Last updated: May 7, 2026

1. Preamble and Scope of Application

This Privacy Policy applies to all processing of personal data carried out by Numericia, a variable capital SAS (up to €100,000), R.C.S. Chalon-sur-Saône 999 422 124, whose registered office is located at 1295 Z.I. Les Marosses, 71500 Branges, France.

It covers all services and solutions offered by Numericia, including but not limited to:

• The website numericia.fr
• The SaaS platform ALLO by Numericia (AI voice agents VoIP)
• Commercial management systems (SPARC)
• Specific developments, platforms, tools, and databases
• Any other service provided by Numericia in the course of its activity

Numericia undertakes to process personal data in accordance with the General Data Protection Regulation (GDPR — Regulation EU 2016/679) and the amended French Data Protection Act.

2. Identity of the Data Controller

The data controller is: Numericia, represented by Mr. D. Renaud, President. Contact: contact@numericia.fr

3. Data Collected and Purposes

3.1. Data Collected via the Website and Contact Forms

• Identification data : last name, first name, email address, phone number, company, job title.
• Purpose : management of contact requests, B2B commercial prospecting, sending information about services.
• Legal basis : Numericia’s legitimate interest in promoting its services to professionals.

3.2. Data Collected in the Context of Services (B2B Clients)

• Account data : identifiers, contact details of authorized users.
• Usage data : connection logs, solution usage history.
• Purpose : contract performance, client relationship management, technical support, invoicing.
• Legal basis : contractual performance.

3.3. Data Processed by the ALLO by Numericia Platform (AI Voice Agents)

This section is specific to the ALLO service and is of particular importance given the nature of the data processed.

Specific ALLO commitments:

• Audio recordings and transcriptions are stored on servers located within the European Union.
• Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• AI voice agents process calls in real time without retaining voice data beyond the duration necessary for transcription and service performance.
• The Client is responsible for informing contacted persons (mention of recording, purpose), in accordance with applicable regulations for B2B prospecting. Numericia provides templates for such mentions and recommends their systematic inclusion in agent prompts.

4. Data Recipients

Personal data is accessible only to the following recipients:

• Authorized personnel of Numericia (within the limits of their duties)
• Numericia’s technical subcontractors (hosting provider, infrastructure and AI suppliers)
• Clients, for their own data and data generated by their services

Numericia does not sell, rent, or transfer any personal data to third parties for commercial purposes.

5. Subcontractors and Transfers Outside the EU

5.1. Main Subcontractors

Provider Scalability: Numericia reserves the right to evolve its technical providers based on market advancements (Gemini, Voxiral, ElevenLabs, self-hosted solutions, etc.). Clients are informed of any significant changes affecting the processing of their data. Numericia systematically prioritizes solutions hosted within the European Union and, ultimately, 100% local self-hosted solutions.

5.2. Transfers Outside the European Union

In the event that a data transfer outside the EU is necessary (e.g., API from a U.S. provider), Numericia ensures that appropriate safeguards are in place:

• Standard Contractual Clauses of the European Commission
• Data Privacy Framework (for certified companies)
• Any other safeguard compliant with the GDPR

6. Retention Periods

Upon expiry of the retention periods, data is irreversibly deleted or anonymized.

7. Data Security

Numericia implements appropriate technical and organizational measures to ensure the security and confidentiality of data:

• Encryption of communications (TLS 1.3)
• Encryption of data at rest (AES-256)
• Strong authentication and access management
• Monitoring and logging of access
• Regular infrastructure updates
• Staff awareness training on data protection

In the event of a personal data breach, Numericia undertakes to notify the CNIL within 72 hours and to inform affected Clients as soon as possible.

8. Rights of Data Subjects

In accordance with the GDPR, any natural person whose data is processed by Numericia has the following rights:

• Right of access : to obtain confirmation that data is being processed and to obtain a copy thereof
• Right to rectification : to have inaccurate or incomplete data corrected
• Right to erasure : to request the deletion of data under the conditions provided by law
• Right to restriction : to temporarily restrict processing
• Right to data portability : to receive their data in a structured, readable format
• Right to object : to object to processing on legitimate grounds

To exercise these rights, contact us at: contact@numericia.fr

A response will be provided within a maximum of one month. In the event of no response or an unsatisfactory response, you have the right to lodge a complaint with the CNIL (www.cnil.fr).

9. Cookies and Trackers

The Numericia website uses cookies strictly necessary for its operation. A consent banner is presented upon the first visit for cookies subject to consent (analytics, marketing). Consent may be withdrawn at any time via the cookie management panel accessible from the website.

The ALLO platform does not use cookies for the purpose of tracking end users.

10. Changes to the Privacy Policy

Numericia reserves the right to modify this policy at any time to adapt to legal, regulatory, or technical developments. The applicable version is the one accessible online on the website. Clients are informed of any material changes by email.

11. Contact and Data Protection Officer

For any questions regarding the protection of personal data or to exercise your rights:

• Email : contact@numericia.fr
• Postal address : Numericia — 1295 Z.I. Les Marosses, 71500 Branges, France