GDPR & Data Processing

Roles

For voice content you and your organisation control, you act as data controller and Impact 24x7 LLC, established in the Emirate of Sharjah, United Arab Emirates, business registration number 2537948 acts as processor on your behalf. For account and operational data, we act as controller.

Processing instructions

We process personal data only on documented instructions: operating the Service — transcription, translation, search, storage and user-directed sharing.

Sub-processors

• Google Cloud Platform (hosting and storage, EU/US regions as configured)
• Resend (transactional email delivery)
• Telegram Bot API / WhatsApp hand-off (only when you use those share channels)

Security

Encryption in transit (TLS), hashed passwords, access-controlled infrastructure, per-account session signing, and processing-on-device by design where possible.

Data subject requests

We assist with access, correction, deletion and portability requests within statutory deadlines. Contact legal@insupermind.com.

Breach notification

In the event of a personal data breach we notify affected controllers and, where required, the UAE Data Office / supervisory authority within the statutory timeframe.

International transfers

Transfers outside the UAE rely on the safeguards required by UAE Federal Decree-Law No. 45 of 2021 and, where applicable, GDPR Standard Contractual Clauses.

Deletion

On account deletion or contract end we delete or return personal data, except what law requires us to keep.

Governing law

UAE Federal Decree-Law No. 45 of 2021 and the laws of the Emirate of Sharjah.