Privacy Policy

Last updated: June 1, 2026

1. Data controller

Data collected via the Vanessa service (vanessacall.com) is processed by EDXAD LLC, a company registered in the United States.

2. Data collected

We collect only the data strictly necessary to operate the service:

Payment data: transmitted directly to our payment provider, certified PCI-DSS. We do not store any complete banking information on our servers.
IP address: temporarily recorded for security purposes, fraud detection and to comply with geographic restrictions.
Technical data: browser type, operating system, session duration, URL parameters.
Voice conversations: processed by our technical voice synthesis provider to deliver the service. Recordings are not stored on our servers but may be retained by this provider for quality and security purposes.

3. Purposes of processing

Enable the provision of the voice service and per-minute billing.
Secure the service (prevention of fraud, abuse, unauthorized access).
Measure the effectiveness of our communication actions.
Improve the service.

4. Sub-processors

To provide the service, we use third-party technical providers, in particular:

A PCI-DSS certified payment provider.
A hosting and content delivery provider.
A voice synthesis and AI conversation provider.
Where applicable, analytics and campaign measurement providers.

Each of these providers applies its own security and confidentiality safeguards.

5. Cookies and local storage

Our site uses strictly necessary local storage means:

Age confirmation: a local indicator to avoid asking for confirmation at every visit.
Call session: a temporary token identifying your paid session during the call.
Measurement: after payment validation, an indicator may be triggered to measure the effectiveness of our communication actions.

No third-party advertising tracking cookie is used on the home page.

6. Retention period

Payment data: retained by our payment provider according to its own terms.
IP addresses and technical logs: 12 months maximum.
Voice conversations: not stored on our servers; their retention duration by our technical providers is contractually framed.

7. Your rights

In accordance with GDPR, you have the following rights:

Right of access to your data.
Right of rectification.
Right to erasure.
Right to object to processing.
Right to portability.

To exercise these rights, write to us at the address indicated on the contact page.

8. Security

We implement the technical measures necessary to protect your data: HTTPS encryption across the entire site, token-based authentication, access isolation, certified partners.

9. Minors

The service is strictly reserved for adults. No data from minors is knowingly collected. If you notice that a minor has used the service, contact us immediately for removal.

10. Modifications

This policy may be modified. The date of the last update appears at the top of this page.

11. Contact

For any question relating to privacy, write to us at the address indicated on the contact page.