Last updated: 15 September 2025
Who we are
Torcano (“we”, “us”, “our”) provides an AI receptionist operating over WhatsApp and web forms to help service businesses handle enquiries, quotes, invoices, bookings and payments.
Legal entity: Torcano is the trading name of a sole trader registered in France.
Registered address: 06250, Mougins, FRANCE
Data Protection contact: hello@torcano.io
We are the “controller” of personal data we collect via our website and for our direct customers. For messages processed on behalf of our customers’ end-users, we act as a “processor”.
What data we collect
- Contact & identity data: name, email, phone/WhatsApp number, business name.
- Conversation data: messages sent to or from you or your customers via WhatsApp or our web forms; metadata (timestamps, delivery info).
- Business records: quotes, invoices, bookings, job details, prices, payment status.
- Technical data: IP address, device/browser type, cookies, analytics events.
- Support content: feedback, bug reports, support emails.
- Billing (if applicable): partial payment information and transaction metadata (payments are handled by our payment provider).
How we collect it
- Directly from you (forms, email, WhatsApp messages).
- From your customers when they message your WhatsApp number connected to Torcano.
- Automatically via cookies/analytics on our website.
- From integrated services you connect (e.g., calendar, accounting, payment).
Why we use your data (lawful bases)
- Provide and operate Torcano (contract).
- Customer support and service notifications (contract/legitimate interests).
- Security, fraud prevention, abuse detection (legitimate interests/legal obligation).
- Improve and develop features, analytics and training (legitimate interests; where required we use aggregated/anonymised data).
- Marketing communications (consent for email/WhatsApp where required; you can opt out anytime).
WhatsApp & communications
When you connect WhatsApp, we process messages and related metadata to provide automated replies, quotes and bookings. You are responsible for ensuring you have appropriate opt-in from your contacts to message them on WhatsApp for business purposes. We provide tools and suggested wording to help you capture consent.
Retention
- Account data is kept for the life of the account plus up to 24 months after closure (for records, disputes, and tax).
- Conversation/quote/invoice records: 24 months by default (you can request earlier deletion where legally permitted).
- Website analytics/cookies: per cookie policy below or your browser settings.
We may keep data longer if required by law or to establish/defend legal claims.
Sharing & international transfers
We share data with trusted providers under data-processing agreements and appropriate transfer safeguards (e.g., SCCs for non-EEA transfers):
- Hosting & CMS: Namecheap/EasyWP, WordPress.
- Messaging: Twilio (WhatsApp Business API).
- AI processing: Microsoft Azure / Azure OpenAI (model inference), OpenAI (as applicable to your plan).
- Analytics & monitoring: Google Analytics / Site Kit, server logs.
- Payments (if enabled): Stripe (we do not store full card details).
- Email & support: Google Workspace.
We also share data where required by law, to protect rights/safety, or with your consent.
Your rights (EEA/UK and similar jurisdictions)
You can request: access, correction, deletion, restriction, portability, and to object to processing. Where we rely on consent, you can withdraw it at any time.
To exercise rights, email hello@torcano.com. You also have the right to complain to your local data protection authority.
Security
We use industry-standard security measures including encryption in transit (HTTPS), authentication, access controls, logging, and regular backups. No method is 100% secure; we work continuously to improve safeguards.
Children
Torcano is not directed to children under 16 and we do not knowingly process their data.
Cookies & Tracking
We use cookies and similar technologies to run our website and improve your experience.
What are cookies?
Cookies are small text files placed on your device by your browser. They help websites remember preferences, improve performance, and analyse usage.
Types of cookies we use
- Essential cookies
- Required for the website to function (e.g. navigation, security, login).
- You cannot opt out of these, but you can disable cookies entirely in your browser.
- Analytics cookies
- Used to understand how visitors use the site and to improve performance.
- We use Google Analytics / Google Site Kit which collects anonymised traffic data (e.g., page views, browser type, general location).
- Data is aggregated and not used to personally identify you.
- Functional cookies
- May be used by WordPress or plugins to remember preferences, language, or form submissions.
- Third-party integrations
- If you connect with us via WhatsApp or other third-party services, those providers may place their own cookies or tracking pixels. We do not control these cookies.
Managing cookies
You can manage or delete cookies in your browser settings.
- Chrome: chrome://settings/cookies
- Firefox: Options > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy
- Edge: Settings > Cookies and site permissions
You can also install browser add-ons to block analytics tracking.
Consent
On your first visit, we may ask for your consent to use non-essential cookies (analytics, functional). You can withdraw consent anytime by clearing cookies in your browser.
Acting as a processor for our customers
For messages and records we process on behalf of a customer (your service provider), that customer is the controller. We process such data under our Data Processing Addendum (DPA) and their instructions.
Changes
We’ll update this policy when needed. Material changes will be highlighted on this page.
Contact: hello@torcano.io