Antoine Danielo

Privacy policy

Last updated: October 2026

Data controller

Antoine Danielo, antoinedanielo.hypnotherapeute@gmail.com. Antoine Danielo, sole trader — SIREN 832 617 203, SIRET 832 617 203 00035, APE code 9609Z.

Data collected

Hypnotherapy sessions by video conference : when you contact me, I collect your first name, last name, email address, phone number and, if applicable, the message you send me.

MOTUS account : when you create an account, I collect only your email address.

Context sheet (optional): if you sent a text or a file so that MOTUS could know you before the first session, an AI (Anthropic) read it to make a short sheet from it. The text or file is not kept; only the sheet you validated is. You can ask to see it or have it erased by writing to me.

MOTUS memory: after each conversation, an AI (Anthropic) writes short notes from the exchange, which MOTUS reads at the start of the next conversation, and keeps the “highlight of the day” you shared. Your highlights are shown in your space, where you can delete them one by one. The notes are not shown there: on simple request, I send them to you or erase them.

Safety monitoring: after each session, the content of the conversation is analysed automatically to spot a possible danger to you or to others. If one is found, an alert is recorded in a safety log (category, level and, where relevant, a sentence you said), I am notified and you may receive a prevention email. Only I can see this log. MOTUS is not an emergency service.

Purposes and legal bases

Your data is used to organise and confirm appointments, monitor sessions, contact you before or after a session, manage access to MOTUS, and meet accounting obligations.

Processing is based on the performance of a contract (Art. 6.1.b GDPR), your explicit consent for any communication unrelated to the contract (Art. 6.1.a), our legitimate interests in using technical sub-processors (Art. 6.1.f), and our legal obligations regarding accounting (Art. 6.1.c).

Retention periods

  • Contact data for commercial purposes : 3 years from the last interaction (CNIL recommendation).
  • Accounting records (invoices, contracts) : 10 years from the close of the financial year (Art. L.123-22 of the French Commercial Code).
  • MOTUS account : retained while the account is active. Erased within 30 days of deletion, except data linked to invoices (see accounting period above).
  • MOTUS memory (notes and highlights of the day): kept while the account is active. Erasure on simple request (from your space, under “A question?”, or by email), processed within 48 hours; you are notified by email once the memory has been erased. A highlight deleted from your space is deleted immediately.
  • Context sheet: kept until you ask for it to be erased; also erased with the memory. Safety log: kept for as long as strictly necessary to follow up alerts, then erased; it is not erased when the memory is erased.

Sub-processors

Your data is never sold or transferred to third parties for commercial purposes. Technical sub-processors :

  • Supabase : database and authentication (EU, GDPR-compliant).
  • Resend : transactional emails (confirmation, password reset).
  • Anthropic : Claude AI models for MOTUS.
  • ElevenLabs : voice synthesis and MOTUS conversational agent.
  • Stripe : card payment for MOTUS programmes and trial, invoicing.
  • Cloudflare Turnstile : anti-bot protection on forms.

Transfers outside the European Union

Some sub-processors (Anthropic, ElevenLabs, Cloudflare) are based in the United States. These transfers are made on the basis of appropriate safeguards (Art. 46 GDPR) : the EU–US Data Privacy Framework for certified sub-processors (Anthropic, ElevenLabs, Cloudflare), and standard contractual clauses adopted by the European Commission for others.

Automated decision-making

MOTUS is an artificial intelligence conversational agent. No decision producing legal or similarly significant effects within the meaning of Article 22 of the GDPR is made regarding you. No profiling for decision-making purposes is carried out.

Your rights

You have the rights of access, rectification, erasure, portability, objection and restriction regarding your data (GDPR). To exercise them, write to me at the address above. I will respond within one month. If you are not satisfied with my response, you may lodge a complaint with the CNIL (the French data protection authority).