Compliant with Regulation (EU) 2016/679 (GDPR), the French Data Protection Act as amended (Law No. 78-17 of 6 January 1978) and Regulation (EU) 2024/1689 on artificial intelligence (AI Act).
Last updated: mai 2026
allozia.ai is a service operated by Edouard PORCHERON, sole proprietor trading as Epsiio, registered with the Bernay Trade Register (SIREN 104 925 433), the data controller within the meaning of Regulation (EU) 2016/679 (GDPR).
| Data | Purpose | Legal basis |
|---|---|---|
| Last name, first name | Account identification, communication | Performance of the contract |
| Email address | Login, notifications, billing | Performance of the contract |
| Phone number(s) | Call transfers, SMS notifications | Performance of the contract |
| Company name, address, industry | Voice assistant configuration, response contextualization | Performance of the contract |
| Payment data (via Stripe) | Subscription billing | Performance of the contract |
| Data | Purpose | Legal basis |
|---|---|---|
| Caller's phone number | Identification, callback by the Professional | Legitimate interest of the Professional |
| Text transcript of the conversation | Request follow-up by the Professional | Legitimate interest of the Professional |
| Name, contact details shared during the call | Contact by the Professional | Legitimate interest of the Professional |
| AI-generated request summary | Notification to the Professional, follow-up | Legitimate interest of the Professional |
allozia.ai NEVER stores raw audio recordings of phone conversations. Voice processing works as follows:
In accordance with the European Artificial Intelligence Regulation (AI Act, Regulation (EU) 2024/1689), and in particular Article 50 on transparency obligations:
Three AI processes are performed during each call:
| Process | Provider | Data processed | Storage |
|---|---|---|---|
| Speech Recognition (STT) | Gladia (Paris, France) | Real-time audio stream | No storage — real-time processing only |
| Understanding and Response (LLM) | Mistral AI (Paris, France) | Text transcript of the conversation | No storage — real-time processing only |
| Speech Synthesis (TTS) | Cartesia (USA) | Text of the assistant's responses (no caller personal data) | No storage — real-time processing only |
After the call, an additional AI process extracts the summary, caller intent and contact details provided, from the text transcript only.
All personal data is stored in France:
| Provider | Role | Location | Guarantees |
|---|---|---|---|
| OVH | Server hosting | France | French company, data in France |
| Gladia | Speech recognition (STT) | France (Paris) | French company, Paris servers, no audio storage |
| Mistral AI | Language model (LLM) | France (Paris) | French company, Paris servers, no data retention via API |
| Cartesia | Speech synthesis (TTS) | USA | DPA + SCCs — text processing only, no caller personal data |
| Twilio | Telephony + SMS | EU (Ireland) | DPA + SCCs, EU data residency (Ireland), ISO 27001 certified |
| Stripe | Payment | EU | DPA + SCCs, PCI DSS certified, GDPR compliant |
| Resend | Email delivery | USA | DPA + SCCs — notifications only (call summary) |
Some sub-processors are established outside the European Union. For each transfer, appropriate safeguards are implemented in accordance with Articles 44 to 49 of the GDPR:
Call data is subject to three independent retention periods, configurable by the Professional:
| Data type | Default duration | Configurable range |
|---|---|---|
| Full transcripts | 6 months | 1 to 6 months |
| AI summaries | 12 months | 1 to 12 months |
| Caller contact details (name, email, number) | 36 months after last contact | 12 to 36 months |
Upon expiration, transcripts are deleted, summaries erased, and contact details anonymized (phone number truncated). An automatic purge runs daily.
Under the GDPR (Articles 15 to 22), you have the following rights:
To exercise your rights, contact us at: hello@allozia.ai. We will respond within a maximum of 30 days.
You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.
allozia.ai provides Professionals with self-service tools in their dashboard to manage data independently:
allozia.ai only uses cookies strictly necessary for the service to function (authentication session). No advertising, tracking or analytics cookies are used. No cookie consent is required (CNIL exemption for technical cookies).
We reserve the right to modify this privacy policy. In the event of a substantial modification, Professionals will be notified by email. The date of last update is indicated at the top of this page.
For any questions regarding the protection of your personal data or to exercise your rights, contact us at: hello@allozia.ai