Privacy Policy
1. Introduction
Gobi Stories AS (“Gobi Stories”, “Gobi”, “we”, “us”) delivers Services to create and distribute video in the story format.
- Production Tool - lets you and your organization create, edit and manage Stories.
- Distribution Tool - lets you share these stories on your web page, platform, in emails or through our Distribution partners.
This privacy policy describes how Gobi collects your information whenever you use our Services, what information we collect, how it is used and with whom the information is shared. Services include all the ways you may interact with us; through our Distribution tool, Production tool, mobile applications, websites, or any other interaction that includes use of our Services and products. Gobi is responsible for all the processing and handling of personal data collected through use of our Services or through contact with us. This means that we are responsible for complying with the Personal Data Act in the applicable jurisdiction, The General Data Protection Regulation (GDPR) and other applicable privacy regulations.The information that Gobi collects, uses and shares includes, among others, your registration information, metadata, location data, and data about your device.
Your information is stored and processed in accordance with the requirements set out in The General Data Protection Regulation (GDPR), as further explained below. We will only keep your information as long as this is necessary in accordance with the purposes described in this policy. Our users and other third parties do not have access to personal information that can be used to contact or identify a data subject without the data subject’s prior explicit consent/approval, or otherwise without a legal basis for each applicable processing activity. This Privacy Policy sets out the terms and conditions for processing and use of the personal information provided by you (or collected from you) to Gobi when you use our Services. By using our Services, you are accepting our Terms of Service and the terms and practices described in this Privacy Policy.
This policy applies to any users of our Services anywhere in the world, including any users of our apps, websites, features or other Services.
2. Collection and Use of Your Information and Data
When you use our Services, there will be certain information and data (collectively called "Data") that you will send to us, or we will collect from you. In the following sections below, we will set out important details regarding the collection and use of your Data.
3. Data that we collect and why
3.1 Data we collect when you watch Stories in our Distribution tool
When watching stories in our Distribution tool we will collect your Internet Protocol (IP) address used to connect your access device to the Internet and connection information such as browser type, version, preferred languages and time zone setting.
We will also collect non personal identifiable data about your view time and interactions with the tool. We do this to let the creators of the story get feedback about the number of views and engagement of the story.
3.2 Data we collect when you sign up
During registration of a user account in our Production tools, we collect your email address and password. This is used to allow you to get a unique user ID and to let you access your account with your registered account details. Your email can also be used to reset a forgotten password, and as a method for Gobi to contact you. See the clause on “Communications between you and Gobi Stories AS” for more information.
This data is processed on the basis of your consent in accordance with GDPR article 6 no 1 letter a).
3.3 Data we collect when you upload content, interact and use our Production tool
We receive and store all data you upload to our tools such as videos, drawings, interactive stickers, text, images, story names, company information, emails for members you invite and billing details or similar. This to make sure our Services are fully functional and provide the Services you request. This data is only kept for as long as required. For further information, please see chapter "Data Deletion".
This data is processed on the basis of your consent in accordance with GDPR article 6 no 1 letter a).
We collect information regarding use of our Service, including session times, your behavior in and interaction with our Services. We collect timestamps for when certain events occur, including, but not limited to, when a Story is created, when content is posted, and when an account is created. In addition, we may also collect information about the device on which you are using these Services, including the type of device, the operating system you are running, certain settings on your device such as browser, language and time zone, unique device identifiers, and crash data. We collect this information in order to provide the best possible user experience, and to improve our Production tools and Services.
The basis for this processing is a legitimate interest for us to improve our Services based on activities in the Service. The legal ground is GDPR article 6 no. 1 letter f).
3.4 Data we collect when you browse some of our web pages
When browsing our web pages we will collect your Internet Protocol (IP) address used to connect your access device to the Internet and connection information such as browser type, version, preferred languages and time zone settings.
To know our audience better we use systems that collect and provide us data about our visitors in an aggregated, non-personally identifiable way. That includes data about demography, location, interaction, and behavior.
We receive and process all data you upload to our web pages, such as the information you enter into forms and chats.
The basis for this processing is a legitimate interest for us to improve our Services based on activities in the Service. The legal ground is GDPR article 6 no. 1 letter f).
Based on your consent we collect information through cookies, pixel tags and other tracking technologies to be able to reach you with relevant ads and other marketing messages, and to help us understand effectiveness on our web page.
3.5 Cookie Policy
We use cookies to better understand those who visit our web pages, use our Production and Distribution tools and Services and/or have a Gobi account so we may offer them a more tailored service with Gobi. We also use cookies to interact and enrich your user experience.
Cookies are small files saved to your computer’s hard drive that track information about how you use and interact with a website. Some cookies are “session” cookies, which delete automatically when you leave Gobi’s tools or webpage. Others are “persistent” cookies which do not delete themselves and track your use of our tools over time. The legal basis for this processing is your consent, cf. GDPR art. 6 no 1 letter a). We also use third party Service providers who set cookies. See “third collection” for an overview of cookies set by Gobi. Most cookies can be disabled in your browser settings.
3.6 Third party collection
In order to make our Services work for the purposes intended, it can be necessary to share some of your data with our third party providers. We may share your data with Gobi’s affiliates or affiliated entities that provide Services or perform data processing on our behalf or for data centralization and / or logistics; with suppliers, consultants, and other service providers who need access to such information to perform work on our behalf and/or to enable them to provide the Services you requested; and with third parties you allow us to share information with, for example, other apps or sites that integrate with our API or our Services, or those with an API or Service that we integrate with. We may also allow other entities and third party’s to use cookies and similar tracking Services on our video Production and Distribution tool or other Services.
We may share the information we collect about you with third parties as described in our sub-processors page or as described at the time of collection or sharing. You find our sub-processors here: https://www.gobistories.com/legal/sub-processors
4. General information regarding your Data
Data – Data uploaded to our Production tool, will be available to all the members of the related Organization with the right permissions. They will be able to see, edit or share whatever data you upload. Your data is not publicly available to other users and people outside of your organization, unless you or anyone in your Organization shares a key that provides access to view a story. By sharing data with other members and users, you acknowledge that it is possible for other members and users that have access to your stories to take screenshots or use other image-capturing technologies to reproduce and store content externally, and without your consent. In such a case, you are aware that your data may be exploited by the members and users that have access to your stories, subject to their sole direction and responsibility. Such exploitation may include: to copy, modify, create derivative works of, distribute, publicly display, publicly perform, and otherwise exploit in any manner such data in all formats and Distribution channels now known or hereafter devised.
We reserve the right to immediately remove, with no prior warning, any data or user generated content that violates our Terms of Service.
Compliance – We can share your data in response to an information request from a competent authority if we believe disclosure is required by applicable law, regulation or legal process; With police officers, government agencies or other third parties if we believe your actions are not in accordance with our license agreement with any applicable Customer, Terms of Service, Privacy Policy, code of conduct or to protect the rights, property, or security of Gobi or others. We will notify the users of any such disclosure as mentioned herein, if such notice (to the best of our knowledge) is not prohibited by law.
5. How we process your data
5.1 Data processor and data controller
We have strict data processing agreements with all our providers/data processors with regard to all Processing of Personal Data on behalf of Gobi in order to ensure that all Processing of Personal Data is conducted in compliance with applicable data protection legislation.
With regards to your Data, Gobi is the Data Controller. The Processors we engage shall only Process Personal Data on the instructions from us and strictly in accordance with such instructions. Gobi may at any time have agreements with data processors in other parts of the world, including in America, Asia or Europe, who will process your data on our behalf and in accordance with the applicable data privacy law. We will only transfer data out of the EU in accordance with the Decision C-311/18 (Schrems II), or any replacement or alternative clauses approved by the European Commission.
By registering a user to our video Production tools or by using any of our Services you acknowledge that your data may be transferred, stored, processed and used in the EU, and other countries where any third party service providers are operating on our behalf. You also confirm that you are aware that the privacy and data protection laws in some of these countries may vary from the laws in the country where you live. Where this is the case, we will take appropriate precautions to protect your personal information pursuant to this Policy.
5.2 Purpose for processing your Data
Gobi may not use your Data for any purposes other than those stated in this Privacy Policy. We will only store your Data for as long as necessary in order to fulfill the specific purpose for the processing.
5.3 Securing your Data
A description of the information security measures implemented for the protection of your personal data follows below:
Personnel and access control
- Only authorized staff with signed confidential agreements can grant, modify or revoke access to an information system that uses or houses Personal Information about our customers and users. Authorized
personnel will only have access to data needed to provide and improve our Service.
Data protection:
- We always consider suitable security measures to keep your data protected. Like hashing of passwords and encryption of data during transit and rest.
Contractual Control:
- We enter into data processing agreements with third parties that are processing data on our behalf.
- We ensure that Personal Information is Processed solely in accordance with the Customer's instructions (control of instructions);
Logical access Control
- Your data is logically separated from other data.
- Our database is protected from unauthorized access using passwords and IP-address whitelisting.
Business Continuity
- We ensure that Personal Information is protected against accidental destruction or loss (availability control); by performing backups either ourselves or through some of our sub-processors.
6. Communications between you and Gobi Stories AS
Email – We may send you emails regarding your account, Service/tool update, Web Platform and Services, or changes to the Terms of Services and Privacy Policy.
6.1 Marketing, market research and surveys
We will send you relevant offers and surveys about our products and services in a number of ways including email, but only if you have given consent to receive these marketing communications. When you register with us we will ask if you would like to receive marketing communications, and you can change your marketing choices at any time online, by clicking the unsubscribe link in the footer of any marketing email or by contacting us.
7. Data Deletion
Images and videos will be removed from our servers once deleted from our tools, but they could remain in cache or backups for up to 30 days after deletion. We do not control what users do with the data received, and you confirm that you are aware it is possible to take screenshots or use other image-capturing technologies to reproduce and store content externally, and without consent. The use is at your own risk as mentioned in the Terms of Use. Gobi recommends not to share Content that you do not want someone to store. We are not responsible for the Content uploaded to our Services or the actions of our users.
If you, however, see Content that violates any of our terms, you can contact us at contact@gobistories.com, and we will use reasonable efforts to remove that information from our records.
If you want to delete your account created in our Production tool, please contact us at contact@gobistories.com.
Note that your account data may still be present in database backups for up to 30 days, until those backups are deleted. With regards to analytical data, such as crash reporting, we will only retain these on our third party servers for as long as they are required to fulfill the purposes set out above.
8. Correcting and Receiving information about your Data
If you discover that any information about you in the Production and Distribution tools and Services is incorrect or missing, please use the applicable functions in the Production and Distributions tools and Services itself to change this information, if this is not possible, or you are unable to do so, please contact us at contact@gobistories.com.
Subject to any laws requiring confidentiality, you have a right to receive general information about how Gobi uses your personal data. If you wish to receive such information, please contact us at contact@gobistories.com. To exert your "right to erasure" (EU GDPR, Article 17) or "right to data portability" (EU GDPR, Article 20), you can use our Service at https://gobistories.com/dpa.
9. Children
We do not knowingly collect or store personally identifiable information from anyone under the age of 16 years. Anyone that provides personally identifiable information through the website or our Production and Distribution tools and Services affirms that they are over 16 years of age. If you become aware of users under the age of 16 we advise that you contact us, and we will use reasonable efforts to remove that information from our records.
10. Notices and Updates
Gobi reserves the right to change or modify the Privacy Policy and Terms of Use at any time without prior notice. Your continued use of our video Production and Distribution tools and services will constitute your acceptance of any revised agreements. If we make significant changes to this Privacy Policy we will notify you. We recommend that you periodically check these agreements for changes. If you choose to use our Services, then any dispute regarding privacy matters will be subject to this Privacy Policy and our Terms of Use. Unless stated otherwise, our current Privacy Policy applies to all information that we collect about you and your account, including other data and information that we collect when you interact with our Services.
If you have any concerns about privacy at Gobi, please contact us.
11. Choice of Law and Jurisdiction
The laws of Norway shall govern the Terms of Use and this Privacy Policy. Should you have a dispute with Gobi with organization number 915 752 381, you will first contact us by sending an email to contact@gobistories.com. Any disputes arising under the Terms of Service and this Privacy Policy shall be sought settled amicably. Unless an amicable solution can be obtained, the dispute shall be subject to ordinary court proceedings. The legal venue for disputes shall be Oslo District Court.
12. Contact us
If you have any questions or concerns regarding Gobi’s Services or Agreements, don’t hesitate to contact us by email (contact@gobistories.com), through our webpage or visit us. You can find more information on our website under “Contact us”.
Thanks for reading our Privacy Policy. We hope you enjoy Gobi Stories!
Last update: 05.01.2024