Privacy policy
What we collect when you contact us, why, for how long, and how to exercise your rights.
Updated on
Controller
AlphaOscar, EURL with a share capital of 1 €, 6 rue d’Armaillé, 75017 Paris, France, SIREN 910 288 299, 910 288 299 R.C.S. Paris. VocalReception is a brand of AlphaOscar.
Contact for any question about your data: hello@vocalreception.com.
Data we collect
The contact form (get started, or waitlist for self-serve setup) collects:
- your name, email and company name;
- your phone number, if you give it;
- your industry, monthly call volume and the languages your callers speak;
- your message, if you write one;
- technical data: the site language and the form type.
Your IP address is used at the time of sending to limit abuse (3 submissions per minute at most). We do not keep it and it is not written to logs. Technical logs hold error codes and identifiers, never your name, email or phone number.
Purpose and legal basis
This data serves one purpose: answering your request (by email, or by phone if you left a number) and preparing the 1-hour workshop. For the waitlist, it is used to tell you when self-serve opens. You also receive a confirmation email.
The legal basis is taking steps at your request before entering into a contract (GDPR, Article 6(1)(b)). Protecting the form against abuse (IP rate limiting, Turnstile check) relies on our legitimate interest in securing the service (Article 6(1)(f)).
We do not use this data for marketing, we do not sell it and we do not use it to train an AI model.
Retention
We keep your request for 24 months after our last exchange, then delete it. If you become a customer, the data needed for the contract and invoicing is kept for the applicable legal period.
Processors
Your data is processed by AlphaOscar and by these providers, on our behalf and on our instructions:
- Cloudflare, Inc. (United States)
- Site hosting, running the form (Cloudflare Workers), bot protection on the form (Turnstile).
- AlphaOscar Mail, operated by AlphaOscar (France)
- Email sending relay: forwarding your request and sending the confirmation email, through Amazon SES.
- Amazon Web Services EMEA SARL (Luxembourg)
- Sending emails (Amazon SES), region eu-west-1 (Ireland, European Union).
- Groupe LWS SARL (France)
- Hosting the hello@vocalreception.com mailbox, where your request arrives.
- Microsoft Ireland Operations Limited (Ireland)
- Microsoft Clarity analytics, only if you accept it (see “Cookies and analytics”).
Cloudflare, Amazon and Microsoft are US groups. Where data may be processed outside the European Union, the transfer is covered by the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.
Cookies and analytics
The site sets no advertising cookies.
Analytics: only with your consent, we use Microsoft Clarity (Microsoft Ireland Operations Limited) to understand how pages are read (clicks, scrolling, anonymised session recordings) and improve the site. Clarity sets the _clck and _clsk cookies, kept for at most 13 months. Nothing loads before you click “Accept”. Declining is as easy as accepting, the site works the same, and you can change your mind at any time with the “Manage cookies” link at the bottom of every page. Your choice is kept in your browser for 6 months, then asked again. Microsoft advertising data stays off.
Cloudflare Turnstile, active on the contact form, may use a cookie or technical storage that is strictly necessary for security, with no advertising purpose. This kind of tracker needs no consent.
The site tools (simulators, checklist) may keep your answers in your browser’s local storage. They are never sent to us.
Your rights
At any time, you can:
- access your data and get a copy;
- have it corrected or deleted;
- restrict or object to its processing;
- receive it in a machine-readable format (portability).
Email hello@vocalreception.com from the address you used in the form. We reply within 1 month at most.
If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority (cnil.fr), which is competent because the controller is established in France. From Belgium, you can also contact the Data Protection Authority (dataprotectionauthority.be).
Calls handled for your business
Calls that VocalReception answers for your business are not covered by this policy. Your business is the controller; AlphaOscar acts as processor, under a data processing agreement (DPA) signed before go-live, with hosting in the European Union.
No audio recording is kept. Text transcripts of calls are kept for about one month to produce the monthly report of unanswered questions, then deleted.
Callers are told they are speaking to an AI, as required by Article 50 of the EU AI Act.