Privacy Policy for Organizations

1. Introduction

Listenscene is a product of Hevichay. When your organization subscribes to Listenscene, Hevichay processes personal data relating to your account, authorized users, and, on your instructions, your website visitors who use the widget.

2. Roles and Responsibilities

Your organization is the data controller for personal data you collect from website visitors through the widget. Hevichay acts as a data processor for that visitor data. For organization account and billing data, Hevichay typically acts as controller.

3. Organization Account Data We Collect

We collect and process the following categories of data relating to your organization and its authorized users:

• Account registration details: organization name, administrator name, email address, and hashed password
• Billing and subscription data: plan, payment status, invoices, and billing contact information
• Configuration data: AI assistant settings, widget configuration, and team member access permissions
• Usage and operational data: call volumes, feature usage, audit logs, and support communications

4. End-User Data Processed on Your Behalf

When visitors use the widget on your website, we process their data as described in our End-User Privacy Policy. You are responsible for providing appropriate privacy notices to your visitors and ensuring a lawful basis for processing.

5. Hevichay's Obligations

Hevichay commits to:

• Process organization and end-user data only to provide and secure Listenscene
• Implement appropriate technical and organizational security measures
• Maintain confidentiality of data accessed by authorized personnel
• Notify your organization of personal data breaches affecting your data without undue delay
• Assist with data subject requests where reasonably possible and as set out in the DPA
• Delete or return organization data upon termination, subject to legal retention requirements

6. Your Organization's Rights

Your organization may:

• Access and export account and configuration data through the Service or upon request
• Correct inaccurate organization account information
• Request deletion of organization data upon account closure, subject to legal retention
• Receive a current list of subprocessors upon request
• Request a signed Data Processing Agreement for GDPR compliance

7. Data Retention

Organization account data is retained for the duration of your subscription and deleted after a reasonable grace period following closure, unless longer retention is required by law. End-user conversation data retention follows your account settings and our end-user Privacy Policy.

8. Third-Party Processors

Listenscene uses trusted third-party service providers for infrastructure, artificial intelligence, speech processing, and payment processing. A current list of subprocessors is available upon request.

9. Security

We implement industry-standard security measures including TLS encryption in transit, encryption at rest, access controls, IP blocklisting, rate limiting, and call duration caps. Details are available in the Service Availability document and upon request.

10. Contact

For privacy questions relating to your organization account, contact privacy@hevichay.com.

11. Governing Law and Jurisdiction

These Terms are governed by the laws of Madagascar. Any dispute shall be submitted to the competent courts of Madagascar, subject to mandatory provisions of applicable law.