Privacy.

Who is responsible

The data controller is JOHN.V SONO EVENT, a French SAS with a share capital of €1,000, 30 avenue Jean Perrin, 92330 Sceaux, France, registered with the Nanterre trade register under number 931 801 732. For any question about your data: by phone on +33 1 59 48 02 97, by email at [email protected], through the contact form or by post to our registered office.

What we receive

• Request form: your name, your phone number or email, the type of event, the date, the venue, the number of guests, your needs and your message.
• Chat with Max: the messages you write, and your phone number if you give it.
• WhatsApp: if you write to us on WhatsApp, your number, your profile name and your messages. WhatsApp is a Meta service.
• Calls to +33 1 59 48 02 97: the line is answered by Max, our AI assistant. We receive your number, a written transcript of the conversation and a summary of your request. The call may also be recorded by our telephony provider.
• Technical data: IP address, date and page visited, used to keep the site secure and prevent abuse.

Please do not send us sensitive information (health, bank details): it is not needed for a quote.

Why

• To answer your request and prepare your quote (pre-contractual steps taken at your request).
• To organise and deliver the service if you confirm it (performance of the contract).
• To keep our accounts and meet our legal obligations (legal obligation).
• To protect the site and the assistant against abuse (legitimate interest).

We do not send newsletters, and we never sell or rent your data.

Who has access

The JOHN.V SONO EVENT team, only to handle your request. Our technical providers process some data on our behalf and according to our instructions:

• Railway (United States): hosting of the website and of the assistant's server.
• Cloudflare (United States): domain name, page delivery and protection against attacks.
• Anthropic (United States): the artificial intelligence model that writes Max's replies in the chat.
• Vapi, ElevenLabs and OpenAI (United States): the phone assistant, meaning call handling, speech recognition and synthesis, and Max's replies.
• Twilio, WhatsApp and Resend (United States): the phone line and forwarding your request to the team by WhatsApp, text message or email.

Transfers outside the European Union

These providers are based in the United States or process data there. These transfers are covered by the safeguards provided by the GDPR: the EU-US Data Privacy Framework or the European Commission standard contractual clauses, depending on the provider.

How long

• Requests that go no further: 3 years after our last exchange, then deleted.
• Customers: for the duration of the business relationship. Invoices and accounting records are kept for 10 years, as required by law.
• Chat conversation in your browser: until you close the tab.
• Technical data: for a limited time, for security only.

Cookies and storage in your browser

The site uses no advertising cookies and no audience measurement tool. It only keeps in your browser what it needs to work: your equipment list for the quote request, the current conversation with Max and the fact that you closed the announcement bar. This information stays on your device, and you can delete it at any time from your browser settings.

If we ever add audience measurement, it will only run with your consent, asked through a banner.

Your rights

You can ask for access to your data, its correction or erasure, the restriction of processing or data portability, and you can object to processing. You can also set instructions for what happens to your data after your death. To exercise these rights, contact us by phone, by email, through the contact form or by post to our registered office: we reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).