Privacy Policy

H.D.L, société par actions simplifiée unipersonnelle (SASU), 904 923 R.C.S., éditeur de Vitecall.

Pour toute question relative à vos données : dpo@vitecall.fr.

For data of website visitors, candidates, and application users (account, billing), we are the data controller.

For data of contacts imported or called by our clients, we act as a processor under Article 28 of the GDPR, solely on instructions from the client, who remains responsible for the legality of their database, informing individuals, and respecting their rights. The terms of this processing are set out in the "Data Processing Agreement" article of the TOSU.

Account creation and management, service provision (calls, lists, history, recordings, transcriptions): performance of contract (Art. 6.1.b GDPR).

Billing and accounting: legal obligation (Art. 6.1.c).

Security, fraud prevention, compliance with opt-out lists and call limits: legitimate interest (Art. 6.1.f).

Responding to demo requests, contact requests, and the site assistant: pre-contractual measures or legitimate interest.

Applications received via the Careers page: pre-contractual measures.

Cold call simulator: tool provision, security, and sending the debrief: legitimate interest (Art. 6.1.f). Sending Vitecall tips and news is based on your consent, collected via an unchecked box.

Service emails (welcome, security, billing): performance of contract. Commercial emails are sent to our clients and, for professionals, within the framework described in the "B2B Commercial Prospecting" section, with a simple way to opt-out of each mailing.

Website audience measurement: consent (Art. 82 of the Data Protection Act), collected via the cookie banner.

To introduce Vitecall, we contact professionals by email and telephone based on our legitimate interest (Art. 6.1.f GDPR), solely in connection with their professional activity. This prospecting is distinct from calls made by our clients.

We use identity, job title, company, professional contact details, public LinkedIn profile, relevant public professional information (career path, publications, company news), and exchange history. This data comes from company websites, public LinkedIn pages and profiles, the press, job offers, public client references, or professional data providers, including Apollo.io.

Authorized Vitecall personnel and our prospecting service providers access this according to their missions: lemlist (email sending), Attio (sales tracking), Google Workspace (messaging), and public professional information research tools. Safeguards regarding transfers outside the European Union are described in Section 8. Prospecting data is deleted three years after our last exchange with you.

Vous pouvez vous opposer gratuitement à tout moment en répondant « stop », en utilisant le moyen d'opposition indiqué dans nos emails ou en écrivant à dpo@vitecall.fr. Nous cessons alors la prospection et conservons uniquement les identifiants nécessaires (email et/ou téléphone) dans une liste d'opposition, exclusivement pour éviter de vous recontacter. Les droits décrits à la section 10 s'appliquent également.

Account: last name, first name, professional email, profile picture (e.g., from Google if you connect with Google), company, role, connection logs.

Usage: calls made, numbers dialed, duration, status, notes, audio recordings, transcriptions, and summaries when recording is active. Preparation sheets display notes, summaries, and tasks already present in the account, without external search.

Numbers: to obtain a number, documents required by the operator according to applicable regulations (company registration, proof of address, identity of the representative).

Billing: billing details and payment history. Card data is processed exclusively by Stripe and is never stored by Vitecall.

Applications: identity, contact details, CV, and message.

Cold call simulator: first name, company, website, job title, offer and target description, email, communication preferences, written transcript of the simulated call, and debrief. To limit abuse, we store a visitor ID (technical cookie) and a hashed fingerprint of your IP address: the IP address is never stored in plain text. Simulated call audio is processed by our speech synthesis and recognition provider.

Recording and transcription are enabled by default and can be disabled by each user in Configuration > Settings > Calls.

The client and their sales representatives must orally announce the recording to the interlocutor at the start of the conversation, allow them to object, and, if necessary, stop the recording. This obligation is restated in the TOS and Acceptable Use Policy.

Recordings, transcripts, and call logs are kept for the duration of the subscription, up to a limit of three years from the last contact, and deleted earlier upon client request. It is the responsibility of the client, as the data controller, to define a duration appropriate to their purpose.

Account: contract duration, then three years for evidentiary purposes and B2B prospecting.

Client contacts and history: contract duration, then deletion or restitution within three months following the end of the subscription.

Invoices and accounting documents: ten years (Article L.123-22 of the Commercial Code).

Operator file documents: duration of number assignment, then duration required by electronic communications regulations.

Unsuccessful applications: two years maximum, unless objected to.

Cold call simulator: transcript, debrief, email, and hashed IP fingerprint kept for a maximum of three years, or until your deletion request.

Technical connection logs: one year.

Cookie choices: six months.

Data is accessible only to authorized Vitecall personnel and, for team data, to members of that team according to their rights. Data is never sold.

Website and application hosting: Cloudflare, Inc. (USA).

Database, authentication, and storage: Supabase, Inc. and our application infrastructure provider.

Telephony, numbers, call recordings and transcription, live call listening and audio and video team rooms (transmitted in real time, without recording): Twilio Inc. (USA) and Twilio Ireland Ltd.

Payment: Stripe Payments Europe, Ltd. (Ireland).

Google Sign-in: Google Ireland Ltd.

Site assistant and automated text processing: model providers accessible via our application infrastructure provider.

Transactional emails: email delivery service managed by our application infrastructure provider.

Simulator virtual prospect voice: ElevenLabs, Inc. (USA).

Administrative or judicial authorities may receive data upon legal requisition.

Certain providers are based in the USA. Transfers are governed by the EU-US Data Privacy Framework where the provider is certified, or otherwise by the European Commission's Standard Contractual Clauses, supplemented by security measures (encryption in transit and at rest).

Encryption of exchanges (HTTPS), team-level data partitioning in the database, role-based access control, access to recordings only via authenticated sessions, backups. In the event of a data breach presenting a risk, we notify the CNIL within 72 hours and, if necessary, the affected individuals or the client acting as data controller.

You have the rights of access, rectification, erasure, restriction, objection, portability, and the right to define directives regarding the fate of your data after death. You may withdraw your consent at any time.

Écrivez à dpo@vitecall.fr. Nous répondons sous un mois, prolongeable de deux mois en cas de demande complexe. Une preuve d'identité peut être demandée en cas de doute raisonnable.

If you have been called by a Vitecall client, please first contact the company that reached out to you. We will forward any request received to the relevant client and can add your number to their do-not-call list.

You may also lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.

Vitecall does not make any decisions producing legal effects concerning you based solely on automated processing.

This policy may evolve. The update date is at the top of the page; clients are informed by email in the event of significant changes.