Privacy Notice

1. Data controller

The controller of the personal data collected through the cibel.ai website and the voice agents integrated within it currently operates under the commercial brand Cibel, run by a sole trader registered in the United Kingdom. The formal incorporation of the company VOKAI is in progress; once incorporation is complete, this Notice will be updated to reflect the change of controller. For any question relating to the processing of your data, or to exercise your rights, you can contact the controller at hello@vokai.ai.

2. What Cibel is

Cibel is a voice conversational mediation platform dedicated to the cultural heritage of the Mediterranean. Through AI-based voice agents, Cibel allows visitors to hold conversations with narrative voices anchored to specific archaeological and cultural sites. Every voice is connected to a verified knowledge base, and the agent is explicitly designed to admit uncertainty when the historical record is incomplete.

3. Data we collect

When you interact with Cibel's voice agents, the following data is collected:

Transcripts of voice conversations: the textual content of what you say to the agent and what the agent says back to you is transcribed and stored temporarily. Transcripts are necessary for the operation of the service and for product improvement over time.

Conversation audio: the actual audio of conversations is not stored. Audio is processed in real time for transcription and then immediately discarded.

Uploaded images: if you upload an image during a conversation (for example a photo of an archaeological site to ask about it), the image is processed temporarily so the agent can recognise it and answer you. Images are deleted at the end of the conversation session and are not stored on our servers.

Technical data: during your visit to the website we collect standard technical information such as IP address, browser type, device, preferred language, and date and time of the visit. These data are used for aggregate analytics and for the technical operation of the site.

Visitor name: agents may ask for your name during the conversation (for example Cibel asks "What is your name?" at the start of the conversation). If you choose to share your name, this information is processed together with the conversation transcript.

We do not collect sensitive data such as medical information, religious or political orientation, biometric data (beyond voice, which is not retained), or financial information.

4. Purposes of processing

The collected data are used for the following purposes:

Service delivery: enabling voice conversation with Cibel agents, including speech-to-text, response generation, and text-to-speech of the answers.

Product improvement: analysing conversations in aggregate and anonymous form to improve the quality of answers, calibrate agent behaviour, and identify areas where the knowledge base needs expansion.

Security and abuse prevention: identifying and preventing improper use of the service, technical abuse, or attempts to compromise the integrity of the agents.

Aggregate analytics: understanding how visitors use the site and the agents, in aggregate and anonymous form, in order to improve the experience.

5. Legal basis for processing

The processing of your data is based on your explicit consent, provided by clicking "Accept" on the disclaimer shown before starting any conversation with a voice agent. You can withdraw your consent at any time by contacting the controller's email address; following withdrawal, the conversations associated with your name (if provided) will be deleted from our systems.

6. Retention period

Conversation transcripts: retained for a maximum of 90 days from the moment of the conversation. After 90 days, transcripts are automatically and permanently deleted.

Conversation audio: not retained. Processed in real time and immediately discarded.

Uploaded images: deleted at the end of the conversation session.

Technical data (IP, browser, device): retained for a maximum of 12 months for aggregate analytics purposes, after which they are anonymised or deleted.

7. Data sub-processors

To deliver the Cibel service, some of your data are processed by third-party technical providers, under agreements that guarantee adequate protections:

ElevenLabs Inc. (United States) — provider of the voice conversational technology, including text-to-speech, speech recognition, and conversation orchestration. ElevenLabs is certified to international data security standards and operates under the privacy policies available on its website elevenlabs.io.

Anthropic PBC (United States) — provider of the language model (Claude Sonnet 4.6) that generates the agents' answers. Anthropic processes your conversations to generate answers but does not use them to train its own models, in line with the privacy policies available on anthropic.com.

Lovable — provider of the hosting platform on which cibel.ai is built. Lovable operates according to European data protection standards.

Netlify (United States) — possible CDN hosting provider for static site content.

Data transfers to providers based in the United States take place on the basis of the Standard Contractual Clauses approved by the European Commission, which guarantee an adequate level of protection of personal data.

8. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights with respect to your personal data processed by Cibel:

Right of access: you can request confirmation as to whether we are processing your personal data and obtain a copy.

Right of rectification: you can ask for correction of inaccurate data concerning you.

Right of erasure (right to be forgotten): you can ask for your personal data to be deleted when it is no longer needed, when you withdraw consent, or when you consider the processing unlawful.

Right to restriction of processing: you can request that processing be limited to specific purposes.

Right to data portability: you can ask to receive your data in a structured, machine-readable format, in order to transfer it to another controller.

Right to object: you can object to the processing of your data for legitimate reasons.

Right to withdraw consent: you can withdraw your consent to processing at any time.

Right to lodge a complaint: you can lodge a complaint with the competent supervisory authority, in Italy the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

To exercise any of these rights, contact us at hello@vokai.ai specifying the right you intend to exercise. We will respond within 30 days of the request.

9. Data security

We adopt appropriate technical and organisational measures to protect your data from unauthorised access, loss, destruction or disclosure. These include: encryption of communications via HTTPS, data access limited to authorised Cibel personnel, processing agreements with sub-processors that guarantee adequate security standards, and internal policies for managing security incidents.

Despite our precautions, no system is completely immune to risk. In the event of a data breach that may entail a significant risk to your rights, we will notify you within the timeframes required by the GDPR and inform the competent supervisory authority.

10. Minors

The Cibel service is not specifically directed at minors under 16. We do not knowingly collect data from minors. If we are informed that we have collected data from a minor without the consent of those exercising parental responsibility, we will proceed with prompt deletion.

11. Cookies and similar technologies

The cibel.ai website uses technical cookies necessary for the operation of the site and aggregate analytics cookies. We do not use advertising or third-party profiling cookies. For more details on the cookies used, please refer to our Cookie Policy.

12. Changes to this Notice

We may update this Notice from time to time to reflect changes in our practices or in applicable law. The current version is always available on this page, with the date of the last update shown at the top. For substantial changes, we will notify you through the site or by email if you have provided your address.

13. Contact

For any question, request or complaint relating to this Notice or to the processing of your data:

Cibel
Email: hello@vokai.ai
Site: cibel.ai