Privacy

Effective 11 November 2026.

This notice explains how Sanalive (sanalive.ai) handles personal data when an organization uses live interpretation and when a listener follows a session. Organization means the customer, for example a church, a higher-education institution, or another community. Session means a service, lecture, seminar, or other event the organization sends to the service. It sits alongside our terms of use. It does not replace the notice the organization gives its own participants, and it is not legal advice for a specific case.

Who is responsible

The organization is responsible for the content of a session. It decides when to go live, which microphone to use, and which speech reaches the service. The organization is the controller of the speech, the transcript, the translation, the glossary, session notes, and the language a listener chooses for that session.

Verso Consulting Oy is the processor of that content. We handle it on the organization’s instructions so we can provide live captions, translation, and optional voice, and so we can keep the transcript for the organization.

Verso Consulting Oy (business ID 3162168-6, Peltolankatu 21 D 28, 80220 Joensuu, Finland) provides the Sanalive service. The company is an independent controller for the organization account, billing, security logs, and the limited quality improvement described below. Contact: privacy@sanalive.ai.

What we process

On the organization account:

the signed-in user’s name, email, and password
the organization name, languages, logo, glossary, and session notes
team members and their access rights
for billing, the legal name, billing address, email, business ID, and VAT ID, plus payment status. We do not store full card numbers ourselves.
use, so the subscription matches actual use: live time, Flash use, the languages used for translation, and how many listeners joined

During a session:

audio that reaches the microphone, for long enough to produce a transcript and a translation. The audio is everything the microphone picks up. Depending on the mic, it may pick up not only the speaker’s voice but also other sounds in the room.
the transcript, translations, and, if the user chooses, a summary as well as AI-generated discussion questions and analysis. The user can read and copy the text from the session page.
a spoken translation so listeners can hear it during the session. The spoken translation is not stored as an audio file.
the speaker’s name and the session title, if an operator enters them

About a listener:

the language they chose, when they joined, and whether voice was on
optional feedback, if the listener wants to give it
technical connection data, such as IP address and browser, so we can deliver and protect the page

Joining does not ask the listener for a name and does not require an account. The chosen language, the time of joining, whether voice was on, and technical connection data are still personal data. The visit is not anonymous.

Website scan:

A user can ask Sanalive to scan the organization’s website and look for special terms the organization uses, such as names, places, and slogans. After the scan, the user decides which of those terms are saved to improve translation.
email addresses, phone numbers, and street addresses are removed before that picking. The page text is not stored.
the glossary keeps only the terms the operator selects. They belong to that organization. A person’s name is not used to improve another organization’s glossary.

Why, and on what basis, we process data

The account, live interpretation, and billing rest on the contract with the organization.

We process session content on the organization’s documented instructions so we can provide the service. The organization is responsible for its own lawful basis toward speakers, other participants, and listeners. Sanalive does not choose that basis.

The website scan and the glossary rest on the organization’s instruction. The organization is the controller of names taken from the site and of the glossary.

Security, abuse prevention, and keeping the service running rest on legitimate interests. We do not build profiles of listeners, and we do not make automated decisions that have legal effects on a person.

Sensitive content

A session can reveal information about religious belief, health, family life, political opinion, or another sensitive matter. The organization is responsible for having a lawful basis and for telling speakers and other participants that the speech is transcribed.

People other than the main speaker

In teaching, discussion, or another session, the microphone can pick up more than the main speaker’s speech, such as a question, a comment, or background speech. We process all audio the microphone picks up in the same way: it becomes text and, when translated voice is on, spoken audio for the duration of the session. No original recording and no translation audio file remain. The organization is the controller of this and assesses the lawful basis for its own situation.

In a session where people other than the main speaker may be heard, the organization:

tells participants before the session starts that real-time speech recognition, captions, and where used translation are on, that the original recording is not kept, and whether the transcript is kept after the session
decides what kind of microphone is used. Some microphones are designed to pick up only the speaker’s voice; others are designed to pick up sound from farther away. If the organization uses a microphone that picks up sound readily, participants are told that the microphone may pick up their speech, in which case it is transcribed. Participants are told how they can ask a question without being transcribed, for example by raising a hand in an agreed way so the speaker can pause transcription before the turn to speak
decides whether to keep the transcript for the organization’s own use or to delete the session when it ends. The text, translation, summary, and questions are removed when the organization deletes the session or asks us to delete them
shares the listen link only with the people the session is for. If the link or QR code appears on a public stream, a question that reached the microphone can be seen outside the room.

The text below is a model the organization can adapt for its own notice. It is not Sanalive’s notice to participants. Publishing it does not by itself meet the organization’s duty to inform.

This session uses Sanalive. Speech that reaches the microphone is turned in real time into text and, where used, a translation. The original recording is not kept. The transcript and the translation remain until [organization] deletes the session, or they are deleted as soon as the session ends. A listener does not need to create an account or give their name to follow the interpretation. Speech the microphone picks up, such as listeners’ questions, can appear as text on listeners’ screens. If you do not want the microphone to pick up your voice, questions and comments can also be asked [in writing or without a microphone]. The controller is [organization name]. More information: [the organization’s privacy notice].

Transcripts and quality

We use AI services for speech recognition, speech transcription, translation, and, where used, speaking the translation aloud. They may process content only to provide this service. We do not allow them to keep session content for their own purposes, or to use it to train AI.

We keep the transcript and the translation so the organization can read, copy, and reuse them in its own work, and so listeners can follow the session.

With the organization’s consent, after the session the transcript and the translation may be analysed with AI to check whether anything was interpreted incorrectly. This helps ensure that any misunderstandings for listeners can be corrected. Analysis also makes it possible to add hard-to-translate terms to the organization’s glossary, if the user so chooses. When this feature is used, the user decides which terms are added.

With the organization’s consent, hard-to-translate terms added to the glossary may also be offered for other organizations to use, to improve interpretation quality. An example is a biblical name or a field-specific term that should be translated differently from what the interpretation software suggests. For clarity, people’s names or other terms that count as personal data are not used.

When the organization deletes a session, we delete its transcript, translations, summary, and questions, and we do not keep a copy for later improvement. The organization can set in its settings that its session content is used only to deliver that organization’s service, and not to improve interpretation for other customers.

Where processing happens

Speech recognition, translation, cloud voice, the application, and the database run in the European Economic Area. We do not transfer session content outside the EEA in order to provide the service. Text read from a website is handled by the same in-EEA translation service, and it is not sent outside the EEA.

Who else handles data

We use hosting, a database, authentication, speech recognition, translation, voice synthesis, and payment processing to run the service. They handle data only on our instructions. We do not sell personal data, and we do not pass it on for marketing.

A current list of processors is available on request from privacy@sanalive.ai. An organization’s operators can see that organization’s sessions and the contact details of people on the same team.

How long we keep it

The account is kept while it is in use. After that, the data is deleted.

The transcript, translation, summary, and questions are kept until the organization deletes the session.

Invoices and accounting records are kept for as long as accounting and tax law require. Security logs are kept only as long as needed to deliver and protect the service.

The glossary is kept until the organization deletes the term or the account is deleted. Text from a scanned page is used only for the duration of the scan, and it is not kept as content.

Security

Traffic is encrypted. Session content is available to the organization’s signed-in operators. We see it only to provide the service, to give support, and for the quality review described above. Listeners do not sign in.

Cookies

We use only cookies and similar storage needed to sign you in, run the service, and remember interface choices such as language. We do not use advertising or analytics cookies.

Your rights

You may have the right to access your data, correct it, delete it, restrict processing, receive a copy, and object to processing based on legitimate interests. For the content of a session, start with the organization: it decided to go live, and it can delete the session. For a name taken from a website, or for a glossary term, write to the organization. We help the organization handle that request. For the account or billing, write to privacy@sanalive.ai. We reply within one month.

You can lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi). If you live elsewhere in the EEA, you can contact your local supervisory authority.

Changes

We update this notice when the service or the law changes. The new version and its effective date are posted on this page. When we can, we email the organization account about a material change.