Personvern

1. Introduction

Welcome to Snakk, a product of Snakk Teknologi AS.

Snakk Teknologi AS ("Snakk," "we," "us," or "our") operates https://snakk.ai and related services (hereinafter referred to as "Service").

This Privacy Policy explains how we collect, process, store, and protect information resulting from your use of our Service. By using our Service, you agree to the practices described in this policy.

This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Norwegian Personal Data Act (Personopplysningsloven), and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Snakk Teknologi AS Email: rd@snakk.ai Website: https://snakk.ai

For questions regarding data protection, please contact us at rd@snakk.ai.

3. Definitions

SERVICE: The https://snakk.ai website, Platform, Dashboard, APIs, and all related services operated by Snakk Teknologi AS.

PLATFORM: Our cloud-based software-as-a-service for AI-powered voice agents.

PERSONAL DATA: Any information relating to an identified or identifiable natural person.

USAGE DATA: Data collected automatically through the Service.

COOKIES: Small files stored on your device.

DATA CONTROLLER: The natural or legal person who determines the purposes and means of processing personal data (Snakk Teknologi AS).

DATA PROCESSOR: Any entity processing data on behalf of the Data Controller.

DATA SUBJECT: Any living individual whose personal data is processed.

USER: Individuals or businesses using our Service.

CUSTOMER: Users who have created an account and deploy AI voice agents.

END USER: Individuals who interact with AI voice agents created by Customers.

4. Information We Collect

We collect information to provide and improve our Service.

4.1 Personal Data (Account Information)

When you create an account, we may collect:

Email address

Name and company/organization

Phone number

Billing address and VAT/organization number

Payment information (processed by secure third-party providers)

4.2 Usage Data

Automatically collected when accessing the Service:

IP address and device identifiers

Browser type and version

Pages visited and duration

Date, time, and location (approximate, via IP)

Click patterns and navigation behavior

4.3 Platform Data (Voice AI Service)

AI Agents

We process and store:

Agent configuration and settings

System prompts and knowledge content

Voice and language preferences

Tool and integration configurations

Call Data

To provide AI voice services, we process:

Call parties (phone numbers or identifiers)

Call metadata (start/end times, duration, status, direction)

Call recordings and transcriptions (if enabled by Customer)

Call logs and structured conversation data

Credentials and Integrations

To connect with third-party services:

API keys, access tokens, OAuth credentials (securely stored)

Webhook URLs and integration settings

4.4 Identity Verification

If identity verification is used (e.g., Vipps, BankID):

Verification status

Identity confirmation data provided by the third-party provider

Note: We do not store sensitive national ID numbers or documents. Verification is handled by trusted third-party providers.

5. Cookies and Tracking

We use cookies and similar technologies to improve Service functionality and analyze usage.

5.1 Types of Cookies

Strictly Necessary: Essential for Service operation

Functional: Enhance functionality and personalization

Analytics: Understand usage patterns

Marketing: Deliver relevant content (if applicable)

5.2 Third-Party Cookies

Our Service may use third-party providers for analytics, authentication, payments, and other functionality. These providers are contractually obligated to process data securely and only on our instructions.

Optional: Users may request a full list of third-party providers at any time.

6. Legal Basis for Processing (GDPR)

Contract Performance (Art. 6(1)(b)) – necessary to provide Service and manage accounts.

Legitimate Interests (Art. 6(1)(f)) – improve and secure Service, prevent fraud, analytics, marketing to existing customers.

Consent (Art. 6(1)(a)) – for non-essential processing such as marketing and non-essential cookies.

Legal Obligation (Art. 6(1)(c)) – tax, accounting, and regulatory compliance.

7. How We Use Your Data

Provide and maintain the Service

Process transactions and calls

Respond to inquiries and support requests

Improve features and functionality

Conduct research and analytics (anonymized/aggregated data)

Comply with legal obligations and enforce terms

8. Data Retention

We retain personal data only as long as necessary:

Account data: Active accounts retained while active; closed accounts deleted within 30 days

Call data: Retained according to Customer configuration (default 90 days)

Usage and analytics: Analytics 26 months, server logs 90 days

Billing and tax records: 5 years (Norwegian accounting law)

9. Data Sharing

9.1 Third-Party Providers

We may use trusted third-party providers to operate our Service. They are required to:

Process data only on our instructions

Protect data appropriately

Delete data upon our request

A full list of providers is available upon request, enabling us to expand functionality freely without updating the policy each time.

9.2 Legal Obligations

We may disclose data if required by law or to protect our rights and safety.

9.3 Business Transfers

In case of merger, acquisition, or sale, data may be transferred; notice will be provided.

9.4 Customer Data Processing

Customers are Data Controllers for End User data

Snakk acts as Data Processor

Customers are responsible for consents and privacy policies for End Users

10. International Data Transfers

Your data may be processed outside the EEA. We ensure adequate protection through:

Standard Contractual Clauses (SCCs)

Adequacy decisions

Data Processing Agreements with sub-processors

11. Data Security

We use appropriate technical and organizational measures:

Encryption in transit and at rest

Multi-factor authentication

Firewalls, intrusion detection, access controls

Employee training and confidentiality agreements

Regular audits and assessments

Note: Absolute security cannot be guaranteed.

12. Your Rights

Under GDPR, you have rights including:

Access, correction, erasure, restriction, data portability

Object to processing and withdraw consent

Lodge a complaint with authorities (Datatilsynet in Norway)

Contact: rd@snakk.ai

13. Children’s Privacy

Our Service is not intended for children under 16. We do not knowingly collect data from children.

14. Changes to This Privacy Policy

We may update this Privacy Policy. Material changes will be communicated by:

Updating the page and “Last Updated” date

Email notifications for significant changes

Dashboard notices

Continued use after changes constitutes acceptance.

15. Contact Us