Privacy policy

1. Who is responsible for your data

The data controller is:

• Arthur Bing EI, represented by Arthur Bing
• Address: 58 rue de Monceau, 75008 Paris, France
• SIRET: 822 069 209 00069
• Contact: contact@arthurbing.fr

Given the size of the business, no data protection officer has been appointed: such an appointment is not mandatory here. Any question about your data should be sent to contact@arthurbing.fr, which is the single point of contact.

2. The data we collect

YOUR IDENTITY AND YOUR ACCOUNT

• Your e-mail address. It is your main identifier. It is kept by our provider Supabase, in the account management service, and not in your profile record.
• Your first and last name, and your profile picture if you upload one.
• Your phone number, your postal address, your postcode, your town and your country, if you fill them in (they are used in particular for invoicing).
• Your date of birth and your gender, if you fill them in. Gender is used to offer you the matching version of certain programs.
• Your customer identifier with our payment provider.

YOUR VOICE AND YOUR PRACTICE

• Your voice type and your range (the lowest and highest notes measured). This is a physiological characteristic of your voice.
• Your voice journal, if you use it: your free notes, your day-to-day tiredness level, and whether or not you chose to share an entry with your coach.
• Your personal notes, your comments on lessons, your favourites and your lists.

About the microphone: when you work on a vocalise, the sound from your microphone is analysed in real time directly in your browser, to display the pitch of your voice. That stream is neither recorded, nor sent, nor kept. Nothing leaves your device. The only situation in which your voice is recorded is the one described in section 5, and it requires your consent.

YOUR PROGRESS AND YOUR USE OF THE PLATFORM

• Your progress through lessons and courses, your practice days and practice time, your progress points.
• An activity log: your sign-ins, lessons started or completed, courses opened, your purchases. This log lets Arthur follow your path and adapt his support. It is the most detailed processing on the platform, which is why it is mentioned explicitly here.

YOUR COACHING

• Your sessions (dates, slots, status), your session balance and its history.
• Your message exchanges with your coach.
• The notes Arthur takes about you, whether or not they are shared with you.
• If you consent to it: the video recording of your sessions and their full written transcript (see section 5).

YOUR AI COACH (BETA)

• Your conversations with the AI Coach: your questions, the answers and the sources cited. They are kept in your history, where you can consult them.
• A usage counter (number of questions asked), in order to apply the usage limit.

To answer, the AI Coach may draw on material from your account: vocal profile, recent progress, notes, voice journal and coaching exchanges. Section 4 states who that material is sent to.

YOUR PURCHASES

• Your purchases, subscriptions, waiting-list sign-ups and session credits.
• Your bank card data never passes through our servers and is never kept by us: it is entered directly with our payment provider.

IF YOU WRITE TO US THROUGH THE CONTACT FORM

• Your name, your e-mail address and the content of your message.

IP ADDRESSES

We keep neither your IP address nor your browser characteristics in our own database. Our technical providers (hosting, account management, video delivery), however, log them on their side, for security and fraud-prevention reasons, according to their own retention periods.

3. Why we process this data, and on what basis

TO PERFORM OUR CONTRACT (article 6.1.b GDPR)

• Create and manage your account, authenticate you.
• Give you access to the courses, the vocalises and your subscription.
• Arrange, run and follow up your coaching sessions, manage your credits, your bookings and your cancellations.
• Record your progress and let you find it again.
• Handle your purchases, your subscriptions and your refunds.
• Send you the e-mails the service requires (sign-in, confirmation, session reminders).
• Answer your messages.

WITH YOUR CONSENT (article 6.1.a GDPR)

• The recording of your coaching sessions and their transcript — in that case only.

ON THE BASIS OF OUR LEGITIMATE INTEREST (article 6.1.f GDPR)

• Follow your learning path and the use you make of the platform, in order to adapt the support and improve the content.
• Keep the service secure and prevent fraudulent use or account sharing.

You may object at any time to processing based on legitimate interest, by writing to contact@arthurbing.fr and setting out your particular situation.

TO COMPLY WITH OUR LEGAL OBLIGATIONS (article 6.1.c GDPR)

• Draw up and keep invoices and accounting records.

NO ADVERTISING PROFILING, NO UNSOLICITED MARKETING

Your data is neither sold, nor rented, nor passed to third parties for commercial purposes. No decision producing legal effects concerning you is taken by solely automated means.

4. Who has access to your data

Within the business, only Arthur Bing accesses your data.

To this are added technical providers, acting as processors, solely on instruction and for the purposes of the service:

• Vercel — hosting of the site and of the platform. Processes the data passing through the service, logs technical connection data and receives the anonymous record of display times described in section 10.
• Supabase — account management and database. Hosts all the data described in section 2.
• Stripe — payment, subscriptions and invoicing. Receives your e-mail address and your name to create your customer record, as well as your card data, entered directly with it.
• Bunny Stream — hosting and delivery of course videos, session replays and their subtitles. The replays contain your image and your voice.
• Zoom — video calls for sessions and, if you consent to it, recording and transcription. Your full name appears in the name of the meeting room.
• Google Calendar — session calendar. Your e-mail address is added to it as an attendee, with the title and times of the session.
• YouTube (Google Ireland Limited) — hosting of a coach's introduction video, shown on their profile page. As soon as that video appears on screen, your browser requests it from YouTube, which passes Google your IP address, your device type and the page the request comes from — before you have even started playback. The video is embedded in YouTube's "no-cookie" mode: no advertising cookie is set unless you click play. If you do start it, YouTube applies its own privacy policy (policies.google.com/privacy).
• Resend — delivery of our e-mails. Receives your e-mail address and your first name.
• Anthropic — generation of the AI Coach's answers (beta). Receives your questions, the history of the current conversation and the material from your account that is useful for the answer (vocal profile, progress, notes, journal, coaching exchanges), as well as the relevant course extracts. Its API terms exclude the use of this data to train its models.
• OpenAI — retrieval of the course passages relevant to the AI Coach (beta). Receives the text of your questions in order to compute a numerical representation of it, without your identity. Its API terms likewise exclude training on this data.

This list is accurate as at the update date shown at the end of this document. It is liable to change and is kept up to date on this page.

Arthur Bing's invoices are, moreover, drawn up in an accounting tool outside the platform: no data is sent to it from the application.

5. The recording of coaching sessions

This is the most sensitive processing on the platform. Here is exactly how it works.

YOUR CONSENT IS REQUIRED, AND IT IS FREELY GIVEN

When you book a session, a tick box offers you recording. It is never pre-ticked. If you do not tick it, the session runs normally, simply without being recorded: your refusal has no effect on the service, its price or its quality.

Your choice is recorded session by session, including when you refuse, so that we can demonstrate on what basis each recording was made. The version of the consent wording you read is kept with your decision.

Without your consent, the video call records nothing: the setting is passed technically to Zoom for each session. Since your session room is permanent, the recording setting follows your most recent decision.

WHAT IS RECORDED, AND WHAT BECOMES OF IT

If you consent:

• the session is recorded (your image and your voice);
• a full written transcript of the session is produced automatically and kept with the session;
• the recording is transferred directly from the video call service to our video host, without passing through our servers;
• once that transfer is confirmed, the copy held by the video call service is deleted;
• the replay is kept for 12 months, then expires. It is visible only to you and to Arthur Bing.

WITHDRAWING YOUR CONSENT

You may withdraw your consent at any time, as easily as you gave it:

• for future sessions: by not ticking the box on your next bookings;
• for a recording already made: by writing to contact@arthurbing.fr. The replay concerned will be deleted. Your request will be handled as soon as possible and at the latest within one month.

Withdrawing your consent does not affect the lawfulness of recordings made before it.

6. Transfers outside the European Union

Some of our providers are established outside the European Union or may process data there, in particular in the United States. This is the case for hosting, video calls, the calendar and video delivery.

These transfers are framed by the safeguards provided for by the GDPR: European Commission standard contractual clauses or, depending on the provider, certification under the EU–US Data Privacy Framework.

We do not claim that all of your data stays in Europe: that would not be accurate.

The database — your account, your content, your progress — is hosted in the European Union, in the Europe (Paris) region of our provider Supabase. The other providers listed in section 4 may process certain data in the United States, with the safeguards set out above.

7. How long we keep your data

• Account and associated data (profile, progress, notes, journal, messages, activity history, credits): for the whole life of your account, and until it is deleted.
• Session replays: 12 months, then expiry.
• Session transcripts: kept with the session, under the same conditions as your account.
• Invoices and accounting records: 10 years, under article L123-22 of the French Commercial Code.
• Contracts of €120 or more: 10 years, under article L213-1 of the French Consumer Code.
• Proof of consent to recording: kept for as long as it is needed to establish the lawfulness of the recordings made.
• Messages sent from the contact form: 3 years from the last exchange.
• E-mail sending log (recipient address and sending date, kept to prove sending and avoid duplicates): 12 months.
• Inactive accounts: your account stays open for as long as you do not delete it. After three years without a single sign-in, we may delete it, after informing you by e-mail.

8. Your rights

You have the following rights over your data:

• Access: obtain a copy of the data concerning you. This includes the notes Arthur takes about you.
• Rectification: correct inaccurate data or complete it.
• Erasure: ask for your data to be deleted, subject to our legal retention obligations.
• Restriction: ask for processing to be frozen while a check is carried out.
• Objection: object, on grounds relating to your particular situation, to processing based on our legitimate interest.
• Portability: receive, in a machine-readable format, the data you provided to us.
• Withdrawal of consent: at any time, for the recording of your sessions (see section 5).
• Post-mortem directives: decide what happens to your data after your death.

To exercise these rights, write to contact@arthurbing.fr. You will receive an answer within one month, extendable by two months for a complex request, in which case you will be told. Proof of identity may be requested if there is serious doubt as to your identity.

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL:

• Commission Nationale de l'Informatique et des Libertés — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr

9. Deleting your account

You can delete your account yourself, at any time, from your space, in the Account section. Deletion asks you to type the word “DELETE” to prevent mistakes. It is immediate and permanent.

WHAT IS DELETED

Your account and, with it, in cascade: your profile, your purchases and subscriptions, your session credits and their history, your progress, your notes, your comments, your favourites and your lists, your activity history, your practice days, your points, your coaching sessions and your replays, your voice journal, your messages, the notes Arthur takes about you, your calendar and reminder settings, as well as the consents recorded.

WHAT IS KEPT, AND WHY

• Your invoices and proofs of payment are kept for 10 years, under our accounting and tax obligations (article L123-22 of the French Commercial Code). The GDPR sets aside the right to erasure where a legal obligation requires retention. These records are no longer linked to your account and are used only for accounting. They are kept with our payment provider.
• Our e-mail sending log keeps the address a message was sent to, with no link to your account, in order to prove that it was sent.
• Any messages you sent through the contact form are not attached to your account and are therefore not deleted automatically. Write to us to ask for them to be deleted.

Please note: deleting your account means losing your unused session credits, with no automatic refund. If you have a balance, contact us before deleting your account.

Deletion takes effect immediately in the application. Some technical copies may remain for a limited time with our providers after deletion — the video file of a replay, a past calendar event, your profile picture — until their purge is carried out. You can ask for them to be erased immediately by writing to contact@arthurbing.fr.

10. Cookies and local storage

The site and the platform set no advertising cookie, use no audience measurement tool and embed no tracker. No data is passed to an advertising network.

ONE EXCEPTION, AND HERE IT IS. A coach's profile page may contain a video hosted by YouTube. As soon as it appears on screen, your browser requests it from YouTube: this passes Google your IP address, your device type and the page the request comes from, before you have even started playback. The video is embedded in YouTube's "no-cookie" mode: nothing is written to or read from your device unless you click play. If you do start it, YouTube may set its own cookies, under its privacy policy (policies.google.com/privacy). No other page of the site or of the platform calls a third-party service.

That is why you are never shown a consent banner: the only cookies used are strictly necessary for the service you asked for to work, and on that basis are exempt from consent (article 82 of the French Data Protection Act).

COOKIES SET

• Authentication cookie: keeps you signed in to your space. Strictly necessary.
• Student-view cookie: lets the administrator preview the space as a student sees it. Concerns the administrator only.
• Administrator session cookie: concerns the administrator only.

LOCAL STORAGE OF YOUR PREFERENCES

Your browser keeps certain display preferences locally: sidebar collapsed or not, library display mode, video quality, autoplay, theme. This information does not leave your device and is used for no tracking of any kind.

DISPLAY TIME MEASUREMENT

So that we know whether the site is fast where you are, your browser records how long the page takes to display — server response time, delay before content appears, display stability — and passes those figures to our host, Vercel, through an address on the site itself: no third-party domain is contacted.

This record sets no cookie, writes nothing in your browser, carries no identifier and cannot link your visits from one page to the next or from one session to another. What is passed: the page address (without its form content or its parameters), the measured durations, the device type, the browser, the country and the connection speed. Your IP address is neither kept nor tied to these durations.

Because it neither writes nor reads anything on your equipment and identifies nobody, this record does not fall under the consent required by article 82 of the French Data Protection Act.

You can delete these cookies and this storage at any time from your browser settings. Deleting the authentication cookie will sign you out.

11. Minors

Creating an account is reserved for people aged at least fifteen.

If you hold parental authority and find that an account has been created by your child without your agreement, write to contact@arthurbing.fr: the account and the associated data will be deleted.

Particular care is taken over the recording of sessions where the student is a minor: consent must then be given, or authorised, by a holder of parental authority.

12. Security

Access to your data is restricted by security rules applied at database level: each student can see only their own data. Paid videos and replays are accessible only through signed, time-limited addresses. Exchanges with the site are encrypted.

Bank card data is never held by us.

Since no system is infallible, we undertake, in the event of a data breach likely to create a high risk to your rights, to inform you as soon as possible and to notify the CNIL within 72 hours, in accordance with articles 33 and 34 GDPR.

13. Changes to this policy

This policy may be changed, in particular if the service, the providers or the applicable regulations change. The list of processors, in particular, is kept up to date on this page.

In the event of a substantial change, you will be informed by e-mail or by a message in your space.

Last updated: 30 July 2026.