Privacy Policy

Last updated: April 22, 2026

1. Who We Are

Gentes is an AI growth partner based in France. We help ambitious SMBs fuel their growth through AI-powered lead generation, voice automation, client systems, and operational workflows.

Data Controller:
Gentes
France
Email: contact@gentes.ai
Website: www.gentes.ai

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation), the French Loi Informatique et Libertes (as implemented to give effect to the GDPR), and guidance issued by the Commission nationale de l'informatique et des libertes (CNIL).

2. What Data We Collect and Why

2.1 Website Visits

When you visit gentes.ai, our hosting provider (Cloudflare) processes basic server log data: IP address, browser type, pages visited, and timestamps. We do not run any analytics or tracking scripts on this website. This website sets no cookies.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR), ensuring website security and availability.

2.2 Booking Form Data

When you schedule a call through LunaCal, you provide your name, email address, and any notes you include in the booking form. This data is used solely to confirm and manage your appointment.

Legal basis: Pre-contractual measures (Article 6(1)(b) GDPR).

2.3 Client Project Data

When you become a client, we process the business information you share with us to deliver our services. This may include contact details, business operational data, CRM data, customer lists, and communications exchanged during the engagement.

Legal basis: Contract performance (Article 6(1)(b) GDPR).

2.4 End Customers of Our Clients

As part of delivering our services, particularly Lead Generation, Voice AI, Client Systems, and Growth Ops, our clients may instruct us to process their customers' personal data. In this capacity, Gentes acts as a data processor on behalf of our client (the data controller), under a Data Processing Agreement (DPA) required under Article 28 of the GDPR.

If you are a customer of one of our clients and have questions about how your data is used, please contact that business directly.

2.5 Call Recordings and Transcripts (Voice AI Service)

If you subscribe to our Voice AI service, which includes an AI-driven receptionist, lead qualification, and appointment setting, phone calls handled by the AI system are recorded and transcribed. These recordings and transcripts are:

  • Used to configure and improve the AI system for your business,
  • Reviewed by our team for quality assurance and system optimization,
  • Processed by the AI-model provider specified in your service agreement.

Callers interacting with our Voice AI systems are informed at the start of each call that an AI is handling the conversation. They may be recorded, in compliance with EU AI Act Article 52 transparency requirements and applicable law.

Legal basis: Contract performance (Article 6(1)(b) GDPR) for our clients; legitimate interest (Article 6(1)(f) GDPR) or consent for end-callers where required by national law.

3. What We Do Not Do

  • We do not sell your data to any third party.
  • We do not run advertising pixels or third-party tracking on this website.
  • We do not use your data for any purpose unrelated to delivering the services you have engaged us for.
  • We do not use fully automated decision-making that produces legal or similarly significant effects without human oversight.

4. Sub-Processors and International Transfers

We use a limited number of trusted third-party services to operate:

  • Cloudflare, Inc. (United States): website hosting, delivery, and security. Safeguard: Standard Contractual Clauses (SCCs) under Article 46(2)(c) GDPR.
  • LunaCal (United States): appointment scheduling. Safeguard: Standard Contractual Clauses.

For Voice AI clients, additional sub-processors (such as the AI model provider and telephony platform) are disclosed in your service agreement before contract signing.

All transfers outside the European Economic Area are governed by appropriate safeguards required under Chapter V of the GDPR. You may request a current list of active sub-processors by emailing contact@gentes.ai.

5. How Long We Keep Your Data

  • Website server logs (via Cloudflare): 14 months.
  • Booking data (via LunaCal): Until you request deletion, or 14 months from last activity.
  • Call recordings: 90 days from the date of recording.
  • Call transcripts and AI outputs: as specified in the client DPA; default maximum 12 months.
  • Client project data: During the contract + 10 years, in line with French commercial/tax retention rules.
  • Invoices and financial records: 10 years, as required by French tax law.

After retention periods expire, data is securely deleted or anonymized. You may request earlier deletion, see Section 6.

6. Your GDPR Rights (Articles 15-22)

Under the General Data Protection Regulation, you have the following rights. To exercise any of them, contact us at contact@gentes.ai. We will respond within one month (extendable by two further months for complex requests, with notice).

  • Right of Access (Art. 15) -- You can request a copy of the personal data we hold about you and information about how we use it.
  • Right to Rectification (Art. 16) -- You can ask us to correct inaccurate or incomplete personal data.
  • Right to Erasure (Art. 17) -- You can request deletion of your personal data where it is no longer necessary, you withdraw consent, or you object to processing. This does not apply where retention is required by law.
  • Right to Restriction (Art. 18) -- You can ask us to pause processing while we verify accuracy or assess an objection.
  • Right to Data Portability (Art. 20) -- Where processing is based on consent or contract, you can receive your data in a structured, machine-readable format.
  • Right to Object (Art. 21) -- You can object to processing based on legitimate interest. You have an unconditional right to object to direct marketing at any time.
  • Right Related to Automated Decision-Making (Art. 22) -- You have the right not to be subject to decisions based solely on automated processing that produce significant effects. We do not engage in such processing without human oversight.
  • Right to Withdraw Consent (Art. 7(3)) -- Where we process your data based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Note for third-party callers: If your data was processed as part of our services to one of our clients, the client is the data controller. Please direct rights requests to them.

7. Supervisory Authority

If you believe that our processing of your personal data infringes the GDPR or French data protection law, you have the right to lodge a complaint with:

Commission nationale de l'informatique et des libertes (CNIL)
3 Place de Fontenoy - TSA 80715
75334 Paris CEDEX 07, France
Phone: +33 1 53 75 75 75
Website: www.cnil.fr

You may also lodge a complaint with the supervisory authority of your country of habitual residence or place of work within the EU.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, in accordance with Article 32 of the GDPR. These include:

  • Encrypted communications (HTTPS with HSTS),
  • Access controls limiting data to authorized personnel,
  • Contractual security obligations on all sub-processors.

In the event of a data breach likely to result in a risk to your rights, we will notify the CNIL within 72 hours (Article 33 GDPR) and inform affected individuals where required (Article 34 GDPR).

9. Data Processing Agreements (for Clients)

Where our services involve processing your customers' personal data on your behalf, we operate under a written Data Processing Agreement (DPA) as required under Article 28 of the GDPR. If you are an existing or prospective client and a DPA has not yet been signed, please contact contact@gentes.ai.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top. For material changes affecting active clients, we will provide direct notification via email.

Gentes | France | contact@gentes.ai | gentes.ai