GDPR
- Data hosted in the European Union
- Every account walled off, checked by automated tests
- Automatic erasure on fixed schedules
- Data processing agreement (Article 28) provided on request
Platform · Security and GDPR
Your data protected, in every exchange.
Hosting in the European Union, encrypted transcripts, automatic erasure, an AI that says so from the first sentence. What your DPO and your IT team will ask, Cantya already does.
5.0/5 · Google ratingMultichannelAI voice agent, website chat, AI WhatsApp
ConnectorsCalendars, e-mail, messages9:41
incoming callDurand practice
Cantya answers
live · 00:12Hello, you are speaking with an artificial intelligence. Durand practice, how can I help?
Hello, I would like to move my Thursday appointment.
Of course. Let me look at the free slots.
Mute
Keypad
Speaker
Exchange logged
AI disclosed upfront
Encrypted transcript
Rooted in Nouvelle-Aquitaine
They trust Cantya
- EUHostingYour data is hosted in the European Union.
- 1st sentenceThe AI says soOn every call, as the EU AI Act requires.
- 12 monthsThen erasedTranscripts erase themselves, with nothing for you to do.
- 2FAAnd passkeysTwo-factor authentication available on every account.
Compliance
GDPR and the AI Act, built in from the start.
Cantya handles your customers’ voices, numbers and requests. Each kind of processing has its rule.
EU AI Act
- On the phone, Cantya says upfront that it is an artificial intelligence
- On WhatsApp, Messenger, Instagram and Telegram, the first message says so too
- Every exchange leaves a transcript and a summary you can read
- Your team takes over the written conversation or calls the person back
Access and traceability
Everyone sees what they need to see.
Accounts are protected, roles are clear and interventions leave a trace.
- Three rolesAdministrator, manager or read-only, for each member of the team.
- Two-factor authenticationA one-time code, or a passkey on your phone or computer.
- Strong passwordsLength and complexity enforced, and any password seen in a known breach refused.
- Limited attemptsRepeated sign-in attempts are slowed down automatically.
- Walled-off accountsOne company’s data is never visible to another. Automated tests check it.
- Logged interventionsWhen our team works on your account, the action is recorded: who, when, what.
Hosting and encryption
Hosted in Europe, encrypted on the way.
The service is hosted in the European Union. When a sub-processor outside the EU is involved, the transfer is governed by the European Commission’s Standard Contractual Clauses.
- Hosting in the EUThe application and the database are hosted in the European Union.
- Voice processed in BelgiumThe voice conversation goes through Google Cloud, in its Belgian region.
- SMS sent from IrelandText messages go out through our provider’s Irish region.
- HTTPS everywhereEvery connection is encrypted, and browsers are told to stay on HTTPS.
- Encrypted transcriptsTranscripts and summaries are encrypted in the database.
- No audio recorded by defaultIf it is switched on for your account, audio is encrypted and erased after thirty days.
Retention
Nothing is kept longer than planned.
Periods are set in advance and erasure runs every night, with no one involved.
| Data | Erased after |
|---|---|
| Call transcripts and summaries | 12 months |
| Written conversations (WhatsApp, Messenger, Instagram, Telegram) | 12 months |
| Photos and files received by message | 90 days |
| Audio recordings, if switched on | 30 days |
| Transcript of a demo call | 90 days |
| Data of a closed account | 30 days (erased or anonymised) |
| Proof of consent to a demo call | 3 years (legal requirement) |
When an account is closed, its contacts are anonymised: their number is replaced by an unreadable fingerprint.
Agreement and rights
A clear framework, for you and for your customers.
You are the controller, Cantya is your processor. The roles are in writing.
- Data processing agreementThe agreement required by Article 28 of the GDPR is provided on request, with Standard Contractual Clauses where needed.
- Published sub-processorsOur sub-processors and their locations are listed in our privacy policy.
- A notice for your callersEach company has a public privacy page to share with its customers.
- Right to erasureA contact is deleted in one click. A closed account is erased within thirty days.
- A dedicated addressRequests for access, correction or erasure go to privacy@cantya.com.
- Cookies your wayOn our site, no audience measurement without your consent, which you can change at any time.
Outbound calls
Calling your customers, by the rules.
When Cantya calls on your behalf, the rules are in the product, not in a manual.
- Legal hoursMonday to Friday, 10 am to 1 pm and 2 pm to 8 pm (French rules), never outside.
- Immediate opt-out“Don’t call me again” goes straight onto a list shared by all your campaigns.
- Blocked numbersA number you block is no longer handled: the call is politely cut short.
They use it every day
What our customers say about it.
« J’ai mis Cantya en place pour gérer le SAV de ma boutique et franchement, ça m’enlève une bonne charge. Je m’y retrouve beaucoup mieux dans les demandes clients et je passe moins de temps dessus. » « On utilise Cantya pour prendre le relais sur nos appels quand on est déjà en intervention ou qu’on ne peut pas décrocher. C’est vraiment pratique, on évite de perdre des appels et nos clients ont toujours une réponse. Ça nous soulage beaucoup au quotidien. » « Nous utilisons ce service pour la relance de nos impayés et nous en somme très satisfaits. Un vrai gain de temps au quotidien, avec des retours positifs et une gestion beaucoup plus efficace. » « Je suis ravie de l’usage Canthya qui me permet de proposer un service conseil adapté à nos client architectes. Je conseille l’outil !! » « Très bonne expérience avec Cantya ! Service pratique, efficace et simple à utiliser. L’équipe est professionnelle, réactive et à l’écoute. Je recommande sans hésiter ! » Don’t take our word for it.Leave your number: Cantya calls you back within 60 seconds and answers the way it would for your customers.
Pricing
Your AI agent from 24 € a month
Live chat is free for life: your team answers. With the AI chatbot, Cantya answers for you 24/7, and you add the AI voice agent or AI WhatsApp whenever you like. No commitment.
Live chat
Your team answers live.
0 €for life
No payment card, no commitment.
Unlimited conversations
- Your team answers live
- 1 website, a chat window in your colours
- Shared inbox
- No automatic replies by the AI
- A “by Cantya” mention on the bubble
Essentiel
To get started gently.
2 months free
24 €excl. VAT / mo
288 € excl. VAT billed once a year
400 credits is about:
- ≈ 400 written conversations
- ≈ 100 text messages
Everything in Free, plus:
- AI chatbot
Optional
The AI answers for you, and you can take over whenever you like.
Pro
For a busy business.
2 months free
65 €excl. VAT / mo
780 € excl. VAT billed once a year
1,250 credits is about:
- ≈ 1,250 written conversations
- ≈ 313 text messages
Everything in Essentiel, plus:
- AI chatbot
Optional
The AI answers for you, and you can take over whenever you like.
Premium
For a high volume of conversations.
2 months free
149 €excl. VAT / mo
1 788 € excl. VAT billed once a year
3,200 credits is about:
- ≈ 3,200 written conversations
- ≈ 800 text messages
Everything in Pro, plus:
- AI chatbot
Optional
The AI answers for you, and you can take over whenever you like.
Credits are shared according to your use, between calls and written messages. Never cut off: the AI voice agent always picks up, and the AI chatbot switches back to Live chat once the credits are used up.
FAQ
Security and GDPR, plainly.
Another question?An advisor answers or calls you back.Talk to the team
Where is the data hosted?
In the European Union. Some processing is carried out by sub-processors outside the EU, notably in the United States; these transfers are governed by the European Commission’s Standard Contractual Clauses. The list is in our privacy policy.
Is the data encrypted?
Yes in transit, over HTTPS. At rest, transcripts, summaries and audio recordings (if switched on) are encrypted in the database.
Does Cantya comply with the AI Act?
Cantya says it is an artificial intelligence in the first sentence of every call, and in the first message on messaging apps. That is the transparency duty set by the European regulation.
How long do you keep data?
Twelve months for transcripts and written conversations, thirty days for audio if it is recorded, then automatic erasure. The details are in the retention table.
Can you sign a data processing agreement?
Yes. The agreement required by Article 28 of the GDPR is provided on request. Write to privacy@cantya.com.
Are calls recorded?
Not by default. Audio recording is only switched on on request, account by account; the audio is then encrypted and erased after thirty days. The written transcript is kept for twelve months.
How does a customer exercise their rights?
They can contact you, or write to privacy@cantya.com. You can delete a contact at any time; when an account is closed, its data is erased or anonymised within thirty days.
Who at Cantya can access my account?
Our team can work on an account for support. Every intervention is recorded in a log: who, when, what.
Hear Cantya
Try a call. It says it is an AI from the first sentence.
Enter your number, Cantya calls you within a minute. Free, no sign-up.
Or book a demo with an expert- Guided set-up
- GDPR, hosted in the EU
- No commitment