Last updated: October 22nd, 2026
1. Purpose of this document
pyannote (hereinafter “pyannote”, “pyannoteAI” or “We”) undertakes to collect and process your personal data in accordance with the regulations applicable to the protection of personal data, in particular in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data or “RGPD”) and the “Informatique et Libertés” law (law of January 6, 1978 relating to information technology, files and freedoms).
The purpose of this Policy is to inform you of the processing of your personal data carried out by pyannote as data controller.
The data controller is Pyannote SAS, a French simplified joint stock company (“Société par Actions Simplifiée”), under number 924 837 636 with the Registry of Trade and Companies of Nanterre, whose head office is located 14 rue Beffroy, 92200 Neuilly-sur-Seine when browsing on our Websites (http://pyannote.ai/, http://docs.pyannote.ai/, http://dashboard.pyannote.ai/), when you use our services, directly or on behalf of the company you represent (the “Customer”), whether through an account on our Platform or under a quotation or a services agreement, or when you are in contact with us as a prospect.
However, when we provide our services to our Customers, we process personal data on their behalf and for their own purposes, our Customers act therefore as data controllers in accordance with Article 4 of GDPR while we act as data processor. Such relationship is governed by the Data Processing Agreement included in the applicable General Terms and Conditions or services agreement.
Certain data processed in the context of our services, in particular job metadata and usage data, are processed both on behalf of our Customers, as data processor, in order to provide the services, and by pyannote, as data controller, for its own purposes described below.
For more information on the methods of collecting and processing your data via cookies and other tracers (“Cookies”) on the Platform, please consult the attached Cookies Policy.
2. What personal data do we collect?
Personal data is a data that identifies an individual directly or indirectly, in particular by reference to an identifier such as a name.
Within the scope of our activities, we may collect the following personal data concerning the representatives, employees and users of our Customers and our prospects (where our Customer is a sole trader, these data also include data relating to the Customer itself):
Identification data (e.g., surname, first name, email address, team name, professional contact details);
Login data (e.g. logs, IP address);
Usage data (e.g., number, duration, type and status of jobs, models and options used, timestamps), including, for on-premises deployments, the technical usage signals transmitted by the solution to our servers (API key, software version, operating system, job identifiers and audio durations), to the exclusion of any audio content, transcript, voiceprint or output;
Payment and billing data (data related to your credit cards, purchase history, orders, invoices).
In this respect, it is specified that all personal data collected is necessary for the management of pyannote’s activities. If you do not provide this data or if you refuse to collect it, the management of pyannote’s activities will be difficult, if not impossible, and you will not be able to benefit fully from our services. Please note that data is mainly collected via the account creation form (dashboard of the solution) and/or through the use of our services (API and, for on-premises deployments, telemetry requests).
In any event, pyannote ensures that the personal data processed is adequate, relevant and not excessive in relation to the purposes for which it is collected and/or further processed.
3. Why do we collect your personal data?
pyannote collects, processes and stores your personal data as data controller for various purposes (“Purposes”), on the following legal grounds (“Legal basis”) and for a certain amount of time (“Data retention period”):
To comply with our legal and regulatory obligations
Compliance with our legal obligations (accounting and tax)
Invoices and the related supporting documents, including the usage statements on which they are based: 10 years.
In addition, the data relating to your transactions (with the exception of your banking data) are archived for probationary purposes for a period of 5 years.
4. Who are the recipients of your personal data?
The following categories of recipients will have access to your personal data:
The staff of our company;
Our processors, as listed here: https://trust.pyannote.ai/, including our hosting provider, CRM tool, mailing provider, audience measurement tool, payment service provider, billing tool, cookie management tool;
Our partners acting as independent data controllers. We accept no responsibility for the processing of personal data by our partners, and invite you to consult their general terms of use and privacy policy;
Any authority legally empowered to deal with it, in particular the judicial, police or administrative authorities, if they request so.
5. Are your personal data likely to be transferred outside the European Union?
Your personal data is hosted for the duration of the processing on the servers of the company AWS located in France.
As part of the tools, we use (see article on the recipients of your personal data, especially our processors), your personal data may be transferred outside the European Union. The transfer of your personal data in this context is secured with the use of following safeguards:
Either personal data are transferred to a country that has been recognized as ensuring an adequate level of protection by a decision of the European Commission, in accordance with article 45 of the GDPR: in this case, this country ensures a level of protection deemed sufficient and adequate to the provisions of the GDPR; or
The personal data are transferred to a country whose level of data protection has not been recognized as adequate to the GDPR: in this case these transfers are based on appropriate safeguards indicated in article 46 of the GDPR, adapted to each provider, including but not limited the execution of Standard Contractual Clauses approved by the European Commission, the application of Binding Corporate Rules or an approved certification mechanism; or
The personal data are transferred under any appropriate safeguards described in Chapter V of the GDPR.
6. What rights can you exercise on your personal data?
You have the following rights regarding your personal data:
Right to be informed: this is precisely why we have drafted this privacy policy as defined by articles 13 and 14 of the GDPR.
Right of access: you have the right to access all your personal data at any time as defined by article 15 of the GDPR.
Right to rectification: you have the right to rectify your inaccurate, incomplete or obsolete personal data at any time as defined by article 16 of the GDPR.
Right to restriction of processing: you have the right to restrict the processing of your personal data in certain cases defined in article 18 of the GDPR.
Right to erasure (“right to be forgotten”): you have the right to request that your personal data be deleted and to prohibit any future collection as defined by article 17 of the GDPR.
Right to file a complaint to a competent supervisory authority (in France, the CNIL), under article 77 of the GDPR, if you consider that the processing of your personal data constitutes a breach of applicable regulations.
Right to define instructions related to the retention, deletion and communication of your personal data after your death.
Right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR provides that you may withdraw your consent at any time. Such withdrawal will not affect the lawfulness of the processing carried out before the withdrawal.
Right to data portability: under specific conditions defined in article 20 of the GDPR, you have the right to receive the personal data you have provided us in a standard machine-readable format and to require their transfer to the recipient of your choice.
Right to object: You have the right to object to the processing of your personal data as defined by article 21 of the GDPR. Please note that we may continue to process your personal data despite this opposition for legitimate reasons or for the defense of legal claims.
You may exercise these rights by writing to us at the contact details below.
We may ask you to provide us with additional information if there is reasonable doubt, or any document likely to prove your identity if the doubt persists.
For any unsuccessful questions or requests, you are entitled to lodge a complaint with the competent supervisory authority in France, the Commission Nationale de l'Informatique et des Libertés (“CNIL”), located at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.
7. Contact point for exercising your rights
If you have any questions about this Policy or about the way pyannote collects and uses your personal data, or if you wish to exercise your rights, you can send your request to the following address: support@pyannote.ai
If your request concerns personal data processed by pyannote on behalf of one of its Customers (in particular audio files submitted by a Customer), please address it to that Customer, who is the data controller. Any such request received by pyannote will be forwarded to the relevant Customer.
8. Updates
This policy may be modified by pyannote. In this case, the revised version will come into effect when it is made available on the site.
Cookies Policy
When visiting the pyannote websites (hereinafter referred to as the “Websites”), certain information relating to your browsing may be recorded in “cookie” files installed on your terminal (computer, tablet, cell phone or any other device optimized for the Internet).
These cookies are issued by and for the purpose of facilitating your browsing on theses Websites, and for audience measurement purposes.
1. What is a cookie?
A “cookie” is a string of information, generally small in size and identified by a name, which may be transmitted to the user's browser by the website or application to which he or she is connecting. The browsing software stores it on the user's terminal (computer, tablet, cell phone or any other device optimized for the Internet) for a certain period of time and sends it back to the web server each time the user reconnects.
For the most part, cookies are used to make a website or application work better and more efficiently. A website or application can read these files and interrogate them, enabling it to recognize the user's terminal and record important information that will facilitate use of the site.
2. Which cookies do we use?
Technical cookies essential for site operation: these cookies are purely technical and strictly necessary for the proper operation of our Websites. They are therefore not subject to consent. You can, however, technically block them using your browser settings, but your experience on the site may be degraded. For example, cookies are used to record your choices regarding cookies, or to personalize your user interface.
3. The user's choices concerning cookies
When the user logs on to the site, a banner appears requesting consent or refusal to the deposit of audience measurement and social network cookies on the user's terminal. As long as the user has not expressed his/her choice, this banner will remain visible, in compliance with data protection regulations.
Every six (6) months, we will ask the user to confirm or change their choice (to set, refuse or accept cookies), by making the banner reappear on their terminal.
Users may withdraw their consent at any time and reconsider their choice by using the dedicated button on the Websites and in their administrator account.
Users may also configure their browser software so that cookies are stored on their terminal or, conversely, so that they are rejected, either systematically or depending on the sender. Users can also configure their browsers to accept or reject cookies from time to time, before a cookie is stored on their terminal. If the user refuses to save cookies on his/her terminal, or if he/she deletes those saved, the user may no longer be able to benefit from a certain number of functions which are nevertheless necessary to use the site.
In this case, we decline all responsibility for the consequences linked to the degraded operation of the site resulting from the impossibility of recording or consulting the cookies necessary for their operation and which the user would have refused or deleted.