Privacy Policy – IAether

Last updated: 04/0 6/2025

1. Data Controller Identity

This website is operated by the agency IAether, managed by the sole proprietorship Dedale, registered in France under the auto-entrepreneur status.
Address: 765 chemin de l’Écluse, 31290 Renneville, France
Contact: contact@iaether.com

2. Data Collected

We collect and process the following data:

• Identity: First and last name

• Contact Information: Email address, phone number

• Browsing Data: IP address, cookies, pages visited

• Professional Information: Business activity, location, specialties, professional structure

• Audio and Transcription Data via voice agent

• Health Data (only for medical appointment scheduling)

• Data from External Enrichment (e.g., via public APIs or AI systems)

3. Purpose of Data Processing

Data is collected for the following purposes:

• Responding to inquiries via the website forms

• Managing appointments (booking, rescheduling, cancellation)

• Generating personalized emails using AI for B2B purposes

• Automating lead management and communications (email, SMS)

• Providing access to demos of IAether’s voice agents

• Analyzing site activity to improve user experience

• Transmitting appointment data to healthcare professionals without retaining it longer than necessary

4. Sensitive Data and HDS Hosting

When IAether acts on behalf of healthcare professionals, sensitive data (e.g., consultation reason) may be processed. This data is:

• Collected solely for secure transmission

• Hosted exclusively in France on HDS-certified servers (via OVH)

• Automatically deleted after processing unless retention is required

AI services (OpenAI, VAPI, etc.) do not receive any health data or identifiable voice recordings in this context.

5. Data Retention Periods

• Contact form submissions: 12 months

• Appointment-related data: 3 years

• Prospecting data: 3 years after last contact

• Cookies and navigation data: 13 months

• Health data: immediately deleted after transmission (unless retention is required by the healthcare professional)

6. Tools and Subprocessors Used

• n8n (workflow automation): self-hosted in Frankfurt via Render.com

• OpenAI (text generation): USA / Ireland – SCC signed

• VAPI (voice AI): USA – voice processing without storage – SCC requested

• Perplexity AI (search): anonymous prompt processing – USA

• Google Sheets (lead database): EU-hosted via Google Workspace

• CRM & automation tools: Make, Pipedrive, Twilio

• Sensitive data hosting: OVH HDS (France)

• Analytics & advertising: Google Analytics, Meta Pixel

All services used ensure a high level of data security. Any data processing outside the EU is governed by Standard Contractual Clauses (SCCs) in accordance with the GDPR.

7. Transfers Outside the European Union

Some non-sensitive data may be processed or hosted outside the EU (notably in the USA) by our technical providers (OpenAI, VAPI, etc.). These transfers are contractually governed by Standard Contractual Clauses (SCCs) to ensure a level of protection equivalent to EU requirements.
No health data is ever transferred outside the EU.

8. User Rights

In accordance with the GDPR, you have the following rights:

• Right to access, rectify, and delete your data

• Right to data portability

• Right to withdraw consent

• Right to object to data processing

• Right to lodge a complaint with the CNIL (French data protection authority)

You can exercise these rights at any time by contacting: contact@iaether.com
Requests are processed within 48 hours. A confirmation is sent by email or SMS.

This policy may be updated at any time to remain compliant with legal or technical changes.