Privacy Policy

Welcome to Gradium

We care about your privacy and want to be upfront about how we treat your Personal Data: what we do collect, why we collect it, where it all goes, and for how long. So, we wrote this privacy policy (the “Privacy Policy”) to explain it to you in the clearest, simplest way we know how.

In addition to this Privacy Policy, please read our Terms of Service here https://gradium.ai/terms-of-service which apply to your use of our website and services.

Personal Data is defined as any information relating to a natural person who can be identified, directly or indirectly. It is for example: the name, first name, email and postal address of a physical person, his image on a photograph or a video, an IP address, a location data, etc (“Personal Data”).

1. Who are we?

Our corporate information is the following: Gradium, having its registered office at 151bis rue Saint-Honoré, 75001 Paris, France, registered at the trade register of Paris, under number 989 284 955, and operating under the commercial name Gradium (« we » « us » « our »).

You can contact us by:

• Sending us a letter at Gradium, Attn: Privacy Team, 151bis rue Saint-Honoré, 75001 Paris, France.
• Sending us an email to contact@gradium.ai

We develop and provide to our customers speech-to-text and text-to-speech artificial intelligence models (our « AI Models » and « Services »).

2. Scope of the Privacy Policy

The Privacy Policy details the Personal Data collected and processed when customers use our Services and users visit our website located at https://gradium.ai (our “Website”) (“you”, “your”), the purposes for which your Personal Data is processed, how we use it, and your rights over your Personal Data.

This Privacy Policy details our processing of your Personal Data that we carry out as data controller, meaning when we decide the purpose and means of such processing. The details of the processing of your Personal Data that we carry out as data processor on behalf of our customers deemed data controllers as part of their use of our Services are described in our Data Processing Agreement.

3. What Personal Data do we process?

We process the following Personal Data about you:

• Personal Data that you provide to us:
• Civil Identity. When you create an account to use our Services, we may ask you to provide your civil identity such as your name, first name, and date of birth.
• Account Information. When you create an account to use our Services, we may ask you to provide account information such as your username (i.e. your email address) and password.
• Contact Information. When you create an account to use our Services, make a request to us or subscribe to our newsletter, we may ask you to provide contact information such as your email address and phone number.
• Input. We process any text, audio or other content that you submit into our Services, and any associated metadata, to generate text content transcribing your audio input and/or synthetic audio transcribing your text input.
• Voice Sample. We collect any voice recording that you choose to share with us, and any associated metadata, to provide our Services and so that we can reproduce the voice at your request and display it as part of our Services to you.
• Feedback/Communications. If you contact us directly or express interest in using our Services, we collect Personal Data including your name, email address, the contents of a message or attachments that you may send to us, and other information you choose to provide. If you subscribe to our newsletter, then we will collect Personal Data from you, such as your name and email address. If you respond to a survey, we will capture your responses and any other Personal Data you provide.
• Payment Details. When you register to use any of our paid Services, our third-party payment processor, Stripe, collects and processes your payment-related information, such as your name, email, billing address, credit/debit card or banking information or other financial information. Please consult Stripe's privacy policy here https://stripe.com/fr/privacy.
• Personal Data that are generated as part of your use of our Services or Website:
• Output. When you use our Services, we may generate a text and/or voice content based on your Input and transcribing your Input, and which may, only at your request, reproduce the Voice Sample that you provided to us.
• Usage Data. When you use our Services, we process Personal Data that relates to how you use our Services (e.g. number of credits).
• Technical Data. When you use our Services or visit our Website, we may process logs or technical data that your browser and device automatically send to us, such as your IP address or the type of network protocol you use.
• Cookies and Similar Technologies. We may use cookies and similar technologies (e.g. SDKs, pixels etc) when you use our Services or visit our Website, for example to understand how you interact with our Services, our Website or our newsletter.  These cookies and similar technologies may collect information about your device (e.g. operating system, web browser, phone carrier and manufacturer etc), your location (e.g. IP address) or your interaction with our Services or Website.
• Personal Data collected from third parties:
• Information from Third Parties. Where permitted by applicable laws, we collect publicly available information from third-party sites or licensed datasets to enable the training of our Models.
• Third-Party Logins. If you choose to register or log in to our Services using your account with third parties, we receive Personal Data about you from such third parties, such as your name, email address, username, and profile picture.

4. Why do we process your Personal Data?

5. For how long do we keep your Personal Data?

We keep your Personal Data only for the duration necessary to fulfil the purpose of our processing. When determining the specific retention period, we consider various factors, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and any relevant statute of limitations.

6. Who are the recipients of your Personal Data?

The following recipients may have access to your Personal Data, and may process your Personal Data:

• Internal team members and affiliates for the purposes listed in Section 3 (e.g. account management, support etc).
• Our service providers for the purposes listed in Section 3 (e.g. hosting providers, labelling service providers, payment service provider etc).
• Our professional advisors such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.
• Authorities and others, such as law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate to comply with our legal obligations.
• Any undertaking taking over our activities and any affiliate thereof, through any legal means such as corporate divestiture, merger, consolidation, acquisition, reorganisation, sale, asset contribution, or other disposition of all or any portion of the business or assets of, or equity interests in Gradium (including, in connection with a bankruptcy or similar proceedings), including any corporation that may receive the assets and resources of Gradium.

7. Transfers outside the EU

Even though, we prioritize the selection of providers within the European Union, we may transfer your Personal Data outside the EU, either because our service providers and recipients may be located outside the EU or their own service providers or recipients may process your Personal Data outside the EU.

We take the necessary steps to ensure that all transfers of your Personal Data outside the EU are either towards countries deemed to provide adequate protection by the EU Commission or have adequate safeguards in compliance with Article 46 of the GDPR, such as the most recent version of the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework. You may request a copy of these safeguards by contacting us as indicated in Section 2 above.

8. What are your rights on your Personal Data?

In application of the GDPR, you can exercise the following rights on your Personal Data:

• Access. You have the right to know if we process your Personal Data. You also have the right to request a copy of such Personal Data and to obtain further information about the way we process your Personal Data.
• Rectification. You have the right to ask us to update or correct your Personal Data if your Personal Data is inaccurate.
• Objection. You have the right to object to the processing of your Personal Data, including to opt-out and oppose our processing of your Personal Data for the improvement of our Models or for any marketing purposes. This right does not apply when we have a legal obligation to process your Personal Data.
• Consent withdrawal. You have the right to withdraw your consent to the processing of your Personal Data at any time, where such processing is based on your consent.
• Deletion. You have the right to delete and/or ask us to delete your Personal Data, unless we need to keep your Personal Data to comply with our legal obligations or protect our rights or third party rights.
• Limitation. You have the right to ask us to freeze the processing of your Personal Data.
• Automated decision. You have the right to not be subject to an automated decision (including profiling) and to appeal such a decision. We do not engage in profiling or automated decision-making in the processing of your Personal Data.
• Portability. You have the right to obtain and transfer your Personal Data to another entity.
• Post mortem. You have the right to tell us how you would like us to process your Personal Data after your death.
• Lodge a complaint. You have the right to lodge a complaint before the competent data protection authority, including the French data protection authority (the CNIL).

You can exercise these rights at all times:

• By contacting us at the following email address contact: dpo@gradium.ai
• By sending us a letter to our following postal address: Gradium, Attn: Privacy Team, 151bis rue Saint-Honoré, 75001 Paris, France.

9. Provisions specific to children

As set forth in our Terms of Service, our Services are not intended for children, and we do not seek or knowingly collect any Personal Data from children. If we become aware that we have unknowingly collected Personal Data from a child, we will delete such Personal Data. If you are the parent or guardian of a child who has provided us with their Personal Data, you may contact us using the contact information set forth in Sections 2 and 8 to request that it be deleted.

10. Provisions specific to California

These CCPA Terms apply when the California Consumer Privacy Act of 2018, Cal. Civ. Code §§1798.100–1798.199.100, as amended, and the CCPA regulations, Cal. Code Regs. §§7000–7304 (together, the “CCPA”) applies to your use of the Services and any related processing your Personal Data. The terms ”Share”, and ”Shared” shall have the same meaning given to them under the CCPA.

Where the CCPA applies, we acknowledge that we do not receive Personal Data as consideration for any Services provided to you. We: (i) are responsible for compliance with our obligations under this Privacy Policy, (ii) are responsible for compliance with our obligations as a service provider under the CCPA, and (iii) shall provide the same level of privacy protection as required by the CCPA. We shall notify you if we reasonably determine that we cannot meet our obligations under the CCPA, and in such circumstances, and upon provision of notice to us, you shall be entitled to take reasonable and appropriate steps to remediate unauthorized use of your Personal Data. We must not process the Personal Data for any purpose other than for the purpose of performance of the agreement between you and us, except where and to the extent permitted by the CCPA.

GRADIUM shall not: (i) Sell or Share your Personal Data or (ii) process your Personal Data for targeted and/or cross context behavioral advertising.

You may designate an authorized agent, in writing or through a power of attorney, to request to exercise your rights set forth in Section 8 on your behalf. If you should designate an authorized agent to exercise your rights under the CCPA, we may require that you provide your authorized agent with written permission to exercise your rights and to verify your own identity with us. If your authorized agent does not submit proof that they have been authorized by you to submit verified requests for disclosure and deletion, we reserve the right to deny such a request that we have received and will explain to your authorized agent why we have denied such request. The authorized agent may submit a request to exercise these rights by emailing the letter of authorization or power of attorney as indicated in Sections 2 and 8.

11. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time as our processing of Personal Data continuously evolve. If you have an account, we will notify you of these changes, otherwise please make sure to check this Privacy Policy frequently.