time, by writing to [email protected]. We answer within one month. You can also lodge a complaint with the CNIL (cnil.fr) or your local supervisory authority.
Cookies
The site only uses the session cookie needed to keep you signed in. No advertising tracker, no third-party analytics.
Security
Encryption in transit, secrets encrypted at rest, restricted access. To report a vulnerability: [email protected].