You stay in control
The data processed by Tinos belongs to you. You decide how it is used, you can access it, export it or delete it at any time. Here is how it works, in plain terms.
You are the data controller, Tinos is the processor
Within the meaning of the GDPR, you remain the controller of the data linked to your calls (callers’ contact details, transcripts, appointments). Tinos acts as a processor: we process this data on your behalf, according to your instructions and solely for the purpose of operating your voice agent. This allocation of roles is governed by a data processing agreement (DPA).
In practical terms: we do not use your data for our own purposes. It is used to answer calls, qualify requests and pass on the appointments captured to you — nothing more.
Access, export and deletion on request
You can exercise control over your data at any time. Three main actions are provided for:
- Access. You can view the data associated with your account and your calls (contact details, transcripts, appointments).
- Export. On request, we provide you with a copy of your data in a reusable format.
- Deletion. You can request the erasure of your data. We delete it, subject to any legal retention obligations that may apply.
No reselling, no training of third-party models
Your transcripts and your call data are not sold. Nor are they used to train third-party artificial intelligence models. They remain at the service of your use: operating your voice receptionist.
Callers’ rights, too
Beyond the professional, it is above all the callers whose data is processed. The GDPR grants them a full range of rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21). Where a decision producing significant effects would be entirely automated, Article 22 grants a right to human intervention.
These rights are exercised with the professional (the data controller); as a processor, we help them respond within the one-month period provided for by Article 12 of the GDPR.
How to exercise your rights
To access your data, request its export or deletion, simply contact us. We handle your request within the timeframes set by the regulation. To understand the scope of your rights, see the CNIL website; for details of the processing and retention periods, see our privacy policy.