Privacy Policy
Last updated: June 30, 2026
Lamacorn SASU places great importance on protecting your personal data. This Policy complies with the GDPR (EU Regulation 2016/679) and the French Data Protection Act.
1. Data Controller
Lamacorn SASU — SIRET: 932 290 265 00010
42 bis avenue de Moutille, 33360 Cénac, France
GDPR Contact: support@dojosales.com
2. Data Collected
Provided by the User
- Email (account + auth)
- First name (optional)
- Native language
- ICP information (Pro)
- Dynamic persona briefings (Pro)
Generated by Service use
- Audio recordings (via Vapi)
- Transcriptions
- Scores and feedback (via Anthropic Claude)
- Session history
Technical data
- IP address
- Browser, OS, device
- Session cookies
3. Processing Purposes
| Purpose | Legal basis |
|---|---|
| Account management | Contract (art. 6.1.b) |
| Service provision | Contract (art. 6.1.b) |
| Payments | Contract (art. 6.1.b) |
| Transactional emails | Contract (art. 6.1.b) |
| Re-activation emails | Legitimate interest (art. 6.1.f) |
| Service improvement | Legitimate interest (art. 6.1.f) |
| Legal obligations | Legal obligation (art. 6.1.c) |
| Fraud prevention | Legitimate interest (art. 6.1.f) |
4. Data Recipients
| Sous-traitant / Processor | Finalité / Purpose | Loc. | Garanties |
|---|---|---|---|
| Vapi | AI voice calls | US | SCC |
| OpenAI (GPT-4o-mini) | In-call AI conversation | US | SCC |
| Anthropic (Claude) | Post-call feedback | US | SCC |
| Supabase | Database + auth | DE (EU) | GDPR |
| Resend | Emails | US | SCC |
| Polar.sh | Payments | US | SCC |
| Stripe (via Polar) | Payment processing | US | SCC |
| Vercel | Hosting | US | SCC |
| Cloudflare | DNS + email | US | SCC |
We never sell your personal data to third parties.
5. Transfers outside the EU
Governed by Standard Contractual Clauses (SCC) approved by the European Commission.
6. Retention Period
| Data type | Duration |
|---|---|
| Account (email, profile) | Account duration + 3 years |
| Sessions | Account duration + 3 years |
| Audio | 30 days |
| Transcriptions | Account duration + 3 years |
| Invoices | 10 years |
| Cookies | Session |
| Logs (IP) | 12 months max |
7. Your GDPR Rights
- Access (art. 15)
- Rectification (art. 16)
- Erasure (art. 17)
- Restriction (art. 18)
- Portability (art. 20)
- Objection (art. 21)
- Withdraw consent (art. 7.3)
Contact: support@dojosales.com — Response within 30 days.
Complaint: CNIL — 3 Place de Fontenoy, 75334 PARIS — cnil.fr
8. Security
- HTTPS/TLS encryption
- At-rest encryption (Supabase)
- Passwordless auth (magic link)
- Least privilege principle
- Audit trail
- Daily backups
CNIL + users notified within 72h in case of breach.
9. Cookies
See our Cookie Policy.
10. Minors
Service reserved for adults (18+).
11. Policy Modification
30 days notice by email for substantial changes.
12. Contact
support@dojosales.com
In case of conflict between the French and English versions, the French version prevails.