Privacy Policy

Who we are

Passeur is a real-time phone translation service published by David Marques, sole proprietor (entrepreneur individuel), who is the controller of your data. Full identity and contact details: see the legal notice. Contact: hello@passeur.app.

What we process

• Account — email address, name (optional), authentication credentials (hashed password), chosen language.
• Phone numbers — your verified numbers, the numbers you call, and numbers for which verification was attempted.
• Call content — live audio, transcripts (original and translated), recordings, summaries, your notes; for agent calls, the task and context you provide.
• Cloned voice (Business plan, only at your request) — your voice sample and the voice profile made from it.
• Usage and billing — call durations, minutes used, plan and subscription status. Card details are handled by Stripe; we never see them.
• Support — your messages to support.
• Technical — technical logs and website page views.

The people you call are affected too: their voice, what they say and their number are processed to translate the call.

Why, and on what legal basis

• Providing the service (account, translated calls, recordings, history, summaries, agent calls, support) — performance of the contract (GDPR art. 6(1)(b)).
• Billing and accounting — legal obligation (art. 6(1)(c)).
• Security, fraud and abuse prevention (number verification, logs, usage limits) and audience measurement — legitimate interests (art. 6(1)(f)).
• Data of the people you call — legitimate interest in placing the call you asked for. You must tell them the call is translated and recorded.
• Cloned voice — your explicit consent, which you withdraw by deleting the voice.

Our providers (sub-processors)

Translating a call live means sending its audio and text to specialised providers. Each receives what it needs for its function. We do not sell your data or use it for advertising.

The phone line’s spoken prompts are voiced by the telephony provider (Amazon Polly voices); they contain no personal data.

Transfers outside the European Union

Several providers are based in the United States (see the table). Vercel, SignalWire, ElevenLabs, Stripe, Resend and Cloudflare are certified under the EU–US Data Privacy Framework, which is covered by a European Commission adequacy decision. For Bland AI, the transfer relies on the European Commission’s Standard Contractual Clauses in its data processing agreement. For Deepgram: [TO VERIFY: Standard Contractual Clauses in its data processing agreement]. You can ask us for a copy of the safeguards that apply to a given provider.

Use by providers, and AI

Some providers may, under their own terms, use the data they process to improve their services — for example Deepgram’s model-improvement programme, which Passeur has not opted out of as of the date of this policy. Whether DeepL keeps translated text depends on the DeepL plan used [TO VERIFY: DeepL API Free or Pro]. We therefore do not claim that your calls are never used to train AI models. Passeur itself trains no model on your calls.

Recording and consent

A call is recorded only if you have enabled the recording consent setting in your dashboard; without it the call goes ahead with no audio recording, but it is still transcribed for translation and the summary. At the start of every call, Passeur tells the other person that the call is handled by an artificial intelligence, transcribed, and recorded when it is. You also remain responsible for following the laws that apply to you and to the person you are calling.

Cloned voice (Business plan)

You may record a short voice sample to create a synthetic copy of your voice, used only to speak your translations. The sample and voice profile are kept at ElevenLabs until you delete the voice in your dashboard; if ElevenLabs fails to delete it, you see an error and the voice stays active until a retry succeeds. You may only clone your own voice.

How long we keep data

• Call history (transcripts, summaries, notes, details) — deleted daily once past your plan’s window: 30 days (Free, Starter), 1 year (Pro); kept for the life of the account (Business).
• Recordings — kept by the telephony provider (SignalWire) or, for agent calls, by Bland AI. They are not deleted automatically today, including after the history entry is removed: email us to have them deleted.
• Cloned voice — until you delete it.
• Numbers for which verification was attempted — currently kept with no automatic deletion, to limit abuse.
• Account — until you ask us to delete it.
• Accounting records (invoices) — 10 years, as French commercial law requires.
• Providers also apply their own retention periods, set out in their terms.

Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to its processing, and to withdraw consent. There is no self-service account deletion yet: to delete your account and data, or exercise any other right, email hello@passeur.app from your account address. We reply within one month. You may also complain to the CNIL (cnil.fr) or your own supervisory authority.

Cookies and local storage

• Sign-in session cookies — strictly necessary.
• Preferences: your chosen language (passeur-language cookie) and theme (browser local storage).
• Audience measurement: the site loads the CapraLens script, which records page views. It sets no cookie and writes nothing to your browser (no localStorage, no fingerprinting), so no consent is asked for.
• No advertising cookies.

Changes

We will post any change on this page and update the date above. Material changes will be announced by email to account holders.