JARAI Media Studio Ltd ("JARAI", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy, contact us at privacy@jarai.studio.
1. Who we are
JARAI Media Studio Ltd is the data controller for personal data collected through jarai.studio and the JARAI Media Studio platform. We are registered in England and Wales.
As data controller, we determine the purposes and means of processing your personal data. Our lawful bases for processing are described in each section below.
2. What data we collect
We collect the following categories of personal data:
Account data
When you register for an account, we collect your name, email address, company or channel name, and the role you identify with (creator, media entrepreneur, enterprise, or investor). We use this to create and manage your account and to provide the service.
Usage and analytics data
We use Cloudflare Web Analytics to understand how visitors use our website. Cloudflare Web Analytics is a privacy-preserving analytics tool that does not use cookies, does not collect personal data, and does not track individual visitors. No IP addresses, device fingerprints, or personal identifiers are stored or transmitted. See our Cookie Policy for details.
Content and configuration data
When you use the JARAI platform, you provide content strategy configurations, production settings, connected platform credentials (via OAuth — we store tokens, not passwords), and the production outputs generated by the pipeline. This data is stored to operate the service on your behalf.
Billing data
Payment processing is handled by Stripe, Inc. We do not store payment card details. We receive confirmation of payment status and a Stripe customer reference only. Stripe's privacy policy applies to payment data.
Communications
If you contact us by email, through the sign-up form, or via support channels, we retain your messages and contact details to respond to your enquiry and to manage the relationship.
3. Lawful basis for processing
We process your personal data on the following lawful bases under UK GDPR Article 6:
- Contract (Article 6(1)(b)): processing necessary to perform our contract with you — account management, service delivery, and support.
- Legitimate interests (Article 6(1)(f)): security monitoring, fraud prevention, service improvement, and business analytics using anonymised data only. We have assessed that these interests are not overridden by your rights.
- Legal obligation (Article 6(1)(c)): retaining financial records as required by HMRC, Companies House, and applicable company law.
- Consent (Article 6(1)(a)): marketing communications, where you have explicitly opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing.
4. How we use your data
We use your personal data to:
- Create and manage your JARAI account
- Provide the autonomous media production pipeline service
- Process payments and manage subscription billing
- Send service-related communications (account alerts, security notices, service updates)
- Respond to support and sales enquiries
- Improve the platform using aggregated, anonymised usage data
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal and regulatory obligations
We do not use your personal data for automated profiling or decision-making that produces legal or similarly significant effects without human involvement.
5. Data retention
| Data type | Retention period |
|---|---|
| Account data | Duration of account plus 7 years after closure |
| Content and production data | Duration of account; deleted within 30 days of account closure on request |
| Billing and financial records | 7 years (HMRC requirement) |
| Support communications | 3 years from last interaction |
| Website analytics (Cloudflare) | Aggregate data only; no personal data stored |
6. Who we share your data with
We share your personal data only with:
Service processors
Third parties who process data on our behalf under Data Processing Agreements (DPAs):
- Microsoft Azure — cloud hosting and storage (UK South and West Europe regions)
- Stripe — payment processing (UK/EU entities)
- AI model providers (OpenAI, Anthropic, Google, and others) — where content you have configured is processed by AI models to generate media assets
Legal and regulatory authorities
We will share data where required by law, a valid court order, or a regulatory investigation by a competent authority. We will notify you of such requests unless legally prevented from doing so.
We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
7. International data transfers
Our primary infrastructure is hosted in Azure UK South and West Europe regions. AI model providers (OpenAI, Anthropic, and others) may process data in the United States and other countries outside the UK.
For transfers to countries without a UK adequacy decision, we rely on Standard Contractual Clauses (SCCs) approved by the ICO, or other appropriate safeguards as permitted by UK GDPR Chapter V. A copy of the applicable safeguards is available on request at privacy@jarai.studio.
8. Your rights under UK GDPR
You have the following rights in relation to your personal data:
- Access (Article 15): request a copy of the personal data we hold about you
- Rectification (Article 16): request correction of inaccurate or incomplete data
- Erasure (Article 17): request deletion of your data ("right to be forgotten"), subject to legal retention obligations
- Restriction (Article 18): request that we restrict processing of your data in certain circumstances
- Portability (Article 20): receive your data in a structured, machine-readable format for transfer to another controller
- Object (Article 21): object to processing based on legitimate interests
- Withdraw consent: withdraw marketing consent at any time without affecting processing already carried out
To exercise any of these rights, email privacy@jarai.studio with your name, email address, and a description of your request. We will respond within one calendar month. We may request proof of identity before processing your request.
9. The right to complain
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We would appreciate the opportunity to address your concerns before you contact the ICO. Please contact us at privacy@jarai.studio first.
10. Cookies
See our Cookie Policy for information about how we use cookies and similar technologies on jarai.studio.
11. Changes to this policy
We will notify you of material changes to this policy by email and by a notice on our website at least 30 days before changes take effect. The "last updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically.
12. Contact us
- Data protection enquiries: privacy@jarai.studio
- General enquiries: hello@jarai.studio
- Company: JARAI Media Studio Ltd, registered in England and Wales