Privacy policy

Last updated: June 27, 2026

This policy explains how Ertejel (referred to as "Ertejel" or "we") collects, uses, shares and protects your personal data when you use the platform and its services.

1. Who is responsible for the data (controller)

The entity responsible for processing your personal data as the "Data Controller" is Ertejel. For any privacy matter, you can contact us at ertejel@gmail.com.

2. Categories of data we collect

• Account data: full name, email, password (encrypted), profile photo.
• Profile data: level, goals, preferred language.
• Content you create: voice recordings, transcripts, analysis reports, test results.
• Usage and technical data: IP address, browser type, operating system, pages visited, error logs.
• Contact and support data: messages you send to us or to the support team.
• Billing data: collected and processed directly by our payment provider Lemon Squeezy; we don't store your card details.

3. Purposes of processing and legal basis

• Performance of a contract: creating your account, providing AI training and analysis services, managing your subscription.
• Legitimate interests: improving the product, preventing fraud, platform security, aggregated analytics.
• Consent: sending optional marketing newsletters and promotional messages.
• Legal obligation: keeping accounting and tax records and responding to official requests.

4. Sharing data with third parties

We share a minimum of data with trusted service providers, solely for the following purposes:

• Lemon Squeezy LLC — as the Merchant of Record responsible for processing payments, managing subscriptions, calculating taxes, issuing invoices and handling refund requests.
• Hosting and cloud database providers (Supabase / Cloudflare) to run the infrastructure.
• AI service providers (such as OpenAI and Google) to analyze recordings and evaluate performance.
• Analytics and technical monitoring tools to detect faults and improve performance.
• Professional advisers (legal and accounting) when needed.
• Government or judicial authorities when there is a legal obligation.

5. Data retention

• Account data: for as long as your account is active, and no longer than 24 months after it's closed.
• Voice recordings and session results: until you delete them, or for 12 months from creation.
• Billing records and invoices: 7 years to meet tax and accounting obligations.
• Security and access logs: up to 12 months.

Data is deleted or anonymized once it's no longer needed.

6. Your rights

Under applicable laws, you have the right to:

• Access your data and get a copy of it.
• Correct any inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing.
• Transfer your data to another provider (portability).
• Withdraw consent at any time without affecting the lawfulness of prior processing.
• File a complaint with the competent supervisory authority in your country.

To exercise any of these rights, contact us at ertejel@gmail.com and we'll respond within 30 days at most.

7. Security

We apply appropriate technical and organizational measures to protect your data, including: encryption in transit (TLS/HTTPS) and at rest, role-based access controls, isolation of user data through row-level security (RLS) policies, regular monitoring, and regular backups.

8. Cookies

We use cookies necessary to run your session and sign-in, and optional analytics cookies to measure performance. You can manage your preferences in your browser settings.

9. International data transfers

Your data may be processed on servers outside your country (including the European Union and the United States). We rely on appropriate legal safeguards such as Standard Contractual Clauses (SCCs) to protect these transfers.

10. Updates to this policy

We may update this policy from time to time. We'll post the new version on this page with the update date, and we'll notify you of any material changes by email or an in-platform notice.