Skip to content
JARAI
How It WorksWhat You ProduceFAQ
Get started free
Get started free

Legal

Privacy Policy

Last updated: 12 April 2026

JARAI Media Studio Ltd ("JARAI", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy, contact us at privacy@jarai.studio.

1. Who we are

JARAI Media Studio Ltd is the data controller for personal data collected through jarai.studio and the JARAI Media Studio platform. We are registered in England and Wales.

As data controller, we determine the purposes and means of processing your personal data. Our lawful bases for processing are described in each section below.

2. What data we collect

We collect the following categories of personal data:

Account data

When you register for an account, we collect your name, email address, company or channel name, and the role you identify with (creator, media entrepreneur, enterprise, or investor). We use this to create and manage your account and to provide the service.

Usage and analytics data

We use Cloudflare Web Analytics to understand how visitors use our website. Cloudflare Web Analytics is a privacy-preserving analytics tool that does not use cookies, does not collect personal data, and does not track individual visitors. No IP addresses, device fingerprints, or personal identifiers are stored or transmitted. See our Cookie Policy for details.

Content and configuration data

When you use the JARAI platform, you provide content strategy configurations, production settings, connected platform credentials (via OAuth — we store tokens, not passwords), and the production outputs generated by the pipeline. This data is stored to operate the service on your behalf.

Billing data

Payment processing is handled by Stripe, Inc. We do not store payment card details. We receive confirmation of payment status and a Stripe customer reference only. Stripe's privacy policy applies to payment data.

Communications

If you contact us by email, through the sign-up form, or via support channels, we retain your messages and contact details to respond to your enquiry and to manage the relationship.

3. Lawful basis for processing

We process your personal data on the following lawful bases under UK GDPR Article 6:

  • Contract (Article 6(1)(b)): processing necessary to perform our contract with you — account management, service delivery, and support.
  • Legitimate interests (Article 6(1)(f)): security monitoring, fraud prevention, service improvement, and business analytics using anonymised data only. We have assessed that these interests are not overridden by your rights.
  • Legal obligation (Article 6(1)(c)): retaining financial records as required by HMRC, Companies House, and applicable company law.
  • Consent (Article 6(1)(a)): marketing communications, where you have explicitly opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. How we use your data

We use your personal data to:

  • Create and manage your JARAI account
  • Provide the autonomous media production pipeline service
  • Process payments and manage subscription billing
  • Send service-related communications (account alerts, security notices, service updates)
  • Respond to support and sales enquiries
  • Improve the platform using aggregated, anonymised usage data
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal and regulatory obligations

We do not use your personal data for automated profiling or decision-making that produces legal or similarly significant effects without human involvement.

5. Data retention

Data typeRetention period
Account dataDuration of account plus 7 years after closure
Content and production dataDuration of account; deleted within 30 days of account closure on request
Billing and financial records7 years (HMRC requirement)
Support communications3 years from last interaction
Website analytics (Cloudflare)Aggregate data only; no personal data stored

6. Who we share your data with

We share your personal data only with:

Service processors

Third parties who process data on our behalf under Data Processing Agreements (DPAs):

  • Microsoft Azure — cloud hosting and storage (UK South and West Europe regions)
  • Stripe — payment processing (UK/EU entities)
  • AI model providers (OpenAI, Anthropic, Google, and others) — where content you have configured is processed by AI models to generate media assets

Legal and regulatory authorities

We will share data where required by law, a valid court order, or a regulatory investigation by a competent authority. We will notify you of such requests unless legally prevented from doing so.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

7. International data transfers

Our primary infrastructure is hosted in Azure UK South and West Europe regions. AI model providers (OpenAI, Anthropic, and others) may process data in the United States and other countries outside the UK.

For transfers to countries without a UK adequacy decision, we rely on Standard Contractual Clauses (SCCs) approved by the ICO, or other appropriate safeguards as permitted by UK GDPR Chapter V. A copy of the applicable safeguards is available on request at privacy@jarai.studio.

8. Your rights under UK GDPR

You have the following rights in relation to your personal data:

  • Access (Article 15): request a copy of the personal data we hold about you
  • Rectification (Article 16): request correction of inaccurate or incomplete data
  • Erasure (Article 17): request deletion of your data ("right to be forgotten"), subject to legal retention obligations
  • Restriction (Article 18): request that we restrict processing of your data in certain circumstances
  • Portability (Article 20): receive your data in a structured, machine-readable format for transfer to another controller
  • Object (Article 21): object to processing based on legitimate interests
  • Withdraw consent: withdraw marketing consent at any time without affecting processing already carried out

To exercise any of these rights, email privacy@jarai.studio with your name, email address, and a description of your request. We will respond within one calendar month. We may request proof of identity before processing your request.

9. The right to complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would appreciate the opportunity to address your concerns before you contact the ICO. Please contact us at privacy@jarai.studio first.

10. Cookies

See our Cookie Policy for information about how we use cookies and similar technologies on jarai.studio.

11. Changes to this policy

We will notify you of material changes to this policy by email and by a notice on our website at least 30 days before changes take effect. The "last updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically.

12. Contact us

  • Data protection enquiries: privacy@jarai.studio
  • General enquiries: hello@jarai.studio
  • Company: JARAI Media Studio Ltd, registered in England and Wales
← Back to JARAI Media Studio
Privacy Policy Terms of Service Cookie Policy

© 2026 JARAI Media Studio. All rights reserved.