Courtesy translation: only the French version is legally binding. Read the French version

Privacy policy

Written to be read. If a sentence seems unclear to you, write to us: it means it is badly written.

Who processes your data

Victoria Gaillard Sàrl, Avenue des Alpes 90, 1820 Montreux, IDE CHE-103.457.224. We are the controller within the meaning of the Swiss FADP and, where it applies, the GDPR. For any question about your data, write to us at bonjour@emodio.ch.

What we collect, and why

• Your account: e-mail address, name, password (hashed, never readable by us). If you sign in with Google, we receive your e-mail address and your name from Google, nothing else. To sign you in and contact you. Legal basis: performance of the contract.
• What you produce: scripts, videos, uploaded media, conversations with the agent. To make what you ask for and deliver it to you. Legal basis: performance of the contract.
• Your billing: plan, credits, invoices. Legal basis: performance of the contract and our accounting obligations.
• Your API keys, if you have videos ordered by software: we keep only their beginning and a hash, never the key in clear, together with what they ordered and when. Legal basis: performance of the contract.
• Technical logs: who did what and when, in the product. To diagnose a failure and answer “who touched my account”. Legal basis: our legitimate interest in operating a reliable service.
• What you do in the product: a few actions, such as having viewed an offer, reached the limit of your quota or started an edit. To find out where the product gets stuck and fix it. Legal basis: our legitimate interest in improving the service. Nothing is sent to a third party.
• Your voice, if you clone it: the voice itself is held by our voice provider (ElevenLabs), and we keep a record of whom it belongs to and the proof of your consent (the sentence you spoke and its date). It is used only for your organisation, never for another customer. Legal basis: your consent, which you can withdraw at any time by deleting the voice or your account. We treat it with the care due to sensitive data, even though the law has not yet settled the question.

What we do not do: no sale of data, no profiling, no trackers in the app. Usage statistics are computed on our own database. The one exception is the home page: if we add audience-measurement or advertising tools there (Google Analytics, the Meta pixel, the LinkedIn Insight Tag), they only load after you agree in the banner, and you can withdraw your consent at any time (the details). For the Meta pixel, we are jointly responsible with Meta for the collection.

How long

These periods are the ones the code actually applies, every day; they are not copied by hand into this page.

• Sessions and reset links: 7 days after expiry.
• E-mails sent, archived: 90 days.
• Technical logs: 365 days.
• Completed production jobs: 30 days.
• Account with no activity at all: 2 years, and we warn you beforehand.
• What you do in the product (the actions): 365 days.
• Your cloned voice: for as long as you keep it. When it is deleted, it is also deleted at the provider; the proof of your consent is kept for 3 years so that we can show that you had consented, after which only its date remains.
• If you are on the waiting list without ever having been invited or contacted again: 2 years after you signed up, after which your entry is erased.
• If we contacted you to present Emodio (a demonstration video prepared for you): the unanswered demonstration is erased after 12 months, and your contact details after 2 years without any contact.
• Invoices: 10 years. Swiss accounting law (Art. 958f of the Swiss Code of Obligations) requires it, and it prevails over an erasure request; the GDPR itself provides for this exception. They are then kept without your name.
• Everything else (videos, media, conversations), for as long as your account exists. It is your work: we do not delete it behind your back.

Your rights

• Access and portability. A button on the Account page downloads everything we hold about you, in JSON. Immediately, without having to ask. The export also contains your themes, your cloned voices with the proof of your consent, the actions recorded in the product and, if there are any, the demonstrations prepared for you.
• Rectification. Your name, your address and your settings can be changed from within the product.
• Erasure. A button on the same page. Erasure is real: database AND files. It takes 7 days: the time needed to clean up storage properly, and to undo a click you regret. Anything belonging to an organisation of which other people are members remains: leaving does not mean destroying your associates’ work. Your cloned voice is erased at the provider; only the proof of your consent remains, for the period stated above. If you do not have an account (waiting list, prospecting), write to us: we erase manually, without delay.
• Objection. Optional e-mails can be switched off from the Account page. Those concerning the service (a failed payment, a render that cannot be completed) continue: switching them off would leave you stuck without knowing why.
• Complaint. To the FDPIC in Switzerland, or to the supervisory authority of your country in the European Union.

Our processors

To operate the service, these providers process part of the data. Those established in the United States receive it either because they are certified under the Data Privacy Framework (Swiss–US and EU–US), which Switzerland recognises as providing adequate protection, or, failing that, on the basis of the European Commission’s standard contractual clauses, with the adaptations recognised by the FDPIC. Neon, Vercel and Cloudflare keep your data in Europe, but they are American companies.

Cookies

Four, all necessary, none for advertising: the one for your session, the one that remembers which organisation you are viewing, the one for a takeover by support, and the one that remembers the language you chose. The first three are only set once you are signed in; the language one as soon as you choose a language or open a page in German, Italian or English. None of them requires your consent: the law only requires it for cookies that could be done without. The banner on the home page informs you, and only asks for your consent if measurement tools are added there: nothing loads without your yes. The details.

Security

Passwords are hashed. Every request is filtered by organisation, and this is verified by an automated test on every code change, not by review. The code written by the model runs in a disposable container, with no network and no access to our secrets. Backups are encrypted and their restoration is tested automatically.

Last updated: with every deployment, this page reflects what the code actually does. Questions: write to us at bonjour@emodio.ch.