Legal and Compliance

    Policies

    Privacy and terms for VALSEA, built for enterprise across Southeast Asia. Summarised below for quick reference.

    AES-256 at rest, TLS 1.2+ in transitVoice audio deleted within 24 hours
    Summarised for quick reference. Last updated: May 2026. Version 1.0. Governing law: Republic of Singapore.
    Effective April 2026

    Privacy Notice

    Singapore, Malaysia, Vietnam, Indonesia, Thailand, and the Philippines.

    01Who We Are

    VALSEA PTE. LTD. is a Singapore-incorporated company operating a voice API orchestration layer, converting voice audio into structured, actionable data for enterprise clients across Southeast Asia and globally.

    Our primary data processing hub is Jakarta, Indonesia (AWS ap-southeast-3). Vietnamese data subjects' audio is processed in-country only and never leaves Vietnam. All other markets route through Jakarta under appropriate legal safeguards.

    Data Protection Officer: dpo@valsea.app. All formal requests must be submitted in writing.
    02What Personal Data We Process
    CategoryDetails
    Voice audioRecordings of individuals using our clients' services. May include voice characteristics for speaker identification (sensitive personal data).
    TranscriptsText from voice audio. May include names, locations, account numbers, health info, or other personal details spoken in audio.
    Semantic outputsIntent classifications, sentiment scores, urgency flags, and compliance markers derived from transcripts.
    Usage and technicalAPI call logs, latency metrics, error rates. Used for service operation and billing. Does not include audio content.
    Account dataName, work email, company, and role of client administrators and authorised users.
    03How Long We Keep Your Data
    Voice audio24 hoursConfigurable: 0hr / 24hr / 72hr / 30 days
    Transcripts30 daysConfigurable per client agreement
    Semantic outputs30 daysConfigurable per client agreement
    Deletion audit logs3 yearsLegal obligation, not configurable
    API and usage logs90 daysNot configurable
    04International Data Transfers

    VALSEA processes data primarily in Jakarta, Indonesia (AWS ap-southeast-3), our primary regional hub.

    MarketHow data is handledBasis
    VietnamAudio processed in-country only. PII-stripped transcripts flow to Jakarta under CTIA filed with MPS.In-country
    IndonesiaAudio and transcripts processed in Jakarta. Data does not leave Indonesia.In-country
    SingaporeData flows to Jakarta under Standard Contractual Clauses per client DPA.SCCs
    MalaysiaData flows to Jakarta under Standard Contractual Clauses per client DPA.SCCs
    ThailandData flows to Jakarta under Standard Contractual Clauses per client DPA.SCCs
    PhilippinesData flows to Jakarta under NPC-compliant contractual protections per client DPA.Contractual
    05Your Rights
    Access
    Receive a copy of your personal data we hold
    Rectification
    Correct inaccurate or incomplete data
    Erasure
    Request deletion of your personal data
    Restriction
    Limit how we process your data
    Portability
    Receive your data in structured format
    Objection
    Object to legitimate interest processing

    Email dpo@valsea.app with your request type in the subject line. Response timelines:

    Singapore: 30 daysVietnam: 72 hours for urgent requestsIndonesia: 14 daysThailand: 30 daysPhilippines: 15 daysMalaysia: 30 days
    06Security and Data Sharing

    We protect your data using AES-256 encryption at rest and TLS 1.2+ in transit, role-based access controls, automated deletion jobs, and regular penetration testing aligned with ISO 27001 principles.

    Data is shared only as necessary: with sub-processors providing cloud infrastructure and ASR/LLM inference, with your enterprise client who receives outputs, and with regulators where required by law.

    We do not sell your data. We do not use your data for advertising. Your audio is never used to train our models without explicit written consent.
    07Regulatory Complaints

    If you believe we have mishandled your personal data, contact dpo@valsea.app first. You may also lodge a complaint with your local regulator:

    Singapore PDPC: pdpc.gov.sgMalaysia PDPC: pdp.gov.myVietnam MPS: A05Indonesia MoCIThailand PDPC: pdpc.or.thPhilippines NPC: privacy.gov.ph
    Last modified: 29 Apr 2026

    Terms and Conditions

    Governing law: Republic of Singapore. Disputes: SIAC.

    01The Service

    VALSEA is a voice API orchestration layer providing speech-to-text, text-to-speech, voice agent orchestration, and related language interactions. The Service is accessed via valsea.ai and official API endpoints.

    By accessing the Service, you confirm you have read, understood, and agree to these Terms. You must be at least 13 years old and have full civil capacity to enter this agreement.

    02Account and Security

    You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. Do not share credentials with any third party.

    If you suspect unauthorised access, change your password immediately and notify us at support@valsea.app. VALSEA is not liable for losses arising from your own disclosure of account credentials.

    03Intellectual Property

    VALSEA owns all technology, AI models, source code, designs, and trademarks. You receive only a limited, non-exclusive, non-transferable, revocable licence to use the Service.

    You own your Input Data and Output Data. You grant VALSEA a licence to use Input and Output Data for service provision and product improvement per our Privacy Notice.

    You are responsible for ensuring you have all necessary rights to Input Data you submit, including consent from any data subjects whose voice is recorded.

    04Prohibited Conduct

    The following uses of the VALSEA Service are strictly prohibited:

    Deepfakes or impersonating individuals without express written consent
    False, fraudulent, or opinion-manipulating content
    Terrorism, money laundering, or unlawful activities
    Violent, discriminatory, hateful, or sexually explicit content
    Using outputs to train competing AI models without written permission
    Reverse engineering or extracting source code
    Malware distribution or unauthorised system access
    Content violating privacy, dignity, or data protection laws

    Violations may result in immediate account suspension, termination, and claims for damages.

    05Payment and Refunds

    Upon confirming purchase and completing payment, VALSEA has no obligation to refund a paid Service package except as specifically provided in our Payment Policy.

    For billing errors or service issues, contact support@valsea.app for prompt resolution.

    06Disclaimer and Limitation of Liability

    The Service is provided on an "as-is" and "as-available" basis without warranty of absolute accuracy, continuous operation, or fitness for a particular purpose.

    You are solely responsible for evaluating, verifying, and acting on Output Data. Business, legal, medical, and financial decisions based on Output Data are made at your own risk.

    To the maximum extent permitted by law, VALSEA shall not be liable for any indirect, special, incidental, or consequential damages arising from use of the Service.

    07Governing Law and Disputes

    These Terms are governed by the laws of the Republic of Singapore. The parties shall first attempt to resolve disputes through negotiation and mediation.

    If no agreement is reached, disputes shall be referred to the Singapore International Arbitration Centre (SIAC) for final and binding resolution. Invalid provisions do not affect the remaining Terms.

    Data Protection Officer

    Questions about your data?

    Our DPO covers all ASEAN markets: Singapore, Malaysia, Vietnam, Indonesia, Thailand, and the Philippines. All requests are acknowledged within 2 working days.

    dpo@valsea.app
    Acknowledged within 2 working daysCovers SG, MY, VN, ID, TH, PHInclude your market and request type