Privacy policy

1. Who is responsible

For account data (the people who sign up and use the app) and for our website, Allysen is the controller.

For the data your organisation processes through Allysen, such as your customers' messages, calls and records, your organisation is the controller and Allysen acts as its processor, following its instructions.

2. What we collect

Account data: name, work email, organisation, role, sign-in and security events. Billing data: plan, invoices and payment status (card details are handled by our payment provider, not stored by us). Service data: the conversations, call recordings, transcripts, tickets and customer records your organisation connects. Technical data: logs needed to run and secure the service.

3. How we use it

To provide the service and its AI agents, to secure accounts and detect abuse, to support you, to bill your plan, and to tell you about important changes. We do not sell personal data and we do not use your organisation's data to advertise.

4. AI processing

To answer your customers, the content of conversations is processed by AI models run by Allysen or by carefully selected providers acting on our instructions. These providers may not use your data to train their general models.

5. Legal bases

We rely on the performance of our contract with you, our legitimate interest in running and securing the service, compliance with legal obligations, and your consent where it is required.

6. Who we share it with

Only with service providers that help us run Allysen (hosting, AI models, telephony, email delivery, payments), bound by contract to protect the data, and with authorities when the law requires it. A list of our sub-processors is available on request.

7. Where data is hosted

Data is hosted in the European Union by default, or in your region on request. When a provider processes data outside the European Economic Area, we use appropriate safeguards such as the European Commission's standard contractual clauses.

8. How long we keep it

Account data is kept while your account is open. Service data is kept for the period your organisation sets or your plan allows, then deleted. When an account is closed, its data is deleted after a short period allowing you to export it, except where the law requires us to keep records longer.

9. Security

Each organisation's data is kept apart, data is encrypted in transit and at rest, sign-in supports multi-factor authentication and actions are recorded in an audit trail.

10. Your rights

You may ask to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent. If your data was entered by an organisation using Allysen, please contact that organisation first. You can also complain to your data protection authority.

11. Cookies

We only use cookies and local storage needed for the site and the app to work: keeping you signed in, and remembering your language and theme. We do not use advertising cookies.

12. Changes to this policy

We may update this policy. We will tell account owners about significant changes before they apply.

13. Contact

For privacy questions or to exercise your rights, write to privacy@allysen.ai. For anything else, write to support@allysen.ai.