Privacy Policy

Last updated : 11/20/2025

This Privacy Policy was originally drafted in French. In the event of any discrepancy or conflict between the French version and this English translation, the French version shall prevail.


Vocca attaches great importance to the protection of your personal data and to respecting your privacy. This policy is intended to inform you of our practices regarding the collection, processing and sharing of the data you provide to us.

Preamble

We consider your personal data to be confidential information to which we give particular attention.

Personal data includes, in particular:

  • your name,

  • your telephone number,

  • your email address,

  • your IP address,

  • any other data communicated directly by you or generated by your browsing activity.

In accordance with legal and regulatory obligations, we collect, use, share and retain this information under enhanced security conditions and for limited periods that are proportionate to the purposes for which you provided it to us.

Table of Contents

  1. Data collection

  2. Nature of Data and Processing Purposes

  3. Disclosure of Personal Data to Third Parties

    • 3.1 Processors

    • 3.2 National Authorities

  4. Transfer of Personal Data Outside the European Union

  5. Data Retention Period

  6. Rights of Data Subjects

  7. IT Security

    • 7.1 General Principle

    • 7.2 Management of Security Breaches

  8. Changes to the Privacy Policy

  9. Contact

  10. Cookie Management

    • 10.1 What is a cookie?

    • 10.2 Why does Vocca use cookies?

    • 10.3 Information collected by cookies

    • 10.4 Preference settings

  1. Data Collection

You entrust us with the processing of your data, and we strive to be transparent about how we collect it.

We collect the data you provide when using our online services, in particular when you:

  • Browse and view our website;

  • Request a product demonstration;

  • Provide your information to contact us;

  • Provide your information to apply for a position at Vocca;

  • Use our Vocca management platform;

  • Use our Voicebot solution.

We never automatically collect your email address without a deliberate action on your part.

Certain information is mandatory, indicated by an asterisk when requesting a demonstration. Without it, we will not be able to process your request.

  1. Nature of Data and Processing Purposes

The data is used according to the purposes you yourself initiate, based on one of the following legal grounds:

  • Performance of services;

  • Consent;

  • Legitimate interests;

  • Legal, regulatory, judicial or administrative obligation.

Detailed Purposes

Purpose: Responding to a demonstration request

  • Data: Last name, First name, Professional email, Professional phone number, Company

  • Legal basis: Legitimate interest of the Data Controller (Vocca)

Purpose: Responding to a contact request

  • Data: Identity, professional phone number, professional email, company, subject of the request, history of requests

  • Legal basis: Legitimate interest of the Data Controller (Vocca)

Purpose: Responding to a job application

  • Data: Identity, contact details, social media links, desired salary, city, CV, career information

  • Legal basis: Legitimate interest of the Data Controller (Vocca)

Purpose: Managing B2B prospects and customers

  • Data: Identity, professional phone number, professional email, company, position

  • Legal basis: Legitimate interest of the Data Controller (Vocca)

Purpose: Quotes, billing, contracts

  • Data: Identity, professional contact details, company, position, SIREN/SIRET

  • Legal basis: Pre-contractual or contractual measures

Purpose: Operation of the Voicebot

  • Data: Last name, first name, phone number, email, date of birth, voice recording, transcription, date/time/location of appointment, name of practitioner, purpose of appointment

  • Legal basis: Determined by the client (Vocca = Processor)

  1. Disclosure of Personal Data to Third Parties

Your personal data collected through our services may be transmitted to third parties within the limits provided for by applicable regulations and in accordance with this policy.

3.1 Processors

Your personal data may be transmitted to external service providers who process it on our behalf, according to our instructions. The transmission of your data to our processors is supervised to ensure its security. These include third-party companies providing support services, technology providers, etc.

3.2 National Authorities

To comply with legal, regulatory, judicial or administrative obligations, or to respond to requests from administrative or judicial authorities, we may be required to disclose your data to such authorities whenever we are legally obliged to do so.

  1. Transfer of Personal Data Outside the European Union

By default, your data is hosted within the EU.

In certain cases, and after prior information to the client user, Vocca may use processors located outside the EEA to meet specific needs related to the service provided, which may result in transfers of personal data outside the EEA.

These transfers are governed by:

  • Adequacy decisions (Art. 45 GDPR)

  • Standard Contractual Clauses (Art. 46 GDPR)

  • Appropriate safeguards provided under Chapter V of the GDPR

  1. Data Retention Period

5.1 Clients


We retain data for the duration of our business relationship and for a maximum of 3 years after the last interaction with the client. Billing-related data is retained for 10 years in accordance with legal obligations. Beyond the retention period, your data will no longer be used to send marketing communications after a period of three years from your last interaction with us.

5.2 Prospects


We retain data for a maximum of three years after the last interaction with a prospect who has expressed interest in our products and/or services.

5.3 Utilisateurs finaux d’un Voicebot Vocca


The maximum retention period for personal data of users interacting with a Voicebot provided by Vocca is:

  • 6 months for audio recordings

  • 5 years for other data


These are maximum durations. The Client, as Data Controller, defines the appropriate retention period according to the processing purposes.

  1. Rights of Data Subjects

The use of your data is possible :

  • due to the performance and monitoring of our contractual relationship,

  • because you have expressly consented to it,

  • to meet our legitimate interests,

  • or to comply with a legal obligation.

You have the following rights at any time over your personal data:

  • right of access,

  • right to data portability,

  • right to rectification,

  • right to erasure,

  • right to restriction of processing.

You may exercise these rights under the conditions provided by law by sending an email to: dpo@vocca.ai

You may also:

  • object, for legitimate reasons, to your personal data being processed or stored in our customer files when processing is based on the legitimate interest of Vocca;

  • exercise your right to object to marketing activities without having to justify legitimate grounds.

If you have given your consent for us to use your data — for example to send newsletters — you may withdraw that consent at any time.

If, for any reason, you consider our response unsatisfactory, you may lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), the authority responsible for personal data protection in France, via: https://www.cnil.fr/fr/plaintes.

  1. IT Security

7.1 General Principle

We implement all appropriate technical and organizational measures to ensure the security, integrity and confidentiality of your personal data and to prevent any destruction, loss, alteration, disclosure, intrusion or unauthorized access to such data, whether accidental or unlawful.

7.2 Management of Security Breaches

We have implemented a procedure for preventing, managing and correcting security vulnerabilities, as well as for notifying personal data breaches, in accordance with legal and regulatory provisions.

This procedure enables us to:

  • effectively remedy vulnerabilities,

  • manage potential data breaches,

  • ensure notification in compliance with GDPR requirements.

We commit to:

  • notifying personal data breaches as soon as possible,

  • notifying such breaches no later than 72 hours after becoming aware of them to the competent supervisory authority, the CNIL, where the breach is likely to result in a risk to your rights and freedoms,

  • informing you as soon as possible where the breach is likely to result in a high risk to your rights and freedoms.

We will also communicate the measures taken to remedy the breach, including measures aimed at mitigating its consequences.

8. Changes to the Privacy Policy

We may modify this policy.

If such modifications result in a reduction of your rights, we will inform you directly through the contact methods you have provided.

9. Contact

For any questions, you can contact our customer service at: contact@vocca.ai

You may also write to dpo@vocca.ai, specifically for:

  • Filing a complaint regarding privacy and confidentiality

  • Questions relating to this privacy and confidentiality policy

10. Cookie Management

10.1 What is a cookie ?

A cookie is a file stored on your device (computer, mobile or tablet) when visiting a website or viewing an advertisement.

Its purpose is to:

  • collect information relating to your browsing,

  • provide services and offers tailored to your device,

  • propose content aligned with your interests.

When you visit our website for the first time:

  • cookies may be placed, subject to your cookie preferences;

  • we inform you of this placement through the banner that appears on the visited page.

Your choices are not final and can be modified at any time by adjusting your cookie settings.

10.2 Why does Vocca use cookies?

Cookies serve different purposes and store and/or read files to obtain information relating to your interaction with the site, including your browsing activity and behavior. In this context, subject to your consent and/or your device settings, Vocca collects and processes all or part of the information detailed below:

Functional cookies essential to navigation

These cookies make it possible to:

  • remember your cookie preferences,

  • remember customer account data,

  • ensure storage of the shopping cart, etc.

Marketing cookies

We may use partner companies to enable:

  • the display of advertisements,

  • targeted content based on your interests,

  • highlighting products you may like, displayed on other sites during your browsing (ad banners).

Analytics and audience measurement cookies

We may also include and collect information that allows us to:

  • conduct analyses,

  • measure website traffic and visits,

  • establish statistics,

  • perform verifications to optimize our services and/or improve customer knowledge.

Detailed list of cookies used

Cookie name: AWSALBTG

  • Category: Necessary

  • Purpose: AWS load balancing cookie enabling persistent sessions by directing a client to the same group of servers.

  • Retention period: 7 days

Cookie name: AWSALBTGCORS

  • Category: Necessary

  • Purpose: AWS load balancing cookie ensuring visitor page requests are routed to the same server within any browsing session.

  • Retention period: 7 days

Cookie name: tf_respondent_cc

  • Category: Necessary

  • Purpose: Cookie used to allow Typeform users to accept or refuse cookies in the form.

  • Retention period: 6 months

Cookie name: _cf_bm

  • Category: Necessary

  • Purpose: Cookie used by CloudFlare to detect and limit bot traffic.

  • Retention period: Session

Cookie name: attribution_user_id

  • Category: Statistical

  • Purpose: Cookie used by Typeform to conduct anonymous client analyses.

  • Retention period: 1 year

Cookie name: _ga

  • Category: Statistical

  • Purpose: Google Analytics cookie distinguishing unique users through a randomly generated identifier. Used to compute visitor, session and campaign data for analytics reports.

  • Retention period: 1 year and 1 month

Cookie name: _ga_MKNVXHKG

  • Category: Statistical

  • Purpose: Cookie used by Google Analytics to maintain session state.

  • Retention period: 1 year and 1 month

Cookie name: _ga_NYYBGLSXYD

  • Category: Statistical

  • Purpose: Cookie used by Google Analytics to maintain session state.

  • Retention period: 1 year and 1 month

Cookie name: _gcl_au

  • Category: Marketing

  • Purpose: Cookie used by Google Ads to measure ad campaign effectiveness.

  • Retention period: 3 months

Cookie name: intercom-device-id-ra7oz01b

  • Category: Necessary

  • Purpose: Cookie storing the user’s device ID for Intercom messaging.

  • Retention period: 9 months

Cookie name: intercom-id-ra7oz01b

  • Category: Necessary

  • Purpose: Anonymous visitor identification cookie received during visits.

  • Retention period: 9 months

Cookie name: intercom-session-ra7oz01b

  • Category: Necessary

  • Purpose: Cookie tracking user session data for Intercom messaging.

  • Retention period: 7 days

10.3 What information is collected by cookies?

Information on your browsing of our site, such as:

  • Statistics on viewing different pages of our site (e.g., categories of goods or services displayed, time spent on pages, etc.)

  • Complete URL paths to, through and from our site.

10.4 Preference settings

You have several options to define your cookie preferences.

You may configure cookies by:

  • Adjusting your browser settings (Internet Explorer, Chrome, Safari, Mozilla, etc.) to allow or block cookies;

  • Clicking the cookie policy on the cookie banner or within the cookie settings at the bottom of the page.