Privacy Policy
Last updated : 26 July 2026
This Privacy Policy describes how Vopenia (“Vopenia”, “we”), publisher of the OpenVisio service (website and iOS/Android mobile apps), collects and processes the personal data of its users, in accordance with Regulation (EU) 2016/679 (“GDPR”) and the French Data Protection Act No. 78-17 of 6 January 1978.
OpenVisio is a video-conferencing solution to create and join real-time video meetings from the web and mobile apps.
OpenVisio is a client that lets you connect to several video-conferencing platforms: the OpenVisio platform operated by Vopenia, or third-party platforms (for example Clever Cloud, or Visio, the app of France’s La Suite numérique). The data processed by Vopenia depends on the platform you choose: when you connect to a third-party platform, your authentication and meeting data are handled by that platform and its identity provider — Vopenia does not collect them. Moreover, audio and video streams are transmitted in real time via WebRTC, through the infrastructure of the platform concerned, and are not sent to any third-party service.
1. Data controller
- Vopenia, SAS (Société par Actions Simplifiée), registered office: 31 rue Caroline Aigle, 33700 Mérignac, France
- Contact: contact@vopenia.io
2. Data protection contact
For any question regarding your personal data:
- By e-mail: contact@vopenia.io
- By post: Vopenia, 31 rue Caroline Aigle, 33700 Mérignac, France
3. Categories of data processed
3.1 Account and identification data
Vopenia only processes this data when you create an account on the OpenVisio platform operated by Vopenia (app.openvisio.fr): e-mail address, first and last name (or username), password (stored hashed).
When you connect to a third-party platform (for example Clever Cloud, or Visio of La Suite numérique via ProConnect), authentication and identity are handled by that platform and its identity provider: Vopenia neither collects nor stores your e-mail address or your credentials. They are used solely to sign you in to the chosen platform and remain on your device or with that platform.
3.2 Technical and connection data
IP address, session and connection identifiers, browser type and version, operating system, device identifiers, connection and usage logs, timestamps.
3.3 Meeting data
Meeting identifier and link, date, time and duration, participant list and roles, meeting settings, any chat messages. Audio and video streams exchanged during meetings are transmitted in real time via WebRTC, through the infrastructure of the platform concerned — without being sent to any third-party service — and are not recorded by default. Recording can only occur if explicitly enabled by an authorised user, in which case participants are informed. When you use a third-party platform, the meeting metadata above is handled by that platform, not by Vopenia.
3.4 Data from mobile-app permissions
See section 10 for details (camera, microphone, contacts (optional), Bluetooth, motion sensors, push notifications).
3.5 Diagnostic and crash data
Error and crash reports (via Bugsnag): error type, app version, device model, operating system, related technical log.
3.6 Support and communication data
The content of the requests you send us by e-mail and the data needed to handle them. The website’s contact form opens your e-mail client (a mailto: link) and sends your message directly to contact@vopenia.io: it is not collected by any intermediary server.
We do not collect special-category data (Article 9 GDPR) and carry out no solely automated decision-making producing legal effects.
4. Purposes and legal bases
In accordance with Article 6 GDPR, each processing operation has a legal basis:
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Account creation and management, authentication (incl. ProConnect) | Performance of the contract (Art. 6.1.b) |
| Provision of the video-conferencing service (meetings, real-time audio/video, link sharing, participant management, call notifications) | Performance of the contract (Art. 6.1.b) |
| Camera / microphone access required for video-conferencing | Performance of the contract (Art. 6.1.b); device-level system permission |
| Optional features (contact import, Bluetooth) | Consent (Art. 6.1.a), revocable at any time in device settings |
| Push notifications (incl. VoIP) for incoming calls | Performance of the contract / legitimate interest (Art. 6.1.b / 6.1.f) |
| Security, fraud and abuse prevention, service integrity | Legitimate interest (Art. 6.1.f) |
| Diagnostics, crash fixing and stability improvement (Bugsnag) | Legitimate interest (Art. 6.1.f) |
| Audience measurement / statistics (where not exempt) | Consent (Art. 6.1.a) |
| Marketing communications / newsletter (if any) | Consent (Art. 6.1.a) |
| Support request handling | Performance of the contract / legitimate interest (Art. 6.1.b / 6.1.f) |
| Legal and accounting obligations, responses to legal requests | Legal obligation (Art. 6.1.c) |
This table covers the processing for which Vopenia is the controller: your account on the OpenVisio platform and the functioning of the application. When you connect to a third-party platform, the purposes and legal bases for your account and meetings are determined by that platform.
Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
5. Recipients and processors
Your data is accessible to authorised Vopenia staff and to its processors, acting on instructions under Article 28 GDPR agreements:
- Bugsnag (SmartBear) — collection and analysis of app crash reports.
- OVHcloud (SAS OVH, France) — hosting of the OpenVisio platform infrastructure and data.
- ProConnect — French State identity federation (only for users who connect to Visio of La Suite numérique via this method).
- Where applicable, payment, e-mailing and support providers.
Audio and video streams are not sent to any third-party service: they flow via WebRTC through the infrastructure of the video-conferencing platform you use. Likewise, when you connect to a third-party platform (Clever Cloud, Visio of La Suite numérique…), that platform acts as an independent controller for your account and meetings, and Vopenia does not receive that data.
We do not sell your personal data. It may be disclosed to administrative or judicial authorities where required by law.
6. Transfers outside the European Union
We favour hosting within the European Union. The processor Bugsnag (crash reports) may however be established or operate infrastructure outside the EU, including in the United States. Such transfers are governed by appropriate safeguards under Articles 44 et seq. GDPR: Standard Contractual Clauses, the destination’s adherence to the EU-U.S. Data Privacy Framework where applicable, and/or additional technical measures (encryption, minimisation). A copy of the safeguards may be obtained at contact@vopenia.io.
7. Retention periods
| Data / purpose | Retention |
|---|---|
| User account (OpenVisio platform) | Duration of the contractual relationship, then deletion or anonymisation after 3 years following closure/inactivity |
| Meeting metadata (logs, participants) | 12 months |
| Audio/video streams | Not retained (real time); any recordings: 30 days |
| Technical/security logs | 12 months (indicatively 6–12 months) |
| Crash reports (Bugsnag) | 90 days |
| Billing and accounting data | 10 years (legal obligation) |
| Consent (proof) | 3 years from collection or last contact |
| Support requests | 3 years |
For connections to a third-party platform, retention of account and meeting data is defined by that platform, not by Vopenia.
8. Data security
We implement appropriate technical and organisational measures: encryption of streams in transit (WebRTC/DTLS-SRTP, TLS), password hashing, access control, segregation, logging, backups and staff awareness. In the event of a personal-data breach likely to create a risk to your rights and freedoms, we will notify the CNIL and, where applicable, the persons concerned, under Articles 33 and 34 GDPR.
9. Your rights
Under Articles 15 to 22 GDPR, you have the rights of access, rectification, erasure, restriction, objection, portability, the right to withdraw consent at any time, and the right to give instructions regarding your data after your death.
Exercising your rights
Write to contact@vopenia.io, or by post to 31 rue Caroline Aigle, 33700 Mérignac, France. Proof of identity may be requested in case of reasonable doubt. We respond within one month, extendable by two months for complex requests.
Complaint
You may lodge a complaint with the CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
10. Mobile apps: permissions and data
The OpenVisio apps (iOS and Android) request your authorisation before accessing the following. Each permission can be granted or revoked at any time in your device settings.
| Permission | Purpose | Nature |
|---|---|---|
| Camera | Share your video during meetings | Required for video-conferencing |
| Microphone | Share your audio during meetings | Required for video-conferencing |
| Contacts | Make it easier to invite your contacts | Optional (consent) |
| Bluetooth | Use audio devices (headsets, speakers) | Required for proper audio |
| Motion sensors | Adapt display and quality (orientation, activity) | Optional |
| Push notifications (incl. VoIP) | Signal incoming calls and meeting events | Required to receive calls |
Data shared with app stores. When you download or use the app via the App Store (Apple) or Google Play (Google), these platforms process certain data under their own policies (store account identifier, purchase data where applicable, diagnostic data). OpenVisio publishes the information required by these platforms (Apple’s “App Privacy” label and Google Play’s “Data safety” section). OpenVisio does not perform advertising tracking: no data is used for cross-app targeted advertising; accordingly, no “App Tracking Transparency” authorisation is requested.
11. Cookies
The use of cookies on the website is described in the Cookie Policy.
12. Minors
The Service is not intended for children under 15. Under Article 7-1 of the French Data Protection Act, where processing is based on consent and concerns a minor under 15, it must be collected jointly with the holder of parental authority. If you believe a minor has provided us with data without authorisation, contact contact@vopenia.io for deletion.
13. Changes
We may amend this Privacy Policy to reflect legal or Service developments. The applicable version is the one published at the Service address, with the date of last update.