Privacy Policy
Last updated: December 21, 2025
In summary:
Manu only collects data necessary to provide the service (creating quotes/invoices via WhatsApp). Your data is never sold to third parties. You maintain full control over your information.
1. Data Controller Identity
Company name: AI Automation Intelligence, LLC
Legal form: Delaware LLC (USA)
Registered office: 2093 Philadelphia Pike, #3830, Claymont, DE 19703, USA
EIN: 30-1450314
Phone: +1 (217) 912-5948
DPO Email: privacy@devismanu.fr
2. Data Collected
2.1 Professional identification data
- WhatsApp phone number - Unique identifier for the service
- Company name - To personalize your documents
- SIRET/Business ID - Legal requirement on quotes/invoices
- Business address - Mandatory information
- Professional email - For document delivery
- Company logo (optional) - PDF customization
2.2 Your clients' data
- Name or company name
- Postal address
- Email and phone
- SIRET/Business ID (if professional)
2.3 Transactional data
- History of quotes and invoices created
- Details of services/products
- Amounts and payment terms
- Document statuses (sent, paid, etc.)
2.4 Technical data
- Voice messages (transcribed then deleted within 24h)
- WhatsApp conversation history with Manu
- Technical logs (timestamps, errors)
- Subscription and payment data (via Stripe)
⚠️ Data NOT collected:
- Direct banking data (processed exclusively by Stripe)
- Health data or sensitive data
- Real-time geolocation
- Your phone contacts
3. Legal Basis and Processing Purposes
| Purpose | Legal basis | Retention period |
|---|---|---|
| Quote/invoice creation | Contract performance | 10 years (accounting obligation) |
| User account management | Contract performance | Subscription duration + 3 years |
| Voice transcription | Contract performance | 24 hours maximum |
| Payment and billing | Contract performance + Legal obligation | 10 years |
| Service improvement | Legitimate interest | Anonymized data |
| Marketing communications | Consent | Until consent withdrawal |
| Legal obligations compliance | Legal obligation | Per applicable regulations |
4. Data Recipients
4.1 Technical subcontractors
🤖 OpenAI
Voice transcription and conversational AI
Location: United States (standard contractual clauses)
💬 WhatsApp / Meta
Messaging platform
Location: United States/EU
💳 Stripe
Payment processing
PCI-DSS Level 1 certified
📧 OVH / SMTP
Hosting and email delivery
Location: France
4.2 No data sales
Your data is never sold, rented, or exchanged with third parties for commercial or advertising purposes.
5. Transfers Outside the EU
Some of our subcontractors are located in the United States (OpenAI, Meta). These transfers are governed by:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Additional security measures: encryption, pseudonymization
- GDPR-compliant Data Processing Agreements (DPAs)
6. Data Security
🔐 Encryption
TLS 1.3 in transit, AES-256 at rest
🔒 Restricted access
Principle of least privilege
🛡️ Infrastructure
Secure hosting, encrypted backups
📋 Audits
Regular security testing
7. Your Rights (GDPR)
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
Right of access
Obtain a copy of all your personal data
Right to rectification
Correct inaccurate or incomplete information
Right to erasure ("right to be forgotten")
Delete your data (except legal retention obligations)
Right to restriction
Temporarily freeze the processing of your data
Right to data portability
Receive your data in a structured format (JSON/CSV)
Right to object
Object to processing on legitimate grounds
Rights related to automated decisions
Request human intervention on an automated decision
📧 To exercise your rights:
Send an email to privacy@devismanu.fr with:
- Your WhatsApp number associated with the account
- ID document (for verification)
- The right you wish to exercise
Response time: 1 month maximum (extendable by 2 months for complex requests)
8. Filing a Complaint with the Supervisory Authority
If you believe your rights are not being respected, you can file a complaint with your local Data Protection Authority. For French residents:
CNIL (French Data Protection Authority)
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr
9. Cookies and Trackers
The devismanu.fr website only uses cookies strictly necessary for the service to function. No advertising or tracking cookies are used.
| Cookie | Purpose | Duration |
|---|---|---|
| Session | Maintaining login | Session |
| Preferences | Language, theme | 1 year |
10. Minors
The Manu service is intended exclusively for professionals (craftsmen, businesses). We do not knowingly collect data from minors (under 18 years of age).
11. Changes to this Policy
We reserve the right to modify this privacy policy. In case of substantial changes, you will be notified via:
- WhatsApp message
- Email (if provided)
- Website banner
The last update date is indicated at the top of this document.
12. Contact
For any questions about this policy or your data: