OneCallFlow
Privacy policy
OneCallFlow limits website data to what is needed for demonstrations, sales enquiries, service operation, and security.
Updated 27 August 2026
Who is responsible?
ONE CALL FLOW, the French SAS identified in the Legal notice, is responsible for the website, contact form, and public demo.
For production calls handled for a business customer, roles and instructions are defined in the customer agreement and applicable data-processing terms.
Data processed
- Contact form: name, email, phone, company, message, site region, market, and request context.
- Voice demo: LiveKit session, selected agent, duration, and technical connection data needed to provide the demo.
- Security and abuse prevention: IP address and user agent transformed into salted server-side hashes.
- Audience measurement: page URL, referrer, approximate geography, browser, operating system, and device type aggregated by Vercel Web Analytics.
- Email: delivery metadata if an enquiry notification is enabled.
How the data is used
- Reply to demo and contact requests.
- Provide the voice demo requested by the visitor.
- Limit abuse, spam, and excessive use.
- Operate and improve the service without training an AI model on customer data.
Retention
| Data | Target retention | Comment |
|---|---|---|
| Sales requests | Up to 12 months after last contact | Deleted sooner on request where possible. |
| Demo sessions | 30 to 90 days | Used for security, abuse prevention and diagnostics. |
| IP/user-agent hashes | 30 to 90 days | Salted server-side hashes, not used for marketing tracking. |
| Agency client data | According to client DPA | Default: audio 30 days if enabled, transcripts 90 days, summaries 12 months. |
Recipients and service providers
Access is limited to OneCallFlow, the providers needed to operate the service, and the relevant business customer for its production calls. Current providers are listed on the Subprocessors page.
Privacy requests
Contact privacy@onecallflow.com to request access, correction, deletion, or another privacy request. The rights available to you depend on the law that applies to your situation.
Cookies and similar technologies
The regional preference cookie stores only the site variant selected by the visitor. It contains no name, contact detail, or advertising identifier.
Vercel Web Analytics measures page views without an analytics cookie. Vercel documents that the data is aggregated, is not associated with an individual or IP address, and its daily visitor hash is discarded after 24 hours.
No advertising or retargeting technology is enabled. Technical abuse-prevention data is not used for marketing tracking.
US deployment notices
Production voice deployments may require customer- and state-specific privacy, AI, or call-recording notices. This website does not claim one notice is sufficient for every US state; the applicable disclosures are finalized with each customer before its deployment goes live.