Privacy Policy

1. Introduction

Welcome to Snakk, a product of Snakk Teknologi AS.

Snakk Teknologi AS ("Snakk," "we," "us," or "our") operates https://snakk.ai and related services (hereinafter referred to as "Service").

This Privacy Policy explains how we collect, process, store, and protect information resulting from your use of our Service. By using our Service, you agree to the practices described in this policy.

This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Norwegian Personal Data Act (Personopplysningsloven), and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Snakk Teknologi AS Email: rd@snakk.ai Website: https://snakk.ai

For questions regarding data protection, please contact us at rd@snakk.ai.

3. Definitions

SERVICE: The https://snakk.ai website, Platform, Dashboard, APIs, and all related services operated by Snakk Teknologi AS.
PLATFORM: Our cloud-based software-as-a-service for AI-powered voice agents.
PERSONAL DATA:Any information relating to an identified or identifiable natural person.
USAGE DATA:Data collected automatically through the Service.
COOKIES: Small files stored on your device.
DATA CONTROLLER:The natural or legal person who determines the purposes and means of processing personal data (Snakk Teknologi AS).
DATA PROCESSOR:Any entity processing data on behalf of the Data Controller.
DATA SUBJECT:Any living individual whose personal data is processed.
USER: Individuals or businesses using our Service.
CUSTOMER:Users who have created an account and deploy AI voice agents.
END USER:Individuals who interact with AI voice agents created by Customers.

4. Information We Collect

We collect information to provide and improve our Service.

4.1 Personal Data (Account Information)

When you create an account, we may collect:

Email address
Name and company/organization
Phone number
Billing address and VAT/company registration number
Payment information (processed by secure third-party providers)

4.2 Usage Data

Automatically collected when accessing the Service:

IP address and device identifiers
Browser type and version
Pages visited and duration
Date, time, and location (approximate, via IP)
Click patterns and navigation behaviour

4.3 Platform Data (Voice AI Service)

AI Agents

We process and store:

Agent configuration and settings
System prompts and knowledge content
Voice and language preferences
Tool and integration configurations

Call Data

To provide AI voice services, we process:

Call participants (telephone numbers or identifiers)
Call metadata (start/end times, duration, status, direction)
Call recordings and transcriptions (if enabled by Customer)
Call logs and structured conversation data

Credentials and Integrations

To connect with third-party services:

API keys, access tokens and OAuth credentials (stored securely)
Webhook URLs and integration settings

4.4 Identity Verification

If identity verification is used (e.g., Vipps, BankID):

Verification status
Identity confirmation data provided by the third-party provider

Note: We do not store sensitive national ID numbers or documents. Verification is handled by trusted third-party providers.

4.5 Google Calendar and Snakk Meetings

This section specifically governs Google user data and takes precedence over general statements about analytics, marketing and product improvement elsewhere in this policy.

Access and purposes

You connect Google Calendar by choosing this feature in Snakk and authorising access with Google. We use your email address and profile name to identify the connected account. The calendar list lets you choose a calendar. Event data may include titles, descriptions, start and end times, meeting links, organisers, and participants' names, email addresses and response status. Free/busy data is used to find available appointment times.

Snakk Meetings reads upcoming events to display meetings and find meeting links. The meeting assistant joins according to your settings and choices. The calendar connection also supports booking when you enable calendar tools for an agent: checking availability and creating, updating or cancelling appointments. We do not use the connection to change calendar sharing permissions or delete calendars themselves.

Processing and sharing

Connection details and relevant calendar and meeting data are processed in Snakk's server and database services. Necessary data is shared with processors providing hosting, meeting recording, transcription and AI processing for features the customer uses. The recording provider receives the meeting link and details needed to join. When the assistant records a meeting, audio, optional video, participant details and meeting chat are also processed to produce a transcript and summary.

Data and results are available according to permissions in the customer's workspace. Customers may share summaries, send them by email or connect their own systems through webhooks and integrations. An enabled booking agent may use relevant information to perform calendar tasks. Approved knowledge from meetings can be added to the customer's own agent; this is distinct from training a general-purpose AI model.

Limited Use of Google data

Snakk's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used for customer-selected features. It is not sold, used for advertising, retargeting or credit decisions, or used to train general-purpose AI or machine-learning models. Personnel may only read this data with the user's affirmative permission for specific content, where necessary for security or legal compliance, or as aggregated and anonymised information for permitted internal purposes.

Retention, disconnection and deletion

The connection stores authorisation tokens so features can work without repeated sign-in. You can remove the calendar connection in Snakk and revoke Snakk's access in your Google Account's third-party connections. Disconnecting removes connection details in Snakk but does not automatically delete existing summaries, tasks or appointments already created in Google Calendar. Also cancel any already scheduled meeting recordings in Snakk if you do not want them to take place.

Recordings have a retention period selected in meeting settings, from 1 to 365 days. This setting does not mean all derived text and tasks are deleted at the same time. Customers can delete individual meetings in Snakk. Contact rd@snakk.ai to request access to or deletion of other stored Google and meeting data, identifying the relevant account or workspace. Data sent to your own systems or recipients must also be managed there.

Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy. Manage Google connections: https://myaccount.google.com/connections. This section was updated on 22 September 2026.

5. Cookies and Tracking

We use cookies and similar technologies to improve Service functionality and analyze usage.

5.1 Types of Cookies

Strictly Necessary: Essential for Service operation
Functional:Enhance functionality and personalization
Analytics: Understand usage patterns
Marketing: Deliver relevant content (if applicable)

5.2 Third-Party Cookies

Our Service may use third-party providers for analytics, authentication, payments, and other functionality. These providers are contractually obligated to process data securely and only on our instructions.

Optional: Users may request a full list of third-party providers at any time.

6. Legal Basis for Processing (GDPR)

Contract Performance (Art. 6(1)(b)) – necessary to provide the Service and manage accounts.
Legitimate Interests (Art. 6(1)(f)) – improve and secure Service, prevent fraud, analytics, marketing to existing customers.
Consent (Art. 6(1)(a)) – for non-essential processing such as marketing and non-essential cookies.
Legal Obligation (Art. 6(1)(c)) – tax, accounting, and regulatory compliance.

7. How We Use Your Data

Provide and maintain the Service
Process transactions and calls
Respond to inquiries and support requests
Improve features and functionality
Conduct research and analytics (anonymized/aggregated data)
Comply with legal obligations and enforce terms

8. Data Retention

We retain personal data only as long as necessary:

Account data:Active accounts are retained for as long as they remain active; closed accounts are deleted within 30 days
Call data:Retained according to Customer configuration (default 90 days)
Usage and analytics:Analytics 26 months, server logs 90 days
Billing and tax records:5 years (Norwegian accounting law)

9. Data Sharing

9.1 Third-Party Providers

We may use trusted third-party providers to operate our Service. They are required to:

Process data only on our instructions
Protect data appropriately
Delete data at our request

A full list of providers is available upon request, enabling us to expand functionality freely without updating the policy each time.

9.2 Legal Obligations

We may disclose data if required by law or to protect our rights and safety.

9.3 Business Transfers

In case of merger, acquisition, or sale, data may be transferred; notice will be provided.

9.4 Customer Data Processing

Customers are Data Controllers for End User data
Snakk acts as Data Processor
Customers are responsible for consents and privacy policies for End Users

10. International Data Transfers

Your data may be processed outside the EEA. We ensure adequate protection through:

Standard Contractual Clauses (SCCs)
Adequacy decisions
Data Processing Agreements with sub-processors

11. Data Security

We use appropriate technical and organizational measures:

Encryption in transit and at rest
Multi-factor authentication
Firewalls, intrusion detection and access controls
Employee training and confidentiality agreements
Regular audits and assessments

Note: Absolute security cannot be guaranteed.

12. Your Rights

Under GDPR, you have rights including:

Access, correction, erasure, restriction, data portability
Object to processing and withdraw consent
Lodge a complaint with the authorities (Datatilsynet in Norway)

Contact: rd@snakk.ai

13. Children’s Privacy

Our Service is not intended for children under 16. We do not knowingly collect data from children.

14. Changes to This Privacy Policy

We may update this Privacy Policy. Material changes will be communicated by:

Updating the page and “Last Updated” date
Email notifications for significant changes
Dashboard notices

Continued use after changes constitutes acceptance.

15. Contact Us