Privacy Policy for Hatai
Last Updated: Feb 28, 2025
Let ChatGPT explain what matters to you
The English version of this document constitutes the sole official and legally binding text. By creating and using your account, you agree to be bound by the English terms and conditions. Any translations provided are for convenience only and do not modify or supersede the English version.
1. Information We Collect
Hatai collects personal information provided by users when creating an account and while using the Service. The types of information we collect include, but are not limited to:
1.1 Personal Identification Information
- Full name
- Email address
- Any additional details users voluntarily provide in their profile
2. How We Use Your Information
We process the collected information for the following specific purposes:
2.1 Service Functionality & Maintenance
- To create and manage user accounts
- To authenticate and authorize user access
- To maintain and improve core service performance
2.2 Personalization & User Experience
- To customize content and recommendations based on user preferences
- To remember user settings and interactions for a seamless experience
2.3 Service Improvement & Analytics
- To analyze usage patterns and optimize app performance
- To conduct research and enhance product features based on user interactions
2.4 Communication & Support
- To respond to user inquiries and provide customer support
- To send transactional emails (e.g., account verification, password resets, security alerts)
2.5 Security, Fraud Prevention & Compliance
- To detect and prevent fraud, abuse, and security threats
- To comply with legal and regulatory obligations
3. Information Sharing and Disclosure
We may share your personal information in the following circumstances:
- With your consent
- With service providers for operational purposes
- For legal compliance or enforcement
- In connection with a merger, acquisition, or sale of assets
4. Data Security
We implement security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Measures include but are not limited to granting the least privilege to our employees or contractors in order to carry out their jobs, in addition to following best practices in database management, such as making regular backups.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
In addition, we use OpenAI's Chat Completions API to generate the audio scripts, and OpenAI keeps all exchanged messages for 30 days before automatic deletion. They do this to monitor for abuse or misuse of their API.
6. Billing and Payment Processing
We use Apple App Store, Google Play and Stripe to manage billing and payment processing. When you make a purchase through our Service, you may be required to provide payment and billing information directly to either of these parties.
Your use of the Apple App Store or Google Play is governed by their terms of service and privacy policies, and we encourage you to review their policies before providing payment information.
If you subscribed via Apple and initiate a refund request, we will share data regarding your usage and consumption of purchased content with Apple. This information may include details about how you have accessed and interacted with the purchased content. The purpose of sharing this data is to help Apple make an informed decision regarding your refund request. We ensure that such data sharing is done in compliance with Apple's policies and only as necessary to process your request.
7. Children's Privacy
Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us.
8. Changes to This Privacy Policy
This Policy may be updated periodically. Users will be notified of significant changes, and the "Last Updated" date will be revised accordingly. We will make a best effort to summarize material changes, but users are ultimately responsible for reviewing and accepting the full updated Privacy Policy.
If we make material changes, you will be required to accept the updated policy to continue using our services. If you do not accept the updated policy, you will no longer be able to access the service, and it is your responsibility to cancel your subscription to avoid further charges. Continued payments without acceptance of the new policy will not constitute a refund-eligible claim.
9. Your Data Protection Rights
Under applicable data protection laws, including GDPR, CCPA, PIPEDA, LGPD, PDPA, and APPs, you may have the following rights:
9.1 Rights Under Data Protection Laws
- The right to access personal data we hold about you.
- The right to request correction of inaccuracies in your personal data.
- The right to request erasure of your personal data, also known as the "right to be forgotten".
- The right to restrict processing of your personal data.
- The right to data portability, allowing you to obtain and reuse your personal data for your own purposes.
- The right to object to processing of your personal data under certain circumstances.
- The right to withdraw consent at any time, where applicable.
- The right to lodge a complaint with a supervisory authority regarding our processing of your personal data.
9.2 Understanding and Exercising Your Rights
It is your responsibility to determine which of the above laws apply to you based on your location and circumstances. We encourage you to familiarize yourself with your specific data protection rights under the relevant laws and to reach out to the appropriate regulatory authorities if needed.
9.3 Service Restrictions Due to Exercising Rights
If you exercise any of these rights—such as restricting the processing of your personal data—and it prevents us from providing our services, we reserve the right to refuse service.
In such cases, it will be your responsibility to cancel any active subscriptions. Failure to do so will not constitute a refund-eligible claim, and no refunds will be provided for the remaining subscription period.
10. Special Notice for Malaysian Citizens
Your personal data is stored securely in the AWS New Jersey data center in the United States.
If you do not consent to your data being stored in this location, you may request deletion of your data by contacting us. However, please note that deleting your data will result in the termination of your access to our services, as we currently require this data center for operational reasons.
At this time, we are unable to provide alternative storage locations due to resource constraints. We will update this policy if additional options become available in the future.
11. Data Controllers and Processors
For the purposes of data protection laws, Hatai acts as the data controller for the personal information collected through the Service. This means that Hatai determines the purposes and means of processing personal data.
Some processing activities may be carried out by third-party service providers acting as data processors on behalf of Hatai. These processors are contractually bound to process personal data only as instructed by Hatai and to implement appropriate security measures to protect personal information.
11.1 Service Restrictions Due to Data Processing Rights
If you exercise any of these rights—such as restricting the processing of your personal data—and such a restriction prevents us from providing our services, we reserve the right to refuse service.
In such cases, it is your responsibility to cancel any active subscriptions. Failure to do so will not constitute a refund-eligible claim, except where required by law.
If you wish to regain access, you may modify your data processing preferences or contact us for assistance.
12. Contact Information
If you have any questions about this Privacy Policy or your data protection rights, please contact us at hello@hatai.ai.