EU and Malta data protection
Hearken is operated from Malta and handles personal data under the GDPR and Malta's Data Protection Act, Cap. 586, where they apply.
Privacy, trust, and security
Trust for honest feedback.
Hearken is built for invited, meeting-free Conversations. This page explains the customer-facing privacy, data protection, AI, cookie, and security basics before people share replies.
Clear roles
The organisation running a Conversation is normally the controller for its invited people. Hearken handles Conversation data for that organisation and is controller for its own account, billing, support, and service operations.
Only what the Conversation needs
Hearken uses the data needed to create a Conversation, invite people, collect replies, ask useful follow-up questions, prepare individual reply summaries and Conversation reports, operate the service, and provide support.
AI-assisted, not automatic decisions
Hearken uses AI to help ask follow-up questions, prepare individual reply summaries, and generate Conversation reports. People should review reports before using them for decisions that affect others.
Data protection
Clear expectations before people reply.
Under the GDPR, people should receive clear information when personal data is collected. In Hearken, that means explaining the Conversation purpose, who invited them, AI-assisted processing, recipients, retention, rights, and privacy contact routes.
Notice
People should be told what the Conversation is about, who invited them, what data is collected, how it is used, and how to ask privacy questions.
Rights
EU data subjects may have rights to access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority.
Cookies
Strictly necessary cookies keep Hearken working. Product-improvement cookies are optional and only used after a choice is made.
Transfers and providers
Where personal data is handled by service providers or transferred internationally, Hearken uses appropriate safeguards and keeps privacy questions routed to privacy@hearken.my.
Conversation data
What Hearken uses to run a Conversation.
Hearken keeps the external explanation focused on what customers and invited people need to know.
Invite links
Scoped to a Conversation and intended only for the people the creator wants to hear from.
Replies
Used to ask adaptive follow-up questions, prepare individual reply summaries, and generate Conversation reports with themes, examples, and suggested next steps.
Voice
Optional and record-then-send. Text remains available when recording is not supported or not preferred.
Retention
Conversation data is kept for the service purpose, customer instructions, legal obligations, or legitimate operational needs, then deleted or anonymised where appropriate.
Malta supervisory authority
Data protection questions belong in the open.
Malta's Information and Data Protection Commissioner is the national supervisory authority for GDPR and Malta data-protection matters. You can contact Hearken at privacy@hearken.my for privacy questions or rights requests.
Questions go to Hearken.
Use privacy@hearken.my for privacy and data-protection questions. Use security@hearken.my for suspected vulnerabilities, account security concerns, or suspicious emails using the Hearken name.