Privacy Policy

Effective date: October 22, 2026

This Privacy Policy ("Privacy Policy") explains how Blynt AI ("Blynt"; "we"; "us") treat your Personal Data: what we collect, why we collect it, where it all goes, and for how long.

In addition to this Privacy Policy, please read our Terms of Service, which apply to your use of our Services.

1. Who we are?

Blynt AI is a French société par actions simplifiée, registered with the Paris Trade and Companies Register under number 988 491 460, having its registered office at 50 rue de Malte, 75011 Paris, France.

Blynt provides a real-time, context-aware speech-to-text API (the "Services") that enable our clients to build and operate voice agents and voice-enabled applications.

When you visit our website, request information, create an account or use our Services as a developer or authorized user of one of our clients, we process certain Personal Data about you, as described in this Privacy Policy.

For any question relating to this Privacy Policy or to the way Blynt processes your Personal Data, you may contact us at [email protected] or by post at the address above.

2. When this Privacy Policy applies

For the purposes of this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable natural person, within the meaning of Regulation (EU) 2016/679 (the "GDPR").

This Privacy Policy applies only where Blynt acts as data controller, meaning where Blynt determines the purposes and means of the Processing. This typically covers: (i) visitors to our website https://www.blynt.ai/; (ii) prospects and individuals who contact us or request a demo; and (iii) account holders, administrators and authorized users of our clients (in respect of their account data).

This Privacy Policy does not apply to the Personal Data that we process as data processor on behalf of our clients when they use the Services. That Processing is governed by our Data Processing Addendum entered with the relevant client.

3. Categories of Personal Data we process

Personal Data that you provide to us

Account Information. When you or your organization creates an account to use our Services, we collect your name, professional email address, password, organization name, role, and similar identifiers.
Contact Information. When you request information, a demo or support, we collect the contact details you share with us, such as name, professional email, phone number and postal address.
Feedback / Communications. If you contact us, respond to a survey, or share feedback, we process the content of your messages or responses and any Personal Data you choose to provide.
Payment Details. For paid Services, our third-party payment processor collects your billing information (name, email, billing address, payment card or banking information). We do not store full payment card numbers ourselves.

Personal Data generated as part of your use of our Services

Usage Data. Information about how you interact with our Services such as features used, actions taken, API calls made, configuration changes, session timestamps and durations.
Technical Data. When you use our Services, we may process logs or technical data that your browser and device automatically send to us, such as your IP address or the type of network protocol you use.
Cookies and similar technologies. We may use cookies and similar technologies when you use our Services or visit our website, for example to understand how you interact with our Services or our website. These may collect information about your device (e.g. operating system, web browser, phone carrier and manufacturer), your location (e.g. IP address) or your interaction with our Services or website. Please see our Cookie Policy for more information.

Personal Data collected from third parties

Information from third parties. Where permitted by applicable laws, we collect publicly available information from third-party sites or licensed datasets to enable the training of our models.

4. Why we process your Personal Data

We process your Personal Data for the following purposes and on the legal bases set out below.

Purpose	Personal Data concerned	Legal Basis
Create and manage your account on the Services	Account Information; Contact Information; Technical Data.	For the individual who enters the contract with us on their own behalf: performance of the contract. For authorized users acting on behalf of a client entity: our legitimate interest in enabling our client to access and manage the Services it has subscribed to, and in maintaining individual accountability and security on the platform.
Provide, operate and secure our Services and website	Account Information; Contact Information; Usage Data; Technical Data.	For the contracting individual: performance of the contract. For authorized users: our legitimate interest in delivering the Services to our client and ensuring their proper, secure and traceable operation.
Provide technical support and resolve incidents	Contact Information; Account Information; Feedback; Usage Data.	Performance of the contract where the requester is the contracting party; our legitimate interest in supporting our client's use of the Services for authorized users.
Communicate with you about service updates, security, changes to our terms or other operational matters	Account Information; Contact Information.	Performance of the contract for the contracting party; our legitimate interest in keeping authorized users informed of operational matters affecting the Services they use; compliance with our legal obligations (where notification is mandatory).
Process payments and handle accounting and billing	Account Information; Contact Information; Usage Data; Payment Details.	Performance of the contract for the contracting party; compliance with our legal obligations for retention of accounting records.
Analyse the usage of our Services and website	Usage Data; Technical Data; Cookies and Similar Technologies.	Our legitimate interests in understanding the use of our Services and website, and your consent where applicable laws require your consent.
Protect the security and integrity of our Services and prevent fraud or abuse	Account Information; Usage Data; Technical Data.	Our legitimate interest in the security of our Services.
Investigate, exercise or defend our legal rights, including in the context of disputes	All categories, as relevant.	Our legitimate interests in protecting and exercising our legal rights.
Research and development of our Models	Information from Third Parties.	Our legitimate interest in developing and providing state-of-the-art Models.
Comply with our legal and regulatory obligations	All categories, as relevant.	Compliance with our legal obligations.
Respond to your requests to exercise your rights over your Personal Data	Contact Information; Account Information; relevant identifying data.	Compliance with our legal obligations.

5. How long we keep your Personal Data

We retain your Personal Data only for the time necessary to fulfil the purposes for which we collected it, and in any event for no longer than required by applicable law. When determining the specific retention period, we consider various factors, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and any relevant statute of limitations.

6. Who we share your Personal Data with

We share your Personal Data only with the following categories of recipients, and only to the extent necessary for the relevant purpose:

Our staff, on a need-to-know basis and subject to confidentiality obligations and security training.
Our service providers, acting as processors on our behalf, including cloud infrastructure providers, payment processors, authentication providers, emailing tools, and analytics tools.
Our professional advisors, such as lawyers, auditors, accountants, bankers and insurers, where necessary in the course of the professional services they render to us.
Competent authorities and other third parties, such as law enforcement agencies, regulators or courts, where we believe in good faith that disclosure is necessary or appropriate to comply with our legal obligations, to enforce our terms, or to protect our rights or those of third parties.

7. Transfers outside the European Economic Area (EEA)

We prioritize service providers established and processing data within the European Economic Area (EEA). Where Personal Data is transferred outside the EEA, we ensure that the transfer is made:

to a country recognized by the European Commission as providing an adequate level of protection; or
subject to appropriate safeguards, such as the standard contractual clauses adopted by the European Commission, and, where required, supplementary technical, contractual and organizational measures.

You may request a copy of the safeguards in place for transfers concerning you by contacting us at [email protected].

8. Your rights over your Personal Data

In accordance with the GDPR and applicable data protection laws, you have the following rights over your Personal Data:

Right of access. You have the right to know whether we process your Personal Data and, if so, to obtain a copy and further information about that Processing.
Right to rectification. You have the right to ask us to update or correct your Personal Data if it is inaccurate or incomplete.
Right to erasure. You have the right to ask us to delete your Personal Data, unless we are required or entitled to keep it.
Right to restriction. You have the right to ask us to restrict the Processing of your Personal Data in certain circumstances.
Right to object. You have the right to object to the Processing of your Personal Data based on our legitimate interests.
Right to withdraw consent. Where the Processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of Processing carried out before the withdrawal.
Right to portability. Where the Processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive the Personal Data you provided us in a structured, commonly used and machine-readable format, or to ask us to transmit it to another controller where technically feasible.
Right to define directives concerning the use of your Personal Data after your death, in accordance with Article 85 of the French Data Protection Act.

You can exercise these rights at any time by contacting us at [email protected] or by post at our registered office (see Section 1).

If you consider that the Processing of your Personal Data infringes the GDPR, you have the right to lodge a complaint with a competent supervisory authority, including the French data protection authority (the CNIL).

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, in our Services or in applicable law. We will indicate the date of the most recent update at the top of this page. Where the changes are material, we will notify you in advance by email (if you have an account) or by a prominent notice on our website. Please check this page regularly.