1. About DJELIA
DJELIA Technologies Inc. (“DJELIA”) is an artificial intelligence company based in Quebec, Canada. We build AI models for African languages, beginning with Bambara, delivering translation, transcription, and speech synthesis to clients through our API and web console (the “Console”) (together, the “Services”).
Our website address is https://djelia.cloud.
Depending on the context, DJELIA acts as:
- Responsible for the personal information we collect through our website and Console, including account registration and billing, within the meaning of Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25 (equivalent to a “controller” under the GDPR).
- A service provider for personal information submitted to the Services by clients. In this role, DJELIA processes data on the client's instructions. The client remains responsible for that data.
2. Information We Collect
2.1 Website, Console, and Account Information
- Name and email address from account registration.
- Organization name, where provided.
- Billing information processed through Stripe.
- IP address, browser user agent, and request metadata (timestamps, endpoints, latency) collected automatically.
- Usage data collected through PostHog, our analytics tool.
- Cookies, as described in Section 7.
2.2 Service Data Submitted Through the API and Console
When clients use the Services, the following data (“Service Data”) is submitted to and processed by DJELIA:
- Text submitted for translation.
- Audio recordings submitted for transcription (speech-to-text).
- Text submitted for speech synthesis (text-to-speech) and the generated audio.
- Processing metadata including job identifiers, timestamps, language pairs, and API credentials.
Clients are responsible for ensuring they have a lawful basis for submitting data to DJELIA and for notifying relevant individuals in line with their own obligations.
3. How We Use Personal Information
3.1 Website and Account Data
- Account management: to create and manage your account.
- Billing: to process payments through Stripe.
- Customer support: to respond to enquiries and feedback.
- Service communications: to send account or service updates.
- Analytics: to understand and improve usage through PostHog.
3.2 Service Data
- Delivering the requested translation, transcription, or speech synthesis as contracted.
- Generating processing logs required for service operation, issue investigation, and compliance.
- Improving our models, as described in Section 4.
We do not use Service Data for any purpose beyond those listed above without the client's express agreement.
4. Data Retention Defaults and Model Training
4.1 Retention by Default
By default, DJELIA retains Service Data submitted through the API and the Console.
Clients may request reduced or zero retention through a data processing agreement (“DPA”). Where a DPA is in place, its terms prevail. To request a DPA, contact privacy@djelia.cloud.
4.2 Model Training with Anonymized Data
DJELIA may use Service Data to train and improve its models only after the data has been anonymized in accordance with applicable law, including Quebec's Law 25.
Clients may opt out of model training through a DPA.
5. Consent and Choice
Where processing is based on consent, you may withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Account holders can manage their account information at any time through the Console, or request deletion by contacting us.
For clients submitting data through the Services, the terms of processing are governed by the DPA in place between DJELIA and the client, where applicable.
6. How Long We Retain Your Data
| Data Category | Retention Period |
|---|---|
| Account and registration information | Retained for the duration of the account, and thereafter as required for legal, accounting, and billing purposes. |
| Billing and payment records | Retained in accordance with applicable tax and financial recordkeeping requirements. |
| Service Data (text, audio, transcripts, generated audio) | Retained by default as described in Section 4.1, or for the period defined in the applicable DPA. |
| Processing and system logs | Retained for the period defined in our internal data retention policy. |
| Anonymized training data | Anonymized data is no longer personal information and may be retained for model development. |
When personal information is no longer required for the purposes for which it was collected, it is securely destroyed or anonymized in accordance with applicable law.
7. Cookies and Tracking
The Console uses session and authentication cookies only, to maintain your login session. We do not use advertising or third-party tracking cookies.
You can manage cookies through your browser settings. Disabling session cookies will prevent you from logging in to the Console.
8. Who We Share Your Data With
We do not sell personal information. We only share data in the following circumstances:
| Recipient | Purpose |
|---|---|
| Stripe | Billing email and payment information, shared solely for payment processing. Stripe is PCI DSS Level 1 certified. |
| Cloud infrastructure and model-serving providers | Sub-processors used to host and deliver the Services. All sub-processors are bound by data processing agreements imposing confidentiality and security obligations. |
| PostHog | Website and Console usage data, used solely to understand and improve the Services. |
| Regulators and authorities | Where required by law, court order, or lawful request, including the Commission d'accès à l'information du Québec (CAI) and the Office of the Privacy Commissioner of Canada. |
9. Transfers of Personal Information Outside Quebec
Some of our sub-processors may be located outside Quebec or Canada. Before transferring personal information outside Quebec, DJELIA conducts the privacy impact assessment required by Law 25 and ensures the information receives adequate protection under contractual safeguards.
10. Security
We implement technical and organizational measures designed to protect personal information, including:
- Encryption of data at rest and in transit.
- Access controls limiting access to authorized personnel only.
- Multi-factor authentication on production systems.
- Security monitoring and incident response procedures.
In the event of a confidentiality incident presenting a risk of serious injury, DJELIA will notify the Commission d'accès à l'information du Québec and the affected individuals, in accordance with Law 25.
11. Your Rights Over Your Data
Subject to applicable law, you have the right to:
- Access: request confirmation of whether we hold personal information about you and obtain a copy.
- Rectification: request that inaccurate or incomplete information be corrected.
- Deletion: request deletion of your personal information where it is no longer required, subject to legal obligations.
- Withdrawal of consent: where processing is based on consent, withdraw it at any time.
- Data portability: request a copy of your computerized personal information in a structured, commonly used technological format.
To exercise any of these rights, contact us using the details in Section 12. We will respond within thirty (30) days. If a request is denied, we will provide the reason and advise on available recourse.
For data submitted through the Services: requests should be directed to the client as the responsible party. DJELIA will support the client in responding as required by the DPA.
If you are not satisfied with our response, you may lodge a complaint with the Commission d'accès à l'information du Québec or, where applicable, the Office of the Privacy Commissioner of Canada.
12. Contact Us
Privacy Officer: Ibrahima Mounkoro
Email: privacy@djelia.cloud
13. Changes to This Policy
We review and update this policy periodically. When material changes are made, we will update the effective date and notify users where appropriate. Prior versions are retained and available on request.