Privacy policy
Last updated: 1 October 2026
This policy explains how ARAMedia collects, uses and protects personal data. It applies to our clients, to the people who contribute recordings and language work to our projects, and to visitors to aramedia.co. We follow the EU General Data Protection Regulation (GDPR) and the data protection laws that apply where we operate.
1. Who we are
ARAMedia LLC-FZ (“ARAMedia”, “we”, “us”) is a company registered in Dubai, United Arab Emirates, with operations in South Korea. We collect and prepare speech and language data for organisations that build artificial intelligence and language technology.
For any privacy question or request, contact us at m.alajami@aramedia.co.
2. Who this policy covers
- Clients and prospective clients: people who contact us or work with us on behalf of a business.
- Contributors: speakers, voice talent, transcribers, linguists and other people who take part in our projects.
- Website visitors: anyone who visits aramedia.co or submits our contact form.
3. Our role in client projects
Under the GDPR, the organisation that decides why and how personal data is used is the controller. An organisation that handles data on a controller’s instructions is a processor.
- We are the controller for data we use to run our business: client contacts, contributor recruitment, contributor accounts, payments and our own records.
- When we collect recordings or other data for a specific client project, the client is usually the controller of that project data and we act as its processor. In that case we handle the data only as the client instructs and as our contract with the client allows. The client’s purposes are explained to contributors in the project information and consent form for that project.
Where our role differs on a particular project, we tell contributors in that project’s consent form.
4. Data we collect
From clients and prospective clients
- Name, job title, company, work email, phone or messaging contact.
- Project requirements and messages you send us.
- Contract, billing and invoicing details.
From contributors
- Identity and contact details: name, email, phone or messaging contact, country of residence.
- Profile details needed to match you to projects: age or age range, gender, native language, dialect, region, other languages spoken and accent.
- Project data: voice recordings, first-person (egocentric) video recordings, transcriptions, translations, annotations and related metadata such as recording device, environment and session details. Video recordings may show your hands, surroundings and activities, and may include your voice.
- Consent records: the consent forms and agreements you sign, with the date and version.
- Payment details: the information needed to pay you, and payment records.
- Identity verification: where a project or the law requires it, proof of identity or eligibility. We collect this only when necessary and keep it only as long as needed.
From website visitors
- Information you enter in our inquiry form: your name, work email, company, job title and project details.
- Information you enter in our contributor sign-up form, which we store in our website provider (Wix.com) and in a Google Sheets spreadsheet used to manage our contributor network.
- Basic technical data recorded by our website host, such as IP address and browser type, used for security and to keep the site running.
5. How we use data and our legal basis
| Purpose | Legal basis under the GDPR |
|---|---|
| Answering inquiries and preparing proposals | Legitimate interests in responding to business requests; steps before entering a contract |
| Delivering client projects, invoicing and account management | Performance of a contract; legal obligation for accounting records |
| Recruiting contributors and matching them to suitable projects | Steps before entering a contract with the contributor; legitimate interests |
| Collecting recordings and language data for a project | Consent given in the project consent form, and performance of the contributor agreement |
| Paying contributors | Performance of a contract; legal obligation |
| Quality checks on recordings and project work | Performance of a contract; legitimate interests in delivering accurate data |
| Keeping consent and contract records | Legal obligation; legitimate interests in proving lawful collection and defending legal claims |
| Website security and fraud prevention | Legitimate interests |
We do not sell personal data, and we do not use it for advertising. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
6. Recordings and consent
Before you contribute to a project, we give you information about that project and ask for your consent. The consent form tells you:
- what you will record or produce;
- who the data is collected for, described at least by type of organisation where the client’s name is confidential;
- how the data will be used, for example to train, test or improve speech recognition, text-to-speech or other language technology;
- whether your voice may be used to create a synthetic voice, which we only do with your separate, explicit agreement;
- how long the data will be kept and what you will be paid.
The consent terms are set according to each client’s requirements, so they can differ between projects. Please read each project’s form carefully. You never have to take part, and declining one project does not affect your eligibility for others.
We publish a recording on our website as a voice sample only if you give separate consent for that use. You can withdraw that consent at any time and we will remove the sample.
We do not use your recordings to identify you by your voice. If a project involves biometric data or any other special category of personal data, we will say so clearly and ask for your explicit consent.
Withdrawing consent
You can withdraw your consent at any time by emailing us. When you do, we stop using your data for that project, delete it from our own systems unless we must keep a record by law, and pass your request to the client where the data has been delivered.
Withdrawal does not affect processing that happened before you withdrew. Once data has been delivered to a client and used to build or train a model, it may not be technically possible to remove its influence from that model. The project consent form explains this before you agree.
7. Who we share data with
- Clients: project data such as recordings, transcripts and the profile details the project requires (for example age range, gender and dialect). We do not give clients your contact or payment details unless the project requires it and you have agreed.
- Service providers who help us run our business, such as website hosting, cloud storage, email, messaging and payment providers. They may use the data only to provide their service to us.
- Professional advisers such as lawyers and accountants, under confidentiality.
- Authorities when the law requires it, or to establish, exercise or defend legal claims.
- A buyer or successor if our business is reorganised, merged or sold, under the same protections described here.
8. International transfers
We operate in the United Arab Emirates and South Korea, and our clients and service providers may be located in other countries. When we transfer personal data from the European Economic Area or the United Kingdom to a country without an adequacy decision, we use the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism. You can ask us for details of the safeguards used.
9. How long we keep data
| Data | Retention |
|---|---|
| Inquiries that do not lead to a project | 24 months after our last contact |
| Client contracts, invoices and business records | As long as required by tax and commercial law, up to 7 years after the end of the relationship |
| Contributor profiles | While your account is active, and for 24 months after your last project, unless you ask us to delete it sooner |
| Recordings and project data held by us | Until the client accepts delivery, then up to 12 months for quality checks and support, unless the client contract requires a different period |
| Consent records and payment records | As long as the related data is in use, and up to 7 years afterwards to meet legal obligations and defend legal claims |
| Website technical logs | As set by our hosting provider, typically no more than 30 days |
Data that a client has received under its contract with us is kept by the client according to that client’s own retention terms, as described in the project consent form.
10. Security
We use technical and organisational measures appropriate to the risk, including restricted access on a need-to-know basis, secure file transfer, and confidentiality obligations for everyone who handles project data. No system is completely secure. If a personal data breach is likely to put your rights at risk, we will notify you and the relevant authority as the law requires.
11. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- ask us to delete your data;
- restrict or object to how we use your data, including where we rely on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time.
To use any of these rights, email m.alajami@aramedia.co. We will respond within one month, and may ask you to confirm your identity first. Where we act as a processor for a client, we will pass your request to that client and help them respond.
Some rights have limits. For example, we may keep data we are legally required to retain, or that we need to establish or defend legal claims.
If you are not satisfied with our response, you can complain to the data protection authority in your country. In the EU this is your national supervisory authority. We would appreciate the chance to resolve your concern first.
12. Contributor responsibilities
By taking part in a project, you confirm that:
- you are at least 18 years old;
- the information you give us about yourself, including your language and dialect, is true;
- the recordings you submit are of your own voice or your own point of view, made by you for that project;
- your recordings do not include other people’s faces, voices, names or personal details, unless the project instructions ask for it and those people have agreed;
- you will not include confidential information, or content you do not have the right to share.
Submissions that do not meet these conditions or the project instructions may be rejected.
13. Client responsibilities
Clients agree to use the data we deliver only for the purposes described in the project consent forms and our contract, and in line with the law that applies to them. Each client is responsible for its own processing of delivered data, including storage, security, retention and responses to individuals’ requests, as set out in our contract.
14. Website and cookies
Our website does not use advertising or analytics cookies, and it does not load fonts or tracking scripts from third parties. Our hosting provider records technical logs for security and to keep the site running.
Voice samples on our homepage are stored with Google (Google Sheets and Google Drive). They load only if you choose to play them. When you do, your browser connects to Google, which receives your IP address and technical information under Google’s own privacy policy.
Requests sent through our inquiry form are stored securely with our website and form provider, Wix.com, and are used only to respond to your request. Links to LinkedIn take you to that service, which has its own privacy policy.
15. Age requirement
Our projects and services are for adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.
16. Changes to this policy
We may update this policy when our services or the law change. We will post the new version on this page with a new date. If a change significantly affects how we use contributor data, we will tell affected contributors directly.
17. Contact us
ARAMedia LLC-FZ
Dubai, United Arab Emirates
Email: m.alajami@aramedia.co