Privacy policy
Last updated: November 2, 2026
This policy explains which personal data INFODUX collects when you use the www.infodux.com website, your client space, our meetings and our services, why we use it, who we share it with and how to exercise your rights.
Data controller
INFODUX LLC (8 The Green, Dover, DE 19901, USA) is the controller of the personal data described here. For any question about your data or to exercise your rights, write to us at contact@infodux.com.
Data we collect
Depending on the services you use, we collect:
- Account and sign-in: email address, display name, password (managed and encrypted by Firebase Authentication — we never have access to it); company and phone number if you provide them.
- Sign in with Google: name, email address, profile picture and account identifier (see the dedicated section below).
- Requests and conversations: information entered in the contact form, the project configurator or the site assistant (need, budget, timeline, contact details), messages and tickets in the client space, files you upload there.
- Motion Studio (free animation tool): the topic, settings and storyboard of your video, and the MP3 voice-over if you import one; if you request the HD version: first name, last name, email, company and need, then, if you choose to provide them, website, job title, phone, industry, company size, budget and timeline; your consent choices, with their date and the accepted wording. The tool's audience measurement is anonymous: a random session identifier, no personal data and no third-party tool.
- Meetings: name, email and answers to the booking form, date and video-call link.
- Meeting recordings: when a discovery call is recorded — you are told when booking and again in the meeting — the audio and video recording and its written transcript, with the participants' display names.
- Phone callback: if you ask to be called back, your phone number and the content of the conversation with our voice assistant.
- Client reviews: the rating, text, voice or video recording and display name you choose to submit.
- Orders and payments: products and services purchased, amounts, invoices, payment status. Your card details are entered and processed by Stripe: we never receive them.
- Business prospecting: to contact companies, we collect public business information (company name and address, website, business phone and email, public reviews) from open sources such as Google Maps business listings and company websites.
- Technical data: information needed for site security (reCAPTCHA bot protection), for your sign-in session and to measure the links we share.
Data obtained through “Sign in with Google”
If you choose to sign in with your Google account, Google only sends us your name, email address, profile picture and an account identifier. We do not access any other data in your Google account: no Gmail, Drive, Calendar or contacts.
We use this information solely to create your INFODUX account, identify you when you sign in and display your name in your client space. It is stored in Firebase (Google Cloud). It is never sold, never shared with third parties, never used for advertising and never used to train artificial intelligence models.
INFODUX's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
You can ask us to delete your account at any time (see “Your rights”) and remove INFODUX's access from your Google account settings: myaccount.google.com/permissions
Why we use your data
- Create and manage your account, give you access to your client space, process your orders and payments, deliver our services — performance of a contract.
- Answer your requests, organise and prepare our meetings, including a preparation note based on your answers and on public information about your company — pre-contractual steps and legitimate interest.
- Motion Studio: produce and send you your animation, answer your request and assess its fit with our services (a score computed by rules, with no automated decision about you) — basis: your request and your consent to processing. Send you our tips and offers only if you agreed (separate box, never pre-ticked), with one-click unsubscribe.
- Record and transcribe discovery calls to keep an accurate record and improve our support — legitimate interest. You can decline the recording simply by saying so at the start of the call.
- Send you emails related to our services: address confirmation, quotes, invoices, meeting reminders, replies to your messages — performance of a contract.
- Contact professionals by email about their business — legitimate interest. Every message includes an unsubscribe link.
- Publish your review on our website — only with your agreement and after review.
- Keep the site secure and prevent fraud and abuse — legitimate interest.
- Meet our accounting and tax obligations — legal obligation.
Artificial intelligence
Some tasks are assisted by artificial intelligence tools: transcribing calls and recordings, summarising and analysing a sales meeting, drafting replies, qualifying a request, researching public information about a company before a meeting. We only send these tools the information the task requires.
Generated content is reviewed by a team member before anything is sent or any decision is made about you: no decision with legal effects on you is taken in a fully automated way.
Recipients and processors
Your data is processed by the INFODUX team and, on our behalf and under our instructions, by the following providers:
- Google (Firebase, Google Cloud, Google Meet, reCAPTCHA, Google Sheets) — website hosting, database, authentication, video calls, security.
- Stripe — payments and invoices.
- Brevo — sending emails.
- Calendly — meeting booking.
- Recall.ai — recording and transcribing meetings (servers in the European Union).
- Vapi — phone callback assistant.
- OpenAI, Ollama and Perplexity — artificial intelligence processing (transcription, analysis, drafting, public information research).
- Apify — collecting public business information for prospecting.
- n8n — automating our internal processes.
Your data is never sold or rented.
Transfers outside the European Union
INFODUX LLC is a US company and several of our providers are based in the United States. When data about people in the European Union is transferred there, these transfers rely on the EU–US Data Privacy Framework where the provider participates in it, or on the European Commission's standard contractual clauses.
Retention periods
- Account and client space: as long as your account is active; deleted on request.
- Requests, conversations and meetings: three years after our last exchange.
- Motion Studio: creations not followed by a request, 30 days; rendered videos, 30 days; anonymous audience measurement, 180 days; proof of your consents, 36 months. Contact details left to receive the video follow the rule for requests (three years after our last exchange). You can ask for your creations and data to be erased at any time.
- Meeting recordings: deleted within 7 days at our provider; only the transcript is kept, with the meeting record.
- Client reviews: while the review is under review or published; deleted on request.
- Prospecting: three years after the last contact. If you unsubscribe, we only keep the address needed to stop writing to you.
- Invoices and accounting data: as long as our accounting and tax obligations require (up to ten years).
Security
Exchanges with the site are encrypted (HTTPS), access to data is limited to the team members who need it, and the access credentials you entrust to us are kept in an encrypted vault (AES-256).
Your rights
You have the right to access, rectify, erase, restrict and port your data and to object to its processing — including to prospecting, at any time — as well as the right to withdraw your consent and to give instructions about your data after your death.
To exercise them, write to us at contact@infodux.com. You can also update your profile from your client space. We answer within one month. If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.
Cookies
The site only uses cookies that are necessary for it to work, such as your sign-in session. See our cookie policy for details.
Children
Our services are intended for professionals and are not directed at people under 16.
Changes
We may update this policy; the date at the top of the page shows the latest version. If we make a significant change, we will let you know by email or in your client space.
