Privacy Notice

Who controls this notice

Hajar Labs LLC operates Ownspoken from 2916 Grand Mission Way, Pflugerville, TX 78660. Contact keith@narrativecouncil.com for privacy questions, requests, appeals, or complaints. This notice applies when you visit, create an account, purchase, participate as an executive, or use Ownspoken.

1. Information we collect

• Account and contact information, including name, work email, authentication identifiers, membership, role, preferences, and support messages.
• Customer and executive material, including documents, pasted text, public URLs, questionnaires, edits, approvals, restrictions, briefs, research configuration, and generated work.
• Transaction and subscription information from Stripe. Stripe, not Hajar Labs, receives full payment-card details.
• Service and security information, including IP address, device/browser details, session records, provider receipts, audit events, and logs needed for reliable and secure operation.

2. How we use information

We use information to provide, personalize, secure, support, bill for, monitor, and improve Ownspoken; conduct customer-directed public research; produce and deliver requested work; enforce permissions; prevent abuse; maintain records; comply with law; and resolve disputes. We do not sell personal information or share it for cross-context behavioral advertising.

3. AI, research, and service providers

We use providers for cloud hosting and storage, authentication, payment, email, public-web research, document conversion, PDF rendering, and AI-assisted reasoning. Private material is sent only to the provider path needed for an authorized task. Public research uses a separate public-safe description rather than unrestricted private workspace content.

We do not promise universal U.S.-only processing, zero retention, or no training across every provider path. Exact processing depends on current provider configuration, endpoint terms, and the work requested. Ownspoken records the selected route and applies available data-collection and retention controls. See Subprocessors for current launch roles.

4. Retention, export, and deletion

Customer content is retained while the service is active so the workspace, history, and approvals remain useful. After cancellation or unrecovered payment failure, the paid term or grace period ends and a 30-day read-only export window begins. A complete workspace export can be generated before deletion. Generated export packages ordinarily expire after 37 days.

At the end of the export window, customer content is scheduled for deletion from active systems. Required subscription, transaction, tax, security, fraud, legal, and dispute records may be retained for longer. Protected backups and provider systems may roll off on their own controlled schedules, subject to lawful holds. We retain the minimum record needed to honor deletion and prevent reprocessing where appropriate.

5. Sharing and workspace access

We disclose information to authorized workspace members, invited executives for their focused sessions, service providers acting for the stated roles, and authorities when law requires it. Agency customers control client grants inside their workspace. Read-only MCP access requires a real signed-in user and current grants; the connection URL or an executive approval link alone grants no access.

6. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, portability, restriction, or information about disclosures. Use the authenticated export/deletion controls where available or email keith@narrativecouncil.com with the subject “Privacy request.” Include the account email and requested action, but never send a password, authentication code, or full card number. We may verify identity and authority. Appeals may be sent with the subject “Privacy appeal.”

7. Security, children, and changes

We use reasonable administrative, technical, and organizational safeguards, including scoped access, private object storage, versioned approvals, and audit records. No transmission or storage method is completely secure. Ownspoken is a business service for adults and is not directed to children. We will post material notice changes with a new effective date.