Privacy Policy
Last updated 5 October 2026
BizLingual is an enterprise language training platform. Companies connect their own work materials, and we turn them into language practice for their employees. This policy explains what happens to the data involved.
Because we sell to organizations rather than to individuals, most of the data we handle belongs to a company that decides how it is used. Section 1 explains what that means for you.
BizLingual is in testing with a small number of organizations in Argentina, and this policy describes that stage. Companies taking part can ask us for anything here in more detail, in writing.
1. Our two roles
We handle personal data in two different capacities, and your rights differ depending on which one applies.
As a processor. Nearly everything on the platform — employee accounts, learning activity, and the work content used to build exercises — is handled on behalf of the organization that bought BizLingual. That organization decides what content reaches us, who may see it, and who has access to the platform. We act on its instructions. If you use BizLingual because your employer provides it, your employer's own privacy policy governs that data, and requests about it go to them.
As a controller. When you visit our public website, or contact us directly through the sales channel on it, we decide how that information is used, and this policy governs it. This is the only data we handle in our own right; it never mixes with what we hold for a customer organization.
2. What we process
Account data. When you sign in, we receive an identifier, and where your organization provides them, a username and email address, from your organization's identity provider. BizLingual does not offer self-service signup and does not create accounts on its own. We do not ask for or store your password — authentication happens at your organization's identity provider.
Organization membership. Your role, status, and the teams you belong to, mirrored from your organization's directory so the platform can apply the right permissions.
Learning activity. The exercises you attempt, whether answers were correct, time spent, units and paths completed, points earned, daily practice records, and badges. This activity is visible to the administrators and teachers your organization designates, and it feeds the team progress reporting your organization has enabled.
Voice. In pronunciation exercises you read a sentence aloud, and the recording is converted into text. We keep that text as your answer. Section 4 explains how.
Work content. The documents, messages, transcripts and similar material your organization connects or uploads. See section 3.
Enquiries. If you contact us through the sales channel, we receive whatever you choose to send, including your phone number or messaging handle.
Public website usage. How visitors reach and move through our marketing pages, collected through analytics. This is separate from the platform itself — see section 5.
Operational logs. Running the service produces technical logs that can include request identifiers, timestamps, and the identity of the signed-in user. They exist to keep the service working and secure, not to profile you.
3. Work content and the personal data inside it
Real work material often contains personal data about colleagues, customers and third parties. Before any content is used to generate exercises, it goes through an automated sanitisation step that detects personal and sensitive details — names, email addresses, phone numbers, postal addresses, identity and card numbers, IP addresses, credentials, API keys and file paths — and replaces them with realistic fictional substitutes. The exercises your team practises with are built from the sanitised version.
Two limits are worth stating plainly. First, this step is automated and no automated detection is perfect. Second, your organization's administrators can still access the content as originally submitted. Deciding what is appropriate to submit remains your organization's responsibility, and we recommend connecting only material your organization is entitled to use for this purpose.
Content your organization marks as private is not used to train models, and is not shared with other organizations on the platform.
4. AI model providers
Generating exercises and audio requires sending the relevant content to third-party model providers. Today those are OpenAI and Google. Text sent for exercise generation is the sanitised content described in section 3; text sent for audio synthesis is the exercise material itself.
Speech recognition. During pronunciation exercises, and only after you allow access to your microphone, your voice is sent to Google, or to a similar provider depending on your browser, to be converted into text. We receive only the text. We never receive or store the recording.
We use these providers through their business offerings and do not authorise them to use your organization's content to train their models. If we change providers in a way that affects how content is handled, we will update this page and tell the organizations taking part.
6. Service providers
We rely on the following recipients to operate the service. They process data on our instructions, for the purposes listed. The providers that handle your organization's content directly — the AI models — are named, because which model sees your material is something you should be able to check. Our infrastructure vendors are listed by category here; organizations taking part in the pilot can ask us for the named list and we will provide it in writing.
| Provider | Purpose |
|---|---|
| OpenAI | Generating exercises and synthesising audio |
| Generating exercises, and speech recognition for pronunciation practice in Chrome | |
| Google Analytics | Measuring visits to our public website |
| Cloud infrastructure provider | Hosting the application, the database and stored audio files |
| Log management provider | Operational logs used to run and troubleshoot the service |
We do not sell personal data, and we do not share it with advertisers. Beyond the providers above, we disclose data only where the law requires it.
7. Where data is processed
Although we operate from Argentina, our servers, database and audio storage are located in the United States, and AI processing, speech recognition and website analytics happen there too, with the recipients listed in section 6. This means data leaves the country. Argentine law regulates international transfers of personal data, and organizations taking part in the pilot should factor this in; we will put the specific vendors, their locations and the terms in writing on request.
8. How long we keep data
Your account, your learning records (including the text of spoken answers) and your organization's work content are kept for as long as your organization keeps its BizLingual account. When the organization leaves, we delete them within 90 days, unless our agreement with the organization sets a different period. We may keep learning activity in a form that can no longer identify you, such as answers with every link to you removed, to improve the exercises and the service.
Removing you from your organization's directory ends your access, but it does not delete your learning records. To have them deleted, follow section 10.
Operational logs are kept only as long as they are useful for running and securing the service. Enquiries sent to our sales channel are kept for as long as needed to answer them and to maintain the commercial relationship. Website analytics data is kept for the period configured in Google Analytics, after which Google deletes it.
9. Security
Access to the platform requires signing in through your organization's identity provider, and every request is checked against the permissions your organization has granted. Traffic is served over HTTPS. Content is scoped to the organization that owns it, so one customer's material is not reachable by another.
No system is perfectly secure. If a breach affecting personal data occurs, we will notify the affected organization without undue delay, as required by applicable law and by our agreement with them.
10. Your rights
Under Argentine Law 25.326 you have the right to access the personal data held about you, and to have it corrected, updated or deleted.
Because your employer controls the data described in section 1, requests about your learning account go to your organization's administrator. If you send such a request to us, we will pass it to them and support them in responding.
Deleting your learning data. Ask your organization's administrator. Once they confirm the request, they send it to us at [email protected]. We delete your account and learning records, or keep them only in a form that can no longer identify you (section 8), and confirm to them in writing within 30 days. We never receive recordings of your voice, so there are none for us to delete.
For data we hold as a controller — an enquiry you sent us, for instance — contact us using section 13 and we will handle it ourselves.
You also have the right to complain to your local data protection authority. In Argentina that is the Agencia de Acceso a la Información Pública.
11. Minors
BizLingual is a workplace tool, provided to employees through their employer. It is not directed at children and we do not knowingly collect data from them.
12. Changes to this policy
We update this page when the platform changes. The date at the top reflects the most recent revision. Where a change materially affects how we handle an organization's data, we notify that organization as our agreement with them requires.
13. Contact
BizLingual, Argentina.
Privacy questions and requests: [email protected]. For commercial enquiries you can also reach us on WhatsApp.