Privacy and Security Policy

Privacy Policy

Updated: September 2024

At Habe Voice Limited, we prioritize the privacy and security of our users’ personal data. We are committed to adhering to the highest standards of data protection, ensuring compliance with global data privacy laws and safeguarding sensitive information. This policy outlines the key practices and measures we implement to protect personal data while delivering our innovative AI-driven communication solutions.

  1. Data Collection and Usage

We collect personal information solely for providing and improving our services. Data collected includes, but is not limited to:

  • User account details (name, contact information, etc.)
  • Usage data, including interaction with our app
  • Technical information (IP addresses, device identifiers, etc.)


Purpose of Data Collection:

  • To provide real-time sign language translation services.
  • To improve user experience through app features and AI model enhancements.
  • To communicate with users and send notifications related to our services.

All data is collected with explicit user consent and we ensure transparency in how we use this information. We do not share or sell personal data to third parties without the user’s consent, except when legally required.

  1. Data Security Protocols

Encryption:

  • We use industry-standard encryption (AES-256) for data both at rest and in transit. All personal and sensitive data is encrypted to prevent unauthorized access.

Data Anonymization:

  • Where possible, we anonymize or pseudonymize user data to minimize the risk of personal identification in the case of data breaches or unauthorized access.

Access Controls:

  • Strict access control mechanisms are in place. Only authorized personnel with specific roles and responsibilities have access to personal information. All access to sensitive data is logged and monitored.

Multi-Factor Authentication (MFA):

  • For access to our internal systems, we enforce multi-factor authentication (MFA) to prevent unauthorized personnel from accessing data and system resources.
  1. Compliance with Legal Regulations

Habe Voice Limited complies with all applicable data protection laws and regulations, including but not limited to:

  • General Data Protection Regulation (GDPR) for users within the European Economic Area (EEA).
  • Data Protection Act 2018 (UK-specific regulations).
  • California Consumer Privacy Act (CCPA) for applicable US-based users.

We regularly update our policies and systems to ensure ongoing compliance with emerging regulations and data protection best practices.

  1. User Rights

We empower users to have full control over their personal data. As part of our privacy commitment, users have the following rights:

  • Right to Access: Users can request access to their personal data at any time.
  • Right to Correction: Users can request corrections or updates to inaccurate personal information.
  • Right to Deletion: Users can request the deletion of their personal data where it is no longer required for the service.
  • Right to Data Portability: Users can request a copy of their data in a commonly used format.
  • Right to Object: Users can object to data processing for certain purposes, such as marketing.

All user requests are processed within a reasonable time, and we provide users with clear instructions on how to exercise their rights.

  1. Data Retention Policy

We retain personal data only for as long as it is necessary to fulfil the purposes outlined in this policy. In line with legal and regulatory requirements, we have defined data retention periods, and once the data is no longer required, it is securely deleted or anonymized.

  1. Data Sharing and Third-Party Processors

We may share user data with third-party service providers who assist us in delivering our services (e.g., cloud hosting, payment processing, etc.). All third parties are required to comply with strict data privacy agreements and meet our high standards of data protection.

No unauthorized data sharing:

  • We do not sell or share personal data with unauthorized third parties. Any sharing of data with external parties (such as research or product development) is done with anonymized datasets to ensure privacy.
  1. Data Breach Response Plan

In the unlikely event of a data breach, we have a detailed incident response plan to ensure swift and efficient action:

  • Immediate containment of the breach to prevent further unauthorized access.
  • Notification of affected users and relevant data protection authorities within 72 hours, as required by GDPR.
  • Investigation and remediation to address vulnerabilities and prevent future incidents.

We also maintain detailed logs and reports of all data breach incidents for transparency and compliance purposes.

  1. Regular Audits and Reviews

We conduct regular audits of our systems and data privacy policies to ensure:

  • Continued compliance with legal regulations.
  • Identification and mitigation of new data security risks.
  • Implementation of the latest best practices in cybersecurity and data protection.

Our commitment to regular assessments ensures that we remain at the forefront of privacy and security practices.

  1. Transparency and Accountability

We maintain a transparent approach to data privacy by regularly updating users about our privacy practices. We publish our Privacy Policy on our website and within our mobile applications, ensuring it is accessible and clear to all users.

  1. Data Privacy Officer (DPO)

To oversee compliance and address any data privacy concerns, we have appointed a dedicated Data Privacy Officer (DPO) who is responsible for:

  • Monitoring data protection compliance.
  • Providing guidance on data protection matters.
  • Liaising with data protection authorities where necessary.

Conclusion:
At Habe Voice Limited, we understand the critical importance of data privacy and security in our AI-driven services. We are committed to maintaining a secure environment for our users while continuously improving our processes to ensure that all personal data is handled responsibly, ethically, and transparently.

If you have any questions regarding our data privacy practices, please contact us at contact@habevoice.com.