Privacy Policy

1. Introduction

Gobi Technologies AS delivers tools to create and distribute video in the story format. Our Production tools lets you and your organization create, edit and manage Stories. Our distribution tools lets you easily share these stories on your web page or platform, in emails or through some of our distribution partners.

This privacy policy describes how Gobi Technologies collect your information whenever you use our services, what information we collect, how it is used and with whom the information is shared. Services include all the ways you may interact with us; through our Story video player, Production tool, mobile applications, websites, or any other interaction that includes use of our tools and products. Gobi Technologies is responsible for all the processing and handling of personal data collected through your use of our Services or through your contact with us. This means that we are responsible for complying with the Personal Data Act in the applicable jurisdiction, The General Data Protection Regulation (GDPR) and other applicable privacy regulations. The information that Gobi Technologies collects, uses and shares includes, among others, your registration information, metadata, location data, and data about your device.

Your information is stored and processed in accordance with the requirements set out in The General Data Protection Regulation (GDPR), as further explained below. We will only keep your information as long as this is necessary in accordance with the purposes described in this policy. Our users and other third parties do not have access to personal information that can be used to contact or identify a data subject without the data subject’s prior explicit consent/approval, or otherwise without a legal basis for each applicable processing activity. This Privacy Policy sets out the terms and conditions for processing and use of the personal information provided by you (or collected from you) to Gobi Technologies when you use our services. By using our Services, you are accepting our Terms of Service and the terms and practices described in this Privacy Policy.

This policy applies to any users of our Services anywhere in the world, including any users of our apps, websites, features or other services.

2. Collection and Use of Your Information and Data

When you use our Services, there will be certain information and data (collectively called “Data”) that you will send to us, or that we will collect from you. In the following sections below, we will set out important details regarding the collection and use of your Data.

3. Data that we collect and why

Data we collect when you watch Stories in our video player

When watching stories in our web player we will collect your Internet Protocol (IP) address used to connect your access device to the Internet and connection information such as browser type, version, preferred languages and time zone setting.

We will also collect non personal identifiable data about your view time and interaction with the player. We do this to let the creators of the story get feedback about the number of views and engagement of the story.

Data we collect when you sign up

During registration of a user account on our web platform, we collect your email address and password. This is used to allow you to get a unique user ID and to let you access your account with your registered account details. Your email can also be used to reset a forgotten password, and as a method for Gobi Technologies to contact you. See the clause on “Communications between you and Gobi Technologies” for more information.

This data is processed on the basis of your consent in accordance with GDPR article 6 no 1 letter a).

Data we collect when you upload content, interact and use our production platform

We receive and store all data you upload to our platforms such as videos, drawings, interactive stickers, text, images, story names, company information, emails for members you invite and billing details or similar. We do this to make our Services fully functional and to provide the Services you request, and this data is only kept for as long as required. For further information, please see the clause on “Data Deletion” below.

This data is processed on the basis of your consent in accordance with GDPR article 6 no 1 letter a).

We collect and aggregate identifying information regarding your use of our Service, including, session times, your behavior in and interaction with our Services. We collect timestamps for when certain events occur, including, but not limited to, when a Story is created, when content is posted, and when an account is created. In addition, we may also collect information about the device on which you are using these Services, including the type of device, the operating system you are running, certain settings on your device such as browser, language and time zone, unique device identifiers, and crash data. We collect this information in order to provide the best possible user experience, and to improve our production tools and services.

The basis for this processing is a legitimate interest for us to improve our services based on activities in the Service. The legal ground is GDPR article 6 no. 1 letter f).

Additional data that we collect from android and iOS app users

We automatically collect certain information that does not personally identify you, including device state information, unique device identifiers (including Android Advertising ID and Advertising Identifier for iOS), device hardware and OS information, information relating to how an application functions, and the physical location of a device at the time of a crash. This also includes the gender and age of our users and interests they express through their online travel activities and interactions, in an aggregated, non-personally identifiable way. This is collected so that we can improve our apps and to know our audience and users better.

The basis for this processing is a legitimate interest for us to improve our services based on activities in the Service. The legal ground is GDPR article 6 no. 1 letter f).

Data we collect when you browse some of our web pages

When browsing any of our webpages we will collect your Internet Protocol (IP) address used to connect your access device to the Internet and connection information such as browser type, version, preferred languages and time zone settings.

To know our audience better we also use Google Analytics Demographics and Interest Reporting. It collects and provides us data about our visitors in an aggregated, non-personally identifiable way.

We receive and store all data you upload to our webpages, such as the information you enter into forms.

The basis for this processing is a legitimate interest for us to improve our services based on activities in the Service. The legal ground is GDPR article 6 no. 1 letter f).

Cookie Policy

We use cookies to better understand those who visit our website, use our video production and distribution tools and services and/or have a Gobi account so we may offer them a more tailored service. Cookies do things like prefill form fields and let you remain logged in.

Cookies are small files saved to your computer’s hard drive that track information about how you use and interact with a website. Some cookies are “session” cookies, which delete automatically when you leave Gobi. Others are “persistent” cookies which do not delete themselves and track your use of Gobi over time.

The legal basis for this processing is your consent, cf. GDPR art. 6 no 1 letter a).

We also use third party service providers who set cookies. See “third collection” for an overview of cookies set by Gobi. Most cookies can be disabled in your browser settings.

Third party collection

In order to make our Services work for the purposes intended, it is often necessary to share some of your data with our third party providers. We may share your data with Gobi’s affiliates or affiliated entities that provide Services or perform data processing on our behalf or for data centralization and / or logistics; with suppliers, consultants, and other service providers who need access to such information to perform work on our behalf and/or to enable them to provide the Services you requested; and with third parties you allow us to share information with, for example, other apps or sites that integrate with our API or our Services, or those with an API or service that we integrate with. We may also allow other entities and third party’s to use cookies and similar tracking services on our video production and distribution tool or other Services.

We may share the information we collect about you with third parties as described below or as described at the time of collection or sharing, including as follows:

Third party service providers Information and data
that are being processed
Why we use it (Purpose) Where data is stored
Tripletex AS Contact information, Place of work, Organization number or Tax ID Technical solution for invoicing EU + USA
Amazon Web Services Information you upload such as images, videos, user information, company information, story information, information about general use Cloud provider for storage and processing of data EU (Frankfurt)
Google Cloud Information you upload such as images, videos, user information, company information, story information, information about general use Cloud provider for storage and processing of data EU
Cloudinary Video and images, Connection information Video processing and distribution EU + US
Google Analytics Cookies

Data about you (gender, age of users and interests) and your use of Gobi all in a non-identifiable way
User and behaviour analytics In Google’s data centers globally
Sentry.io Errors and crash logs Crash and error reporting US
Webflow Connection information Website hosting US
Firebase Error and Crashlogs, Cookies, Data about you in an non-identifiable way Crash reporting and analytics for our iOS app and Android app  In Google’s data centers globally

4. General information regarding your Data

Data

Data uploaded to our Production tool, will be available to all the members of the related Organization with the right permissions. They will be able to see, edit or share whatever data you upload. Your data is not publicly available to other users and people outside of your organization, unless you or anyone in your Organization share a key that provides access to view a story. By sharing data with other members and users, you acknowledge that it is possible for other members and users that have access to your stories to take screenshots or use other image-capturing technologies to reproduce and store content externally, and without your consent. In such case, you are aware that your data may be exploited by the members and users that have access to your stories, subject to their sole direction and responsibility. Such exploitation may include: to copy, modify, create derivative works of, distribute, publicly display, publicly perform, and otherwise exploit in any manner such data in all formats and distribution channels now known or hereafter devised.

We reserve the right to immediately remove, with no prior warning, any data or user generated content that violates our Terms of Service.

Compliance

We can share your data in response to an information request from a competent authority if we believe disclosure is required by applicable law, regulation or legal process; With police officers, government agencies or other third parties if we believe your actions are not in accordance with our license agreement with any applicable Customer, Terms of Service, Privacy Policy, code of conduct or to protect the rights, property, or security of Gobi or others. We will notify the users of any such disclosure as mentioned herein, if such notice (to the best of our knowledge) is not prohibited by law.

6. How we process your data

Data processor and data controller

We have strict data processing agreements with all our providers/data processors with regard to all Processing of Personal Data on behalf of Gobi Technologies in order to ensure that all Processing of Personal Data is conducted in compliance with applicable data protection legislation.

With regards to your Data, Gobi Technologies is the Data Controller. The Processors we engage shall only Process Personal Data on the instructions from us and strictly in accordance with such instructions. Gobi Technologies may at any time have agreements with data processors in other parts of the world, including in America, Asia or Europe, who will process your data on our behalf and in accordance with the applicable data privacy law. We will only transfer data out of the EU in accordance with the Decision C-311/18 (Schrems II), or any replacement or alternative clauses approved by the European Commission.

By registering a user to our video production tools or by using any of our Services you acknowledge that your data may be transferred, stored, processed and used in the EU, and other countries where any third party service providers are operating on our behalf. You also confirm that you are aware that the privacy and data protection laws in some of these countries may vary from the laws in the country where you live. Where this is the case, we will take appropriate precautions to protect your personal information pursuant to this Policy.

Purpose for processing your Data

Gobi Technologies may not use your Data for any purposes other than those stated in this Privacy Policy. We will only store your Data for as long as necessary in order to fulfill the specific purpose for the processing.

Securing your Data

A description of the information security measures implemented for the protection of your personal data follows below:

Personnel and access control

  • Only authorized staff with signed confidential agreements can grant, modify or revoke access to an information system that uses or houses Personal Information about our customers and users. Authorized personnel will only have access to data needed to provide and improve our service.

Data protection:

  • We always consider suitable security measures to keep your data protected. Like hashing of passwords and encryption of data during transit and rest.

Contractual Control:

  • We enter into data processing agreements with third parties that are processing data on our behalf.
  • We ensure that Personal Information is Processed solely in accordance with the Customer’s instructions (control of instructions);

Logical access Control

  • Your data is logically separated from other data.
  • Our database is protected from unauthorized access using passwords and IP-address whitelisting.

Business Continuity

  • We ensure that Personal Information is protected against accidental destruction or loss (availability control); by performing backups either ourselves or through some of our sub-processors like Google Cloud and AWS.

7. Communications between you and Gobitech

Email

We may send you emails regarding your account, Service updates, surveys regarding our Tools, Web Platform and Service, and changes to the Terms of Use and Privacy Policy.

8. Data Deletion

Images and videos will be removed from our servers once deleted from a story, but they could remain in cache or backups for up to 30 days after deletion. We do not control what users do with the data received, and you confirm that you are aware it is possible to take screenshots or use other image-capturing technologies to reproduce and store content externally, and without consent. The use is at your own risk as mentioned in the Terms of Use. Gobi Technologies therefore advise that you do not share Content that you do not want someone to store. We are not responsible for the Content uploaded to our Services or the actions of our users.

If you, however, see Content that violates any of our terms, you can contact us at contact@gobistories.com, and we will use reasonable efforts to remove that information from our records.

If you want to delete your account created on our web platform, please contact us at contact@gobistories.com.

Note that your account data may still be present in database backups for up to 30 days, until those backups are deleted.

With regards to analytical data, such as crash reporting, we will only retain these on our third party servers for as long as they are required to fulfill the purposes set out above.

9. Correcting and Receiving information about your Data

If you discover that any information about you in the video production and distribution tools and services is incorrect or missing, please use the applicable functions in the video production and distributions tools and services itself to change this information, if this is not possible, or you are unable to do so, please contact us at contact@gobistories.com.

Subject to any laws requiring confidentiality, you have a right to receive general information about how Gobi Technologies uses your personal data. If you wish to receive such information, please contact us at contact@gobistories.com. To exert your “right to erasure” (EU GDPR, Article 17) or “right to data portability” (EU GDPR, Article 20), you can use our Service at https://gobistories.co/gdpr.

10. Children

We do not knowingly collect or store personally identifiable information from anyone under the age of 16 years. Anyone that provides personally identifiable information through the Website or our video production and distribution tools and services affirms that they are over 16 years of age. If you become aware of users under the age of 16 we advise that you contact us, and we will use reasonable efforts to remove that information from our records.

11. Notices and Updates

Gobi reserves the right to change or modify the Privacy Policy and Terms of Use at any time without prior notice. Your continued use of our video production and distribution tools and services will constitute your acceptance of any revised agreements. If we make significant changes to this Privacy Policy we will notify you. We recommend that you periodically check these agreements for changes. If you choose to use our services, then any dispute regarding privacy matters will be subject to this Privacy Policy and our Terms of Use. Unless stated otherwise, our current Privacy Policy applies to all information that we collect about you and your account, including other data and information that we collect when you interact with our Services.

If you have any concerns about privacy at Gobi Technologies, please contact us at contact@gobistories.com, and we will try to resolve it.

12. Choice of Law and Jurisdiction

The laws of Norway shall govern the Terms of Use and this Privacy Policy. Should you have a dispute with Gobi Technologies AS with organization number 915 752 381, you will first contact us by sending an email to contact@gobistories.com. Any disputes arising under the Terms of Use and this Privacy Policy shall be sought settled amicably. Unless an amicable solution can be obtained, the dispute shall be subject to ordinary court proceedings. The legal venue for disputes shall be Oslo District Court.

Last updated: 05.03.2021