How data is handled.

Benjamin Crozat EI is responsible for personal data used to run the Vite Clinic website, accounts, direct enquiries, and billing administration.

• Operator: Benjamin Crozat EI, SIREN 750 497 570.
• Contact: benjamin@viteclinic.ch, 30 boulevard de Cessole, 06100 Nice, France.

For patient calls, the clinic normally decides why and how call data is used and is the controller. Vite Clinic is its processor while following documented instructions. Benjamin Crozat EI remains controller for Vite Clinic accounts, billing, security, and direct business administration.

• The clinic remains responsible for its patient information notice and lawful use of the service.
• Call content can contain or reveal sensitive personal data, including health data, and can be covered by Swiss professional secrecy.
• Any Vite Clinic own-purpose use of call content would change this role analysis and is not permitted by the current launch terms.

The information depends on how you use the service. We limit collection to what is needed to operate, secure, support, and bill it.

• Name, work email, login and authentication information, organization, clinic settings, and team roles.
• Billing status, invoice references, subscription identifiers, and usage counts.
• Security, audit, support, deployment, and operational log data.
• For live calls: caller number, call metadata, audio while the call is active, transcript, stated request, and agreed handoff details. This can reveal sensitive health data.
• The public demo uses synthetic clinic data. Audio and words are processed for the short session but Vite Clinic creates no clinic, billing, PMS, or call record from it.

Benjamin Crozat EI uses website, account, support, security, and billing data to take steps toward a contract, provide the service, meet legal duties, and pursue proportionate legitimate interests. For patient calls, the clinic chooses and documents the legal basis; Vite Clinic processes the data only on the clinic’s instructions.

• Create accounts, configure clinics, route calls, and present requests to authorized clinic staff.
• Authenticate users, prevent abuse, investigate incidents, and maintain reliable operations.
• Provide support, communicate about the pilot, measure billable usage, and administer payments.
• Comply with accounting, tax, court, or regulatory obligations.
• Before live use, disclose that the caller is speaking to AI, explain transcription and any recording, obtain the required consent, and provide a practical human route that stops AI collection when consent is refused.

Persistent application data is hosted with Infomaniak Network SA in Switzerland. Live audio and call content are separately processed by telephony and AI providers. Regional configuration is not proof that every data category stays in that region.

• Twilio Ireland Limited: European routing only after the Dublin account, credentials, phone routing, and test call are verified; otherwise calls use the disclosed United States route, with carrier-country exceptions.
• OpenAI Ireland Ltd.: European processing only after the provider account, contract amendment, eligible models, endpoint settings, and reduced-retention controls are verified; otherwise processing may be global.
• Stripe Payments Europe, Limited: Irish contracting entity with US/global payment processing, without call audio or transcripts.
• Provider subprocessors, destinations, retention, and safeguards are detailed on the Trust & security page and in the launch register.

Data is kept only as long as needed for the stated purpose, contractual service, security, or applicable record-keeping duty.

• Raw audio is not intentionally stored by Vite Clinic. Sensitive transcript, caller, and handoff content is scrubbed after 30 days.
• Reduced operational call records are deleted after 365 days. Audit records use 365 days and application logs default to 14 days.
• Account and clinic configuration data is kept while the account is active, then removed or anonymized subject to required records.
• Billing and accounting records are kept for the periods required by law.
• Backups can persist after live deletion; the exact production backup window and deletion evidence remain a launch check.

Vite Clinic uses essential session and security cookies. Outfit is served with the application; no third-party font service is used.

• Essential cookies support sign-in, session continuity, and cross-site request protection.
• No advertising cookies or behavioural advertising profiles are used by Vite Clinic.