This translation is provided for information only. The French version is the authoritative text.
Privacy policy
Version of 1 October 2026.
This text explains what we do with personal data when you use the website maisonfloruit.com and the Maison Floruit service. It is written to be understood without a lawyer. It applies to three people: you, the family contact; the author, the person Jeanne calls; and the relatives you invite.
It complies with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and with the French Data Protection Act (loi Informatique et Libertés) of 6 January 1978.
1. Who is responsible
The data controller is AVA FIRST AI, a société par actions simplifiée (simplified joint-stock company under French law), 173 rue de Courcelles, 75017 Paris, SIREN 104 044 201.
For any question or to exercise your rights: nissielthomas@avafirstai.com, or by post to the address above. We have not appointed a data protection officer; this address is your point of contact.
2. The essentials in ten lines
- Jeanne is a computer program. She says so on every call.
- The calls are recorded to write the book. The author knows this and gives her agreement out loud, on the first call and then on the second, on her own.
- Members of our team listen to the calls afterwards, never live.
- The family receives only what the author has agreed to share.
- What the author asks to keep "between us" is neither written down, nor passed on, nor kept.
- The data is hosted in the European Union. Some providers are in the United States; section 8 says which ones and with what safeguards.
- The author's voice is never cloned. Her stories are never used to train a model, nor for another customer.
- The recordings are deleted twelve months after the last call, or within 48 hours if you or the author ask.
- You can download everything (PDF, recordings) and delete everything from the family space.
- No decision concerning you is taken by a machine alone.
3. The data we process
About the family contact and the relatives: first name, surname, relationship to the author, mobile number, e-mail address, postal address for delivery of the book, login codes received by text message, login history, messages exchanged with us, payment data (see section 7: we do not see the card number).
About the author: first name, surname, year and place of birth, telephone number, information given by the family when signing up (hearing, pace, people around her, places she has lived, background, subjects to handle with care, any protective measure), the word chosen with the family for the calls, and above all: her voice, the recordings of the calls, their transcripts, the memories she tells, her corrections, the messages she records for her grandchildren, the photographs and their captions.
About the people mentioned (spouse, children, grandchildren, friends, neighbours, living or deceased): first name, relationship to the author, and what she says about them.
Sensitive data. A life story often contains, without anyone asking, information about health, religion, opinions, emotional life. We ask no questions on these subjects. When the author mentions them, we process them with her explicit agreement (section 5), and Jeanne never presses.
About visitors to the website: IP address and technical connection data; audience measurement and advertising data only if you have accepted it (section 10).
4. Where the data comes from
- From you, when signing up, when preparing the service and in the family space.
- From the author, during the calls.
- From the relatives, in the family space (corrections, notes in the margin, photographs).
- From Stripe, for payment confirmation.
- Never from a purchased list, a social network or a data broker.
5. Why, on what basis, for how long
The table below is the heart of this policy. The processors are described in section 8.
| Purpose | Data | Legal basis | Retention period | Recipients and processors | Transfers outside the EU and safeguards |
|---|---|---|---|---|---|
| Sign-up, free trial, family space, invitations to relatives | Identity, relationship, mobile, e-mail, text-message codes, sessions | Performance of the contract (Art. 6.1.b) | Duration of the service, then 12 months after the last call | AVA FIRST AI team; Supabase (database, EU); Vercel (website); Resend (e-mails, EU); Twilio (text messages) | Vercel and Twilio: United States, standard contractual clauses and, where applicable, certification under the EU-US Data Privacy Framework |
| Jeanne's calls, recording, transcription, memory of the calls, writing of the book | Voice, recordings, transcripts, life story, sensitive data mentioned spontaneously, photographs, captions, corrections | Explicit consent of the author (Art. 6.1.a and 9.2.a), given orally on the first call, asked again on the second, recalled on every call, recorded with her words; performance of the contract with the family contact (Art. 6.1.b) for the production of the book | Duration of the service, then 12 months after the last call, unless deletion is requested (48 h). "Between us" passages: deleted the same day. Books delivered are the family's property and are not affected | AVA FIRST AI team (listening afterwards); ElevenLabs (Jeanne's voice and conduct of the call); Twilio (telephone routing); OpenAI (transcription, extraction and ordering of the words); Supabase (storage, EU); a printer located in the European Union (printing of the book, EU) | ElevenLabs: United States, standard contractual clauses; the audio is brought back to us and then deleted from ElevenLabs after each call; planned switch to their European data residency offer. Twilio: Ireland and United States, standard contractual clauses. OpenAI: United States, standard contractual clauses, API access, data not used for training |
| Clip sent to the family after each call | Audio clip of two minutes at most, its text, a message | Consent of the author given for each clip (Art. 6.1.a), performance of the contract (Art. 6.1.b) | Same period as the calls | Team (listening before sending); Resend; Twilio; Supabase | See above |
| Alerts to the family in the event of worrying remarks (pain, fall, distress, confusion) | Nature of the alert, time, clip concerned, family contact's mobile | Legitimate interest (Art. 6.1.f): the author's safety, of which she is informed; protection of vital interests (Art. 6.1.d and 9.2.c) in an emergency | 12 months | Team; Twilio (text message and call) | Twilio: see above |
| People mentioned in the stories | First name, relationship, status (living or deceased), what the author says about them | Legitimate interest (Art. 6.1.f) of the author and her family in building a private family story, with safeguards: list of living people mentioned, no remarks about a living person in the clips, removal or anonymisation of implicating passages before printing, family use only | Same period as the calls | The same as for the calls | See above |
| Payment and invoicing | Identity, e-mail, amount, date, last four digits of the card, Stripe identifier | Performance of the contract (Art. 6.1.b); legal accounting obligation (Art. 6.1.c) | Invoices: 10 years (French Commercial Code) | Stripe (payment); accountant | Stripe: Ireland and United States, standard contractual clauses and certification under the EU-US framework |
| Customer relations, complaints, mediation | Messages, e-mails, text messages, calls with the team | Performance of the contract (Art. 6.1.b); legitimate interest in keeping proof of exchanges (Art. 6.1.f) | 3 years after the end of the relationship; 5 years in the event of a dispute | Team; Resend; Twilio | See above |
| Log of the service's actions (who did what, when, at what cost), security, proof of consent | Technical identifiers, timestamps, actions of the programs and the team, the author's answer to the request for agreement | Legitimate interest (Art. 6.1.f): security, traceability; obligation to be able to demonstrate consent (Art. 7.2) | Duration of the service, then 12 months; login logs: 12 months | Team; Supabase; Vercel | Vercel: see above |
| Audience measurement and advertising on the website (if enabled) | Pages viewed, origin of the visit, browsing identifier, interactions with our adverts | Consent (Art. 82 of the French Data Protection Act) | Cookies: 13 months at most; data: 25 months at most | Vercel Analytics; Meta (pixel) | Meta: United States, certification under the EU-US framework and standard contractual clauses |
| Information about the service to families who took the trial, news | E-mail, first name | Legitimate interest (Art. 6.1.f) for customers; consent for others. Unsubscribe link in every message | 3 years after the last contact | Resend | Resend: EU |
We sell no data. We do no profiling. We use neither the voice nor the stories to train a model, for another customer, or for our communications without a separate written agreement from the author and the family.
6. The author's agreement, in detail
The author is at the centre of the service. Her agreement is asked of her, directly, and not only of the family.
- Before the first call, the family tells her, with a guide we provide: a program is going to call her, for a book, the conversations are recorded and listened to, she can stop.
- On the first call, Jeanne introduces herself as a program, says the family word, then explains in five sentences that she records for the book, that members of the team listen, that the family will only hear what the author agrees to, that she can have anything she wants erased and can stop whenever she wants. She asks for her agreement. A clear yes is required. Otherwise, the call ends and nothing is kept beyond a record of the refusal.
- On the second call, the author is on her own. Jeanne checks that she has understood what the two of them do together, then asks for her agreement again. If she no longer knows, Jeanne explains again once. If she still does not know, the call stays short and a member of the team calls the family.
- On every call, Jeanne reminds her that she is recording.
- Withdrawal is immediate. "That stays between us": the passage is removed from the audio before storage, from the transcripts, from the memory and from the book, the same day, and deleted from ElevenLabs. "Take out what I said about...": everything on that subject is removed within the hour, from that call and the previous ones. "I don't want to carry on": the calls stop. We keep only a record of the withdrawal, without the content, to prove it was done.
- The clips sent to the family are announced to the author and subject to her agreement, every time.
- If the author is under guardianship, a deputyship or a family authorisation, the written agreement of the person in charge of the measure is requested in addition, before the first call. The author's own agreement remains necessary: her story is a strictly personal act.
The agreement and each withdrawal are recorded with the date and the words used. That is how we can prove, as the law requires us to, that agreement was given.
7. Payment
Payment is entrusted to Stripe. You enter your card on a Stripe page. We neither receive nor store your card number. We receive a confirmation, the amount, the last four digits and an identifier. Stripe's privacy policy can be consulted at stripe.com/fr/privacy.
8. Who has access to the data, and where
Our team. Members of AVA FIRST AI listen to the calls afterwards, approve the clips, review the memory of the first calls, read the book through and handle the alerts. They are bound by confidentiality. They access the data with named accounts, and every access is logged.
Our processors. Each one acts only for one task, on our instructions, and is bound by a processing contract compliant with Article 28 of the GDPR.
| Provider | Role | Place of processing | Safeguards for the data |
|---|---|---|---|
| Supabase | Database and files: recordings, transcripts, texts, photographs, PDFs | European Union (Ireland) | Hosting in the EU, encryption at rest and in transit, restricted access |
| Vercel Inc. | Hosting of the website and the family space | United States, with delivery from points of presence in Europe | European Commission standard contractual clauses; certification under the EU-US Data Privacy Framework. Vercel does not store the recordings |
| ElevenLabs | Jeanne's voice and conduct of the call in real time | United States | Standard contractual clauses; audio brought back to us and then deleted from ElevenLabs after each call; commitment not to use it for training; goal: switch to their European data residency offer. The author's voice is never cloned |
| Twilio | Routing of telephone calls, sending of text messages | Ireland and United States | Standard contractual clauses; certification under the EU-US framework |
| OpenAI | Transcription, extraction of memories, ordering of the words for the book | United States | API access; standard contractual clauses; data not used to train models; retention limited to the needs of service security, then deletion |
| Stripe | Payment | Ireland and United States | Standard contractual clauses; certification under the EU-US framework; PCI DSS standard |
| Resend | Sending of e-mails (clips, confirmations, codes) | European Union | Hosting in the EU |
| a printer located in the European Union | Printing and dispatch of the book, the booklet and the welcome box | European Union | Receives the book file and the delivery address, nothing else; deletion after manufacture |
| Meta Platforms Ireland | Measuring the effectiveness of our adverts, only if you accept | Ireland and United States | Certification under the EU-US framework; standard contractual clauses |
Transfers outside the European Union rely on the standard contractual clauses adopted by the European Commission (Decision 2021/914) and, for providers certified under it, on the adequacy decision concerning the EU-US Data Privacy Framework of 10 July 2023. You can obtain a copy of the applicable safeguards by writing to us.
The authorities. We only disclose data to an authority on a legal requisition.
Nobody else. No resale, no sharing with advertisers, no sharing with other customers.
9. For how long, and what happens at the end
- During the service, everything is kept to write the book.
- After the last call, the recordings, transcripts and texts are kept for twelve months, to allow a reprint, a correction, or a resumption with "Jeanne carries on". We notify you one month before deletion. You can download everything beforehand.
- At your request, or the author's, we delete everything within 48 hours: with us and with our processors. You receive written confirmation. Books and PDFs already delivered belong to you and are not affected.
- What is kept longer: invoices (10 years, accounting obligation), the record of consent and withdrawals without their content (duration of the service plus 12 months), exchanges with customer service in the event of a dispute (5 years).
- "Between us" passages are never kept.
In the event of the author's death. The calls stop. What exists is handed over to the family contact. The author may, during a call, say what she wishes to become of her recordings after her death: we note and respect these instructions (Article 85 of the French Data Protection Act). Failing that, the family decides whether to keep or delete them.
10. Cookies and trackers
Necessary cookies, without consent: a session cookie for the family space (to recognise you from one page to the next), a cookie for the team area. They are essential to operation and are exempt from consent.
Trackers subject to your consent, only if they are enabled on the website: Vercel Analytics (audience measurement) and the Meta pixel (measuring the effectiveness of our adverts). They are only set after you click "Accept" on the banner. "Decline" is as easy as accepting, and the website works fully without them. You can change your mind at any time from the "Cookies" link at the bottom of the page. Your choice is kept for six months.
The audio clips sent to the family are accessed through a link and a code received by text message. This mechanism sets no advertising tracker.
11. Security
- Data hosted in the European Union, encrypted at rest and in transit.
- Access to the family space by single-use code sent by text message; revocable links.
- Separation by family in the database: one family can never see another family's data.
- Named accounts for the team, a log of every access and every action.
- Deletion of the audio from the voice provider after each call.
- Jeanne never asks for money, a code or a card number, and always calls from the same number. A word chosen with the family is said on every call so that the author knows it really is Jeanne.
- In the event of a data breach presenting a risk to you or the author, we notify you without delay and notify the CNIL within 72 hours.
12. Your rights, and the author's
You, the author and the relatives have the following rights:
- Access: to know what we hold and obtain a copy.
- Rectification: to correct inaccurate data.
- Erasure: to have the data deleted, within 48 hours for the recordings (section 9).
- Portability: to receive the recordings (audio files) and the book (PDF) in a readable format, from the family space or on request.
- Objection: to object to processing based on our legitimate interest, for example information messages.
- Restriction: to ask for the use of the data to be frozen while a check is carried out.
- Withdrawal of consent: at any time, without justification. For the author, it is enough to tell Jeanne during a call ("that stays between us", "take that out", "I don't want to carry on"). Withdrawal does not call into question what was done before.
- Instructions after death: to say what becomes of the data after death.
How to exercise them. By e-mail to nissielthomas@avafirstai.com, by post to AVA FIRST AI, 173 rue de Courcelles, 75017 Paris, or from the family space for downloading and deletion. The author can also exercise her rights by telephone, during a call, or through the family. We reply within one month. We may ask for proof of identity if we have a doubt about the person asking, especially before handing over recordings.
Between the family and the author. The recordings and the stories are the author's data. The family contact accesses them for the service, but a request from the family that would go against a choice of the author (for example obtaining a passage she asked to keep between her and Jeanne) is refused. A deletion request coming from the family is confirmed with the author by a call before being carried out, unless the author has died or is unable to answer.
Complaint. If you consider that your rights are not respected, you may lodge a complaint with the CNIL, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr. We would rather you wrote to us first, to sort the problem out quickly.
13. No automated decision-making, but programs
The service is largely automated: programs prepare the calls, transcribe, choose a clip to suggest, write the book from the author's words, check every sentence. None of these programs takes on its own a decision that would have a legal or significant effect on you or on the author. Stopping the service, handling an alert, approving a clip or a book, refusing an order are decided or checked by a person.
Jeanne is a computer program. She says so on every call, in accordance with the European regulation on artificial intelligence (Regulation (EU) 2024/1689, Article 50). She simulates no feelings. The book contains only the author's words.
14. Minors
The service is reserved for adults. We do not knowingly collect data about minors. If a minor grandchild is mentioned in a story or is the recipient of a message, that data is processed only within the private family circle, under the responsibility of the family contact.
15. Changes
We may change this policy, for example if we change provider. The date at the top of the text then changes. For a significant change (new provider outside the EU, new purpose, longer retention), we notify families by e-mail at least one month in advance, and ask for fresh consent where the law requires it.