Privacy policy

1. Controller

For the data of account holders, the controller is Le Beau Digital, 119 rue Rouget de Lisle, 93160 Noisy-le-Grand, France — contact: hello@voicetocell.com.

For the content of interviews (the voices and statements of the people recorded, transcripts, answers written in workbooks), the controller is the workspace that records the interview. Le Beau Digital acts as its processor and only processes this data to provide the service.

2. Account holder data

• Identity and login: name, email address, password (hashed, when you set one), Google account identifier when you sign in with Google, login session.
• Workspace: workspace name, role, invitations sent and received.
• Billing: Stripe customer ID, subscription status, number of seats, token pack purchases. Card details, billing address and VAT number are handled by Stripe.
• Usage: AI token consumption per member; technical logs (IP address, time, user agent) for security and abuse prevention.

Legal bases: performance of the contract (providing the service), legitimate interest (security, fraud prevention), legal obligation (invoicing).

3. Interview data

• Audio: the browser cuts speech into short segments and sends them to our server. Each segment is sent to OpenAI’s speech-to-text API, then deleted as soon as it is transcribed, unless the workspace switches on “Keep segment audio”.
• Voice references: a few seconds of each voice are kept with the interview, so that the same person keeps the same speaker label from one segment to the next. They are deleted with the interview.
• Transcripts and answers: the transcript, the speaker labels, the answers placed in the cells, and the Excel workbooks uploaded by the workspace. To fill the cells, the text of each segment and the questions of the workbook are sent to OpenAI’s API.

The workspace decides what it records and must inform the people it interviews. To exercise your rights over an interview you took part in, first contact the organisation that recorded it; we will assist it if needed.

4. Retention periods

• Audio segments: deleted right after transcription, unless the workspace chooses to keep them.
• Interviews, transcripts and workbooks: as long as the workspace keeps them; members can delete them at any time from the application.
• Account and workspace: for as long as they are used, then erased within 30 days of a deletion request.
• Invoices and accounting records: 10 years (legal obligation).
• Technical logs: 12 months at most.
• Password reset links: 1 hour. Invitations: 7 days.

5. Recipients and processors

Data is accessible to the members of your workspace according to their role, and to the providers strictly needed to run the service:

• Hosting and email: IONOS SARL (7 place de la Gare, 57200 Sarreguemines, France) — an IONOS virtual private server located in Spain (European Union).
• Speech-to-text and answer mapping: OpenAI (OpenAI Ireland Ltd and OpenAI, L.L.C.). OpenAI does not use data sent through its API to train its models, and may keep it for up to 30 days to detect abuse.
• Payments: Stripe.
• Sign-in with Google: Google Ireland Ltd and Google LLC, only if you choose “Continue with Google”. We receive your name, your verified email address and your Google account identifier. We do not receive your Google password, and we do not keep Google access tokens.

We never sell or rent any data. OpenAI, and Google when you sign in with Google, may process data outside the European Union, notably in the United States. These transfers are covered by the European Commission’s standard contractual clauses and the EU–US Data Privacy Framework.

6. Security

• Encrypted connections (HTTPS); passwords hashed with a modern algorithm; limited login attempts.
• Data isolated per workspace; access rights checked by role.
• Audio deleted as soon as it is transcribed, by default.

7. Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, and to data portability. You can update your details from the application settings, or write to hello@voicetocell.com. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

8. Cookies

Cookies and local storage are described in the cookie policy. voicetocell uses no advertising or audience-tracking cookies.

9. Changes

This policy may change along with the service. In case of a substantial change, we will let you know by email or in the application before it takes effect.