Privacy Policy

AMBBR (“we”, “us”) operates AskLucien, also called Lucien, an AI phone concierge that places outbound calls to individuals, businesses and organizations on your behalf. This policy explains what we collect, why, and your rights. If you are in the EU/EEA or UK, we act as the data controller for your account data.

Information we collect

Account data you provide: name, email, password (stored hashed), and optional settings (preferred language, currency). With Google sign-in we receive your name, email, and profile image from Google.

Saved booking details you choose to store: a contact phone number, email, or address. The agent shares them with the recipient only when the task needs them — a reservation in your name, a callback, a delivery.

Request & call data: the tasks you ask us to perform, the numbers and recipients to call, and the conversations our AI agent has on your behalf — including transcripts, AI summaries, and collected results. Call audio is processed to carry out the conversation, and you must only instruct calls you may lawfully make.

Billing data: your prepaid credit balance and ledger. Card details are processed and stored by Stripe — we never see or store full card numbers.

Technical data: consented usage and acquisition analytics across the public site and app; error reports when something breaks; and the cookies described below.

Technical diagnostics

Technical diagnostics help us investigate failures and maintain reliability. Web error reports use Sentry. Better Stack checks public pages, aggregate backend health and job completion; Checkly uses a dedicated empty test account for availability checks.

How we use it

To provide the service (place and reconcile calls, return results), to bill prepaid credit, to secure accounts and prevent abuse, to send transactional email (verification, password reset, receipts), and to measure and improve the product and site. Where the GDPR applies, we rely on performance of a contract (running the service), legitimate interests (security and fraud prevention), legal obligations (accounting), and consent (analytics across the public site and app).

Teams & organizations

If your account belongs to an organization, its owners and admins can see the organization’s requests, results, and billing. If you use our API, requests made with your API keys are processed like any other, and webhook events are delivered to the endpoints your organization configures.

Connecting AskLucien to ChatGPT or Claude

When you choose to connect AskLucien to ChatGPT or Claude, we link your AskLucien account to that assistant with the permissions you approve. Depending on those permissions, account linking shares your account identifier and verified email with the assistant provider. You can review the requested permissions before connecting.

For a call requested through a connected assistant, we receive the task, destination phone number, requested language and duration, and any optional business information or name you choose to share. We receive the information sent to our tools for that task, rather than access to your full chat history. Our calling providers process the approved call details and call content as described in this policy.

We return the call preview and maximum charge, then the call reference, status, outcome, short summary and settled charge to the connected assistant so you can review the call and read its result in your conversation. The connector does not return full transcripts, unrelated call history, payment-card details or account passwords. The assistant provider processes the information it receives under its own terms and privacy policy.

You can disconnect the assistant in AskLucien’s connection settings. Disconnection stops its subsequent access to AskLucien and prevents calls awaiting dispatch from starting through that connection. It does not undo calls already submitted or erase information already returned to the assistant. AskLucien records remain subject to the retention, deletion and access provisions below.

Service providers (sub-processors)

We share the minimum data necessary with providers who help us run the service: telephony and voice (Telnyx; ElevenLabs and Twilio on the voice path), AI models that generate the agent’s speech and analysis (Anthropic, OpenAI, Google, and models hosted by our voice providers), business search (Google Places, which receives your search queries in discovery mode), payments (Stripe), email (Mailgun), authentication (Google), error monitoring (Sentry), product analytics (Google Analytics and Contentsquare, only with consent), database hosting (Supabase), and hosting/storage/analytics (Vercel, including data storage). Call content is necessarily shared with the telephony and AI providers to place the call.

AI sharing and optional dictation in the iPhone app

Before you use AI features in the iPhone app, we ask for permission to share request messages, selected contact details, relevant profile details, call audio and transcripts with our AI providers. Depending on the feature, these providers include OpenAI, Anthropic and Google, with ElevenLabs for voice. Request dictation is currently unavailable. Google Places receives business-search queries. Telnyx and, where used, Twilio connect calls. The person you call hears the information you authorize Lucien to share. You can decline AI sharing and continue to browse your account and previous requests. You can change the choice in Settings. Turning it off stops new AI requests from that account on that device; it does not stop calls or schedules already confirmed, or delete data already processed. Cancel scheduled calls in Requests or use account deletion and the privacy contact for deletion requests.

Native app infrastructure and purchases

The iPhone app connects to our V2 service, whose application, database and data storage run on Amazon Web Services. Other or legacy web deployments may use Vercel and Supabase. Authentication may use Apple or Google when you select those sign-in methods. App Store transaction identifiers, product identifiers and signed purchase information are used to verify purchases and maintain the credit ledger; we do not receive your full payment-card details from Apple. Usage analytics in the native app uses Google Firebase Analytics only after your separate analytics choice.

iPhone welcome-offer verification

iPhone welcome-offer verification: we use Apple DeviceCheck to remember whether an iPhone has already received the welcome offer, and App Attest to verify requests from our genuine app. Apple stores a small per-device promotion flag, which can survive app reinstallation, device reset and account deletion. Our server stores account-linked public verification keys, short-lived verification challenges and claim results to prevent repeated grants and investigate failures. Account-linked verification records are removed when the account is deleted; required billing records follow the retention rules below. If a shared or secondhand iPhone is incorrectly excluded, contact hello@asklucien.com so we can review the promotion flag.

Call data and transcripts

Call audio is processed by voice and telephony providers to carry out the conversation. Transcripts and summaries are saved to provide your results and call history. Providers process call content under their applicable data policies.

Call information & consent

You are responsible for ensuring you have the right to instruct calls to the numbers you provide, and for complying with calling and consent rules in the relevant jurisdictions. Transcripts and summaries are stored so you can review the outcome.

Optional city detection

When you choose “Use my location” or a location-aware home shortcut, your browser contacts BigDataCloud directly to find your city. With your browser permission, it sends your current device coordinates. If device location is unavailable or the coordinate lookup fails, BigDataCloud can estimate your city from your IP address. BigDataCloud receives your IP address with either lookup.

BigDataCloud states that it also aggregates coordinate and IP signals anonymously to improve and validate its own IP geolocation data. Provider details: https://www.bigdatacloud.com/docs/article/why-is-reverse-geocoding-api-free.

We keep the city, country, lookup source, language and expiry in the lucien-city browser cookie for up to 24 hours; this cookie contains no precise coordinates. The city may be added to a shortcut prompt and becomes part of the request if you submit it. “Forget location” clears the saved city and stops further lookups in the current page until you choose to use location again. It does not remove city names already inserted into a prompt or submitted request; you can edit the prompt before sending it.

BigDataCloud location data practices

Cookies

We use a small set of first-party cookies: NEXT_LOCALE remembers your language; hp_ab remembers which version of our homepage you saw so it stays consistent; and if you start a request from the homepage, cai_funnel/cai_prompt carry your entry point and the text you typed into the app for up to one hour — by cookie rather than in the URL, so it stays out of logs and browser history. If you accept analytics, cai_acquisition keeps the first traffic source, campaign, and landing page for up to 90 days so we can connect a signup to its origin. Analytics run only after you accept them, and your choice applies across the public site and app. You can decline without losing functionality. Google Analytics then sets its own measurement cookies (such as _ga) and receives only a pseudonymous account identifier—not your name or email.

Retention & deletion

We keep account and call data — including summaries and transcripts — for as long as your account is active and as needed to provide the service and meet legal and accounting obligations. You can delete individual requests, and you can ask us to delete your account, after which we delete or anonymize your data except what we are legally required to keep.

After account deletion, we retain only necessary billing identity (billing name and email), original internal and Stripe references, invoices, payment and credit movements, refunds and disputes in a separate, restricted financial archive. Call content, request titles, phone numbers and free-text notes are not retained in that archive. It cannot be used to sign in or spend credit. Accounting records are retained for 10 years after the end of the relevant financial year (31 December); for example, 2026 records are retained through 31 December 2036. Unresolved disputes and documented legal holds may require longer retention. Closed financial records and their unneeded billing identity are deleted after the applicable retention period.

Acceptance and withdrawal evidence is kept separately from call content for handling the contract, consumer requests and legal claims, with access restricted to the personnel handling those purposes. A minimal deletion audit is kept for 90 days, or with retained financial evidence for its retention period. Data from deleted workspaces are queued for deletion with retries if a provider is unavailable. Shared workspaces remain available to their other members. Provider copies and backups have distinct deletion cycles; contact privacy@asklucien.com for the applicable arrangements.

Your rights

Subject to applicable law (including the GDPR), you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. To exercise these, contact us below. You also have the right to complain to your local data protection authority (in France, the CNIL).

International transfers & security

Some providers process data outside your country, including in the United States; where required we rely on appropriate safeguards such as the EU Standard Contractual Clauses. We use industry-standard measures to protect your data — encryption in transit, hashed passwords, access controls — though no method is perfectly secure.

Children

The service is not directed to anyone under 16.

Changes & contact

We may update this policy and will revise the date above; material changes will be communicated in the app or by email. Questions or requests: privacy@asklucien.com.