Jeen Talk Privacy Policy

Last Updated: August 22, 2026

Jeen AI Ltd. (”Jeen Talk,” “Company,” “we,” “us,” or “our”) is committed to protecting the privacy of our website visitors (”Visitors”), subscription account administrators (”Customers”), and the individuals whose data is processed through our enterprise artificial intelligence platform, Jeen Talk (the “Platform” or “Services”).

This Privacy Policy explains our practices regarding the collection, use, disclosure, and transfer of personal data when we act as a Data Controller, as well as our role and responsibilities as a Data Processor under applicable privacy laws, including the Israel Protection of Privacy Law, 5741-1981 (PPL), the European Union General Data Protection Regulation (EU) 2016/679 (GDPR), and United States state privacy regimes.

1. OUR ROLE: DATA CONTROLLER VS. DATA PROCESSOR

A critical distinction exists regarding the capacity in which we process personal data:

1.1. Jeen Talk as a Data Processor

In our core business model as a SaaS provider, our Customers are the Data Controllers, and we act strictly as a Data Processor on their behalf.

*   This applies to all data, text, files, audio recordings, voice recordings, video files, and translation scripts uploaded or submitted by Customer to the Platform (collectively, the “Customer Content” or “Inputs”).

*   Any voice prints, biometric voice features, or identifiable speech characteristics processed for voice cloning, real-time translation, or dubbing are processed solely on behalf of the Customer and in accordance with Customer’s written instructions and our Data Processing Agreement (DPA).

*   Data Subject Requests: If your voice or personal data is included in Customer Content processed by Jeen Talk, you must contact the respective Customer (the enterprise using Jeen Talk) to exercise your rights of access, correction, or deletion. Jeen Talk cannot directly respond to or modify Customer-controlled data without Customer’s authorization.

1.2. Jeen Talk as a Data Controller

We act as a Data Controller only in the limited contexts described below, where we determine the purposes and means of processing:

*   Managing our Site (https://jeen.ai/) and interactive marketing activities.

*   Administering Customer accounts, login credentials, billing contacts, and payment processing.

*   Handling direct inbound customer communications, sales inquiries, and support requests.

*   Collecting Platform analytics and anonymous usage metadata.

2. PERSONAL DATA WE COLLECT AS A DATA CONTROLLER

When you visit our Site, register a Customer account, or interact with us, we may collect the following categories of personal data:

*   Account & Login Credentials: Business email address, full name, username, password, role identifier, and SSO credentials (via WorkOS).

*   Business Contact Details: Name, telephone number, business address, and company name provided during product inquiries or demo requests.

*   Payment & Billing Data: Credit card details, billing address, bank account details, and corporate tax identifiers processed securely through our payment processors.

*   Device & Online Identifiers: IP addresses, browser types, operating systems, and online activity logs collected via cookies and analytical tags (e.g., Google Analytics).

3. HOW WE USE YOUR PERSONAL DATA

We process your personal data under the following legal bases:

*   Performance of a Contract: To provision, authenticate, and administer Customer accounts on our SaaS Platform; to process transactions and handle support queries.

*   Legitimate Interests: To analyze Platform usage patterns and optimize our user interfaces, monitor and prevent fraud, ensure cybersecurity, and manage our business relationships.

*   Compliance with Legal Obligations: To comply with tax laws, cooperate with regulators, and maintain transaction records under applicable Israeli and EU laws.

*   Consent: To send marketing communications, deploy non-essential tracking cookies, or process job applications (which may be withdrawn at any time).

4. SUBPROCESSORS AND DATA PROTECTION SAFEGUARDS

To deliver our multi-tenant SaaS services, we engage trusted third-party providers (Subprocessors) who assist with computing, storage, AI processing, and security.

An official list of our primary subprocessors includes:

*   SaaS Infrastructure & Cloud Hosting: Microsoft Azure (EU servers), RunPod (GPU cloud).

*   AI Translation & Transcription Subsystems: Soniox, Speechmatics, Azure OpenAI, Google Gemini.

*   Voice Dubbing & TTS Processing: Deepdub Ltd., Cartesia, Google Cloud.

*   Authentication & Identity Access Management: WorkOS.

*   Platform Security Scanning: Snyk SAST, JFrog CVE Scan.

*   PSTN Telephony Gateway: Twilio.

Our Commitment: We ensure that all Subprocessors are bound by written agreements that mandate strong confidentiality standards, strict security practices, and compliance with cross-border data transfer laws.

5. INTERNATIONAL TRANSFERS AND DATA RESIDENCY

5.1. Servers in Europe (EU). To ensure high-availability and specialized GPU-accelerated computing, Jeen Talk’s cloud storage and processing instances are primary located in secure data centers in the European Union (EU).

5.2. Cross-Border Compliance. Personal data transferred from Israel or the European Economic Area (EEA) to servers outside of those territories is governed by robust transfer mechanisms:

*   Israel-EU Transfers: Transfers from the EEA to Israel are protected under the European Commission’s adequacy decision recognizing Israel as providing an adequate level of data protection.

*   Standard Contractual Clauses (SCCs): Where subprocessors process data in jurisdictions without adequacy decisions (such as the US), we rely on the European Commission’s Standard Contractual Clauses (SCCs) to enforce GDPR-equivalent protections.

6. BIOMETRIC VOICE DATA AND AI GUARANTEES

6.1. Biometric Nature of Voiceprints. A biometric voiceprint is generated when performing voice cloning operations. Under Applicable Privacy Laws, this is classified as sensitive biometric data.

6.2. Customer Consent Obligations. Customers are strictly required to secure written, explicit, and freely given consent from all performers, actors, or individuals whose voice recordings are uploaded as Inputs. Customers must maintain a clear record of these consents.

6.3. No General AI Training on Personal Data. We enforce a strict model governance policy: Jeen Talk does not utilize identifiable Customer Data, raw Inputs, or voice recordings to train, fine-tune, or improve our generalized, public-facing base AI models, unless explicitly agreed to in a separate, written, and bilateral agreement with the Customer.

7. YOUR DATA SUBJECT RIGHTS

If you are a resident of Israel, the EEA, or certain US states, you have the following rights regarding the personal data we hold as a Data Controller:

*   Right of Access & Portability: Request details and a structured copy of your personal data.

*   Right to Rectification: Request correction of inaccurate or incomplete records.

*   Right to Erasure (Deletions): Request deletion of your personal data, subject to legal retention obligations.

*   Right to Object / Restrict Processing: Object to direct marketing or processing based on legitimate interests.

*   Right to File a Complaint: Escalate unresolved concerns to the Israeli Privacy Protection Authority (PPA) or your local EEA supervisory authority.

 

To exercise these rights, please contact us at dataprivacy@jeen.ai. We will respond to verified requests within the timelines prescribed by applicable law.

8. DATA SECURITY AND RETENTION

8.1. Security Certifications. Jeen Talk maintains rigorous technical, administrative, and physical safeguards. We align with industry standards including SOC 2 Type II and ISO/IEC 27001 certifications. All data is encrypted in transit and at rest, and access is managed via strict role-based access controls.

8.2. Retention Policies. We retain personal data only for as long as necessary to fulfill the purposes described in this policy, support our active subscription relationships, or comply with statutory tax, audit, and regulatory requirements. Customer-controlled data is deleted within 30 days of subscription termination, in accordance with the Terms and Conditions.