Privacy Policy

Protecting your personal data is a priority for MAIA SOLUTION. This policy explains how we collect, use, retain and protect your information, in accordance with the GDPR. Data controller: MAIA SOLUTION SAS, 15 rue Sainte Pétronille, 67120 Avolsheim (France), reachable at [email protected]. For the data of callers processed on behalf of our professional clients, MAIA SOLUTION acts as a processor (GDPR art. 28) — see our Terms of Sale.

We only collect data necessary for the service: client account data (name, company name, registration number, address, email, phone), assistant configuration data, call data (audio recording, transcript, metadata), messages generated for the client, and billing data. Legal bases: performance of the contract (service delivery and billing), legal obligation (accounting retention), and legitimate interest (service security and B2B prospecting).

Your data is used exclusively to provide and improve our service. We never sell your data to third parties.

Business data (emails, phone numbers, appointments, messages) is stored in a database hosted in the European Union. To provide the full service, MAIA SOLUTION relies on technical sub-processors, grouped by category:

• Database hosting and authentication (European Union);
• Cloud telephony (call intake and routing);
• AI-powered voice synthesis and understanding;
• Site delivery and CDN;
• Transactional email delivery and emailing;
• Application error monitoring (European Union).

When a sub-processor is located outside the European Union, the transfer is systematically governed either by the EU-US Data Privacy Framework adequacy decision (GDPR art. 45) or by the Standard Contractual Clauses approved by the European Commission (Decision 2021/914), ensuring a level of protection equivalent to the GDPR. Zero-retention mode is also enabled for agents processing health data.

The up-to-date nominative list of our sub-processors (GDPR art. 28.4) and a copy of the applicable safeguards are provided to our professional clients upon written request at [email protected].

In accordance with Article 32 of the GDPR, we implement appropriate technical and organisational measures: encryption of data in transit and at rest (callers' messages are encrypted with AES-256), strict access control, audit logs of access to sensitive data, and notification of any data breach within 72 hours.

In accordance with Articles 15 to 22 of the GDPR, you have the following rights over your data: access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent and to set directives regarding your data after your death.

For the callers of our clients, these rights may be exercised with the client (data controller) or directly with MAIA SOLUTION at [email protected].

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL — www.cnil.fr).

We retain each category of data for a defined period:

• Raw audio recordings: 30 rolling days, then automatic deletion;
• Transcripts and call metadata (internal use): 13 months;
• Messages and notes delivered to the client: for the duration of the contract, then deleted 6 months after termination;
• Billing data: 10 years (accounting and tax obligations, art. L123-22 of the French Commercial Code);
• Prospecting data: 3 years from the last contact.

Any individual may request the early deletion of an identifiable piece of data, provided no legal obligation prevents it, at [email protected].

The maiasolution.fr website only uses cookies and local storage that are strictly necessary for its proper operation. We do not use any advertising cookies or marketing trackers.

These cover:

• Login session - keeping you signed in to your client or administrator area;
• Language preference - displaying the site in your chosen language;
• Storing your cookie choice - not showing the banner again once your choice is made.

The demo voice assistant available on the site is provided by a third-party technical provider; using it may result in technical cookies necessary for its operation being set.

As these cookies are essential to the service, they do not require prior consent. You may nevertheless delete or block them at any time via your browser settings - the site may then not work properly.