Privacy policy

Version dated 4 October 2026. Working document pending legal review.

Who is responsible for your data?

You signed up yourself (individual, marketplace trainer, organization administrator at sign-up): the controller is the publisher of Conversa (Pascal Santoni, entrepreneur individuel).
Your training organization has given you access: it is responsible for your data; Conversa processes it on its behalf, under a data processing agreement. Please contact the organization first; we forward any request we receive to it.

What data, and for what purpose?

Your account (name, email, phone number if requested, password stored as a hash, language): to identify you and to contact you about your account. Basis: performance of the contract.
Your sessions (recording of your voice during conversations with the AI tutor, transcript, assessment, progress): to let you practice, assess you, and track your progress. Basis: performance of the contract.
Video sessions: video and audio are transmitted live between participants and are not recorded; only your attendance (entry and exit times) is logged in order to count the session.
Payments: handled by our payment provider; we neither see nor store your card number. We keep invoices. Basis: performance of the contract and our accounting obligations.
Marketplace trainers: public profile (first name, initial of last name, photo, languages, introduction, rates, rating), SIRET and self-employment certificate in order to pay you, learner reviews. Basis: performance of the contract.
Security: technical logs and attempt counters, to protect accounts against abuse. Basis: our legitimate interest.

For how long?

Recordings of your voice: 90 days, then automatic deletion.
Transcripts, assessments, reports: for as long as your account exists.
Account: until it is deleted, at your request or that of your organization.
Invoices: ten years, as required by law.

With whom?

Your data is never sold. It is accessible to your organization if it has granted you access, to the trainer of your video sessions for what concerns them, and to our technical service providers, solely as needed for the service: hosting in France, payment, email delivery, speech transcription and synthesis, conversational and assessment artificial intelligence, video avatar, video session routing. Some process data outside the European Union, under the European Commission's standard contractual clauses or an adequacy decision. The list of providers by name is available on request.

Cookies

No advertising or audience-measurement cookies. Only technical cookies are used: your login session and your language choice. The result of the connection test is kept in your browser so that you do not have to repeat it.

Your rights

You may access your data, correct it, have it erased, object to its processing or request that it be restricted, and retrieve the data you have provided. Write to us: the form on the Help page of your account area. You may also lodge a complaint with the CNIL (cnil.fr).