Bendis by Felikon

Privacy and data processing

How Bendis treats the people it talks with and the data it produces, as the product behaves today. Each company that runs Bendis writes its own disclosure line and sets its own retention; this page describes the mechanism they set it on.

Before anything, a tap
The camera and the microphone do not run until a customer taps Say hello; they start then, and stop when the conversation ends. Nobody walking past is seen. A company can switch the camera off altogether; then the tap starts the microphone only. The assistant herself is drawn on the screen the whole time, which is why she moves at rest, and if the company has turned her spoken hello on she says it aloud while she waits, once someone has touched the screen.
What the customer reads first
Above the Say hello button, under the assistant's name and before anything runs, a line saying that the tap starts a conversation with an AI assistant, transcribed for the company, that the camera, where the company uses one, and the microphone run only while it lasts, and that the (i) mark has the details. Behind that mark, for the whole conversation, sits the company's own disclosure line, in the language the company runs in. Unless the company writes its own, it reads: You're talking to an AI assistant. It uses this camera to see you, and the company keeps a written record of this conversation. For a company that has switched the camera off, the same line without the camera sentence.
The camera
Where the company uses it: to notice that a person is standing in front of the screen and what they are wearing, so the assistant can greet them and may say a word about it. The pictures are analysed and not stored. What is kept is a phrase such as medium blue trousers. A company that switches the camera off, as a stand usually does, has none of this: the conversation starts on the tap, and the greeting knows nothing of what the person wears.
The microphone
The customer's speech is turned into text by the browser's own speech recognition (in Chrome, Google's service). The text is what the assistant answers and what the transcript holds. No audio recording is kept.
What is stored
The transcript, the report written from it, the phrase describing what the camera saw, and timing. No images and no audio. The assistant asks for no names, email addresses or phone numbers, and anyone who wants to be contacted is sent to a person; anything a customer says aloud, a name included, is in the transcript until the company deletes it or the retention period ends.
For how long, and who deletes
For a period the company sets in its own account, 90 days unless changed, after which conversations are removed. The company can delete any single conversation at any time from its dashboard. Backup copies are kept at most 14 days longer.
What she may tell customers
Only what the company wrote for her: hours, address, delivery, returns, services, prices, and offers with their last day. She says it comes from the company's information, repeats an offer as the company worded it, and never computes a price or a discount from it. A line that would state an amount she was not given is replaced by an offer to have the team confirm it, and she uses no scarcity wording whatever the brief says.
What is estimated, not recorded
The report's summary, its reading of what the customer was interested in, and its estimates of sentiment and purchase intent are written by a language model from the transcript. They are the model's assessment, not something the customer said; the transcript beneath them is what was actually said. The conclusions across several conversations say how many conversations stand behind each finding and rate their own confidence.
Where it runs
On Google Cloud. The camera analysis, the language model that writes the questions and the reports, and the voice are Google Cloud services; the language and voice services are called in a European region, and the Bendis server that holds the accounts and the transcripts runs on a Google Cloud machine in a US region. Google does not use this data to train its models under the terms Bendis uses it on. Server logs hold no words of a conversation.
Who is responsible
The company that runs Bendis decides what is asked and why, and is the data controller for its customers' conversations. Felikon SRL operates Bendis on that company's instructions, as processor. Google Cloud is the sub-processor. A one-page agreement between the company and Felikon says so, and names the retention period and the disclosure line. For its own coffee study, Felikon SRL is the controller; see below.
The coffee study, run by Felikon itself

From November 2026 Felikon runs an online study in Romanian, "how people choose coffee for home", with the assistant Ava. For this study Felikon SRL is the data controller. Before they start, participants read the full notice, in Romanian, on the study's own „Despre studiu” page.

What is processed:

  • the conversation as text (spoken answers are turned into text by the browser's speech recognition: Google in Chrome, Apple in Safari);
  • the age band and type of place, if given;
  • an automatic summary, and the end rating, if given;
  • the conversation code, date and time, and device and browser type;
  • technical logs: IP address, the page requested and timings, with no words.

The camera is off. No names, phone numbers or email addresses are asked for.

Why, and on what basis:

  • The study and its analysis, including checking how the assistant works in it: consent (GDPR Art. 6(1)(a)), given by a required tick box.
  • Improving the assistant: only with a separate, optional consent.
  • Running the page and preventing abuse, with the technical logs and one necessary cookie that keeps the link for 16 hours: legitimate interest (Art. 6(1)(f)).
  • Answering requests: legal obligation (Art. 6(1)(c)).

Who receives it:

  • The browser's speech service: Google or Apple, in the browser, on that provider's terms.
  • Google Cloud, on Felikon's behalf: the language model and Ava's voice in the EU, and the server and the technical logs in the United States.
  • The Felikon team that runs the study.

Brands receive only aggregated results and short quotes without names or details that could identify anyone, never transcripts.

Transfer outside the EU: the server is in the United States. The transfer relies on Google Cloud's data processing terms, which include the European Commission's standard contractual clauses.

How long:

  • Conversations are kept 75 days, then deleted, and backup copies are gone within 90 days of the conversation.
  • The optional improvement use ends within the same 90 days.
  • Technical logs are kept at most 75 days.
  • Requests are kept one year after the answer.

Rights:

  • You can ask for access and a copy, rectification, erasure, restriction or portability. You can object to processing based on legitimate interest, and withdraw consent at any time, without affecting what was done before.
  • Write through the form on this site, with the conversation code shown on screen if you have it. Without it, give the approximate date and time, the device and something you said. The conversation is deleted or sent only if it can be identified without doubt, and without revealing anyone else's.
  • We answer within one month.
  • You may also complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).
Talking to Ava at an event or online

At events, and through the demo link we share, you can talk to Ava, Bendis's AI host, about Bendis. For these conversations Felikon SRL is the data controller; you can reach us through the form on this site.

What is processed: what you say, as text (your browser's speech service turns your voice into text: Google in Chrome, Apple in Safari, Microsoft in Edge); an AI summary of the conversation, including the model's estimates of your interest, which are estimates and not measurements; device and browser type; and technical logs (IP address, pages, timings, no words). No camera is used. Ava asks for no name or contact details.

Why, and on what basis: to show you Bendis, to understand what interests businesses like yours, and to improve Ava. This is our legitimate interest (GDPR Art. 6(1)(f)).

Your right to object: you can object at any time, through the form on this site, and we then delete your conversation, if we can identify it.

Who receives it: your browser's speech service; Google Cloud on our behalf (the language model and Ava's voice in the EU, the server in the United States, under Google Cloud's data processing terms, which include the European Commission's standard contractual clauses). Felikon may also use AI tools to analyse the conversations; they may process them outside the EU.

How long: conversations 30 days, then deleted, with backup copies gone within 45 days. Technical logs at most 75 days.

Your rights: access, a copy, deletion, objection and the other GDPR rights, through the form on this site. There is no conversation code here, so tell us the date and approximate time, your device and something you said. We delete or send a conversation only if we can identify it without doubt, without revealing anyone else's. You may also complain to your data protection authority (in Romania, ANSPDCP, www.dataprotection.ro).

We contact you only if you ask us to, in person or through the form.

The contact form
When you write to us through the form on this site, we keep your name, business, email address and message, and the date, to answer you and, if you ask, to discuss a demo or a pilot. The basis is your request (GDPR Art. 6(1)(b)) and our legitimate interest in answering it (Art. 6(1)(f)). The message is stored on our server (Google Cloud, United States) and sent to our mailbox (Microsoft 365). We keep it for 12 months after our last exchange, then delete it, or sooner if you ask. You can ask for a copy, a correction or deletion, or object, through the same form.
Business contacts we write to
When we write to someone at a company about Bendis, we use their name, role, company and business address or profile, taken from a public business source we name in the first message. We do so in our legitimate interest in offering Bendis to businesses (GDPR Art. 6(1)(f)). We keep a short record of our exchanges for 12 months after the last one. If you reply that you do not want to hear from us, we stop at once and keep only what we need to remember not to write again. You can ask for a copy, a correction or deletion, or object, through the form on this site.
Demonstrations
A demo on our own laptop, without visitors talking to Ava, processes nothing of yours. When you talk to Ava at an event or through our demo link, see Talking to Ava at an event or through our demo link above.

This page describes the product as of 6 November 2026. Questions about a specific deployment are best asked before it starts: request a demo and put them in the form.