Privacy Policy

Last updated: October 24, 2026

This policy explains what data sole proprietor “Lotus Group” (“we”, “us”) collects and how we process it when you use the website aitjaz.com (the “Website”) and the AitJaz application (the “App”). It is based on the Law of the Republic of Kazakhstan “On Personal Data and Its Protection” and, for users in the European Union, the General Data Protection Regulation (GDPR).

1. Data controller

2. By default, your voice and text stay on your computer

• By default, speech recognition (both dictation and “Audio & video to text”) runs entirely on your computer. Audio, files and recognized text are not sent to us or to any third party, except in three cases, each of which happens only through your own action (details in section 3):
  • (a) you yourself turn on cloud recognition with your own API key: audio goes from your computer directly to the service you chose, and we receive nothing;
  • (b) you send a message via “Report a problem” yourself: we receive the message text and App details and, if the box is checked (it is checked by default and can be unchecked), your phrases from the last 30 minutes;
  • (c) you start the recognition test yourself and check the consent box: we receive the recordings and text of the test phrases.
  Other internet connections made by the App (section 3) contain no voice or text.
• Audio is kept in memory only: your recent phrases (at most 10 from the last 30 minutes) stay there so that you can attach them to a problem report, and older ones are discarded. The App does not save recordings to disk unless you explicitly save an “error example” in settings; that file stays on your computer.
• To get capitalization and spacing right, the App reads a few characters before the cursor in the active field. This text is processed in memory only and is never transmitted.
• Settings, dictionary and logs are stored locally in your Windows user folder.

3. When the App uses the internet

• Model download (recognition and speaker separation). On first launch, or when you choose another model, the App downloads recognition model files from Hugging Face (huggingface.co). When you first turn on speaker separation, it downloads the voice-distinguishing model from our GitHub page (github.com), or from Hugging Face if it is not available there. That service sees your IP address, as with any file download. No voice or text is sent.
• Activation. Keys we issue directly (for example, after a Kaspi payment) are verified on your computer without contacting a server; the key is bound to an anonymized machine identifier that is computed locally and not sent to us. If you bought your key on our website through Dodo Payments, the App sends that key and the anonymized identifier to Dodo Payments once at activation (to enforce the 2-computer limit) and then about once a week, when online, checks that the key is still valid. No voice, text or computer name is sent.
• Cloud, your own key (optional, off by default). If you turn it on yourself in the App settings (Cloud section) and paste your own API key of a speech recognition service (for example, OpenAI or Groq), the audio of your phrases (and, if selected, recordings in “Audio & video to text”) is sent from your computer directly to that service, which returns the recognized text. The speech language and the words of your vocabulary are sent with the audio; text already written in the window is not. We receive neither the audio, nor the text, nor your key: the key is stored on your computer, encrypted by Windows. This data is processed by the service you chose, under its own rules and your agreement with it. You can turn the cloud off at any time in the same section.
• Update checks. Once a day the App installed from our website asks GitHub (github.com) whether a new version is available and, when you choose to update, downloads it from there. GitHub sees your IP address; no voice or text is sent. In the Microsoft Store version, Microsoft Store checks for and installs updates through Windows, under Microsoft's own privacy terms (privacy.microsoft.com); no voice or text is sent to it either.
• Recognition test. Only if you start the test yourself (“Take the recognition test”) and check the consent box (it is unchecked by default), at the end of the test we receive: recordings of the test phrases you read (7 short phrases), the recognized text, recognition times, the selected languages, the App and Windows versions, the microphone name and a random installation number. Your regular dictation and text in other apps are never sent. Separately, until the test is taken, the App asks our website at startup whether a test is needed for your language (only the language and App version are sent, no voice or text). Tests are stored on our hosting (ps.kz, Kazakhstan), used only to improve recognition and kept no longer than 2 years; ask info@aitjaz.com to delete yours sooner.
• Problem reports. Only when you click “Report a problem” and “Send”, we receive: your text, your e-mail (if given), the App and Windows versions, selected languages and a random installation number. If the box “I allow sending the audio and text of my recent phrases about this problem” is checked (it is on by default and can be unchecked), also the recordings and recognized text of your phrases from the last 30 minutes, at most 10; their text is shown in the window before sending. Text before the cursor is never sent. Reports are stored on our hosting (ps.kz, Kazakhstan) and used only to find and fix the problem; every 12 hours the App checks whether your report has been fixed (only the report number and its access code are sent). Reports are kept until fixed and no longer than 2 years; ask info@aitjaz.com with the report number to delete one sooner.

4. Data we receive when you buy or contact us

• Purchase: name, email address (to deliver your key), country, amount and date of payment. We never receive or store your full card details: payments are processed by our payment provider, which may act as the merchant of record and is responsible for its own processing under its privacy policy.
• Support: your email or phone number and the content of your message.

We use this data only to deliver and restore license keys, answer questions, process refunds, meet accounting and tax obligations, and notify you of important App updates. Marketing emails are sent only with your consent. Legal bases (GDPR): performance of a contract, legal obligation, and legitimate interest.

Business emails. If your work email address is published on your organization's website or in your professional profile, we may write to you personally about the AitJaz app, no more than three emails. Reply “no” and we will not write again; your address will be kept only on our do-not-contact list.

5. Website, cookies and analytics

The Website may use Google services (Google Analytics, Google Ads) and similar tools to measure traffic and advertising effectiveness. These services may set cookies and receive pseudonymous data such as IP address, device and browser type, and pages visited. You can block cookies in your browser settings; the Website will keep working. See policies.google.com/privacy.

The Website also uses Microsoft Clarity to understand how visitors use its pages (scrolling, clicks, heatmaps) and to improve them. Clarity may set cookies and record pseudonymous interactions on the Website's pages; text typed into fields is masked. This data relates only to the Website, not to the AitJaz app or your voice. See privacy.microsoft.com.

6. Sharing

We do not sell your data. We share it only with payment providers (to process payments), our hosting and email providers (to run the Website and email), and public authorities where required by law. Some of these providers may process data outside your country; we rely on their contractual safeguards.

7. Retention

Purchase records are kept as long as required by the tax and accounting laws of Kazakhstan and while your license is valid (so we can restore your key). Support correspondence is kept for no more than 3 years from the first activation of your key.

8. Your rights

You may request access to, correction or deletion of your data, object to processing, request data portability, and withdraw consent to marketing at any time. Email info@aitjaz.com. We reply within 10 business days. EU residents may also lodge a complaint with their local supervisory authority.

9. Children

The Website and App are not directed at children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy. The current version is always published on this page with its date.