Privacy Policy

1. Introduction

Gobi Technologies AS is a company that delivers tools for production and distribution of short-form vertical videos (“Story” or “Stories”). The production tools, including our iOS and android app in addition to our web platform (“Tools” or “Gobi Production Tools”), allow: 

  • organisations with an written agreement (“Customer”) and 
  • individuals that have accepted our terms of use for our Tools (“End users”)  

to create Stories (“Story Owner”) and invite members (“Members”) to its Story group. Once a Customer or End User has created a Story, you can share videos and images containing text, stickers, image thumbnails, and similar (“Content” or “User Generated Content”) and let Members post Content to your Story. Implementing our Story tools for distribution enables the Customers and End users to distribute the Story to other websites and applications.

The Gobi Production Tools is owned by Gobi Technologies AS (“Gobi”, “Gobi Technologies”, “we”, “us”), a Norwegian company located in Oslo, Norway, with organization number 915 752 381. You can contact Gobi Technologies AS by sending an e-mail to contact@gobistories.co.

This privacy policy describes how Gobi Technologies collect your information whenever you use our Services, what information we collect, how it is used and with whom the information is shared. “Services” includes all the ways you may interact with us; through our mobile applications, websites, or any other interaction that includes use of our Tools and products. Gobi Technologies is responsible for all the processing and handling of personal data collected through your use of our Services or through your contact with us. This means that we are responsible for complying with the Personal Data Act in the current jurisdiction, The General Data Protection Regulation (GDPR) and other applicable privacy regulations.The information that Gobi Technologies collects, uses and shares includes, among others, your registration information, metadata, location data, and data about your device. 

Your information is stored and processed in accordance with the requirements set out in The General Data Protection Regulation (GDPR), as further explained below. We will only keep your information as long as this is necessary in accordance with the purposes described in this policy. Our users and other third parties do not have access to personal information that can be used to contact or identify a data subject without the data subject’s prior explicit consent/approval, or otherwise without a legal basis for each applicable processing activity. This Privacy Policy sets out the terms and conditions for processing and use of the personal information provided by you (or collected from you) to Gobi Technologies when you use our services. By downloading or using our Services, you are accepting the terms and practices described in this Privacy Policy.

This policy applies to any Users of our Services anywhere in the world, including any Users of our apps, websites, features or other services.

2. Collection and Use of Your Information and Data

When you use our Services, there will be certain information and data (collectively called “Data”) that you will send to us, or that we will collect from you. In the following sections below, we will set out important details regarding the collection and use of your Data.

3. Data that we collect and why

Data we collect when you register a user account – During registration of a user account on the app or the web platform, we collect your preferred and selected username, your email address and password.

In order to create an account and to give our users access to sign into the app and the web platform, you need to create a username and register your email address and password. 

Once you have registered an account in our app or the web platform, the username or mail you enter during registration will serve as your username across several of our Services. Your username may be displayed in any of our Services to other users or Story Owners in the Stories you take part of. Your username may be displayed in conjunction with your Content. Your email can be used to reset  a forgotten password, and as a method for Gobi Technologies to contact you. See the clause on “Communications between you and Gobi Technologies” for more information.

This collection is based on a consent from you as a user in accordance with GDPR article 6 no 1) letter a). 

Data we collect from your interaction and use of our services – We collect and aggregate identifying information regarding your use of our Service, including, session times, your behavior in and interaction with our Services, and data sent and received such as story names. In addition, we may also collect information about the device on which you are using these Services, including the type of device, the operating system you are running, certain settings on your device such as browser, language and time zone, unique device identifiers, and Gobi App crash data. We collect this information in order to provide the best possible user experience, and improve the Gobi App and our Services.

The basis for this processing is a legitimate interest for us to improve our services based on activities in the Service. The legal ground is GDPR article 6 no. 1 letter f).

Metadata – We collect timestamps for when certain events occur, including, but not limited to, when a Story is created, when Content (as defined below) is posted, and when an account is created. To avoid unnecessary tracking of individuals, we will when possible relate these timestamps to stories, teams or similar instead of connecting such timestamps to specific users (data subjects). This information is collected for analytical purposes to measure how our Service can be improved.

The basis for this processing is a legitimate interest for us to improve our services based on activities in the Service. The legal ground is GDPR article 6 no. 1 letter f).

Images and videos and similar – We collect the videos, drawings, interactive stickers, text, images or similar content (“User Generated Content” or “Content”) that you send and share through the Gobi App, or any other Service we provide. This is in order to make our Services fully functional, and this data is only kept for as long as required. For further information, please see the clause on “Data Deletion” below.

This data is processed on the basis of your consent in accordance with GDPR article 6 no 1 letter a). 

Third party collection – In order to make our Services work for the purposes intended, it is often necessary to share some of your data with our third party providers. We may share your data with Gobi’s affiliates or affiliated entities that provide Services or perform data processing on our behalf or for data centralization and / or logistics; with suppliers, consultants, and other service providers who need access to such information to perform work on our behalf and/or to enable them to provide the Services you requested; and with third parties you allow us to share information with, for example, other apps or sites that integrate with our API or our Services, or those with an API or service that we integrate with. We may also allow other entities and third party’s to use cookies and similar tracking services on the Gobi App or our Services.

We may share the information we collect about you with third parties as described below or as described at the time of collection or sharing, including as follows: 

We use Google Analytics Demographics and Interest Reporting. It shares information to some extent together with other information collected by Google about our users with Gobi Technologies, including gender and age of our users and interests they express through their online travel activities and interactions, in an aggregated, non-personally identifiable way. This is collected so that we can know our audience and users better. This information may be shared with external parties for the same purpose. Google Analytics is owned and operated by Google Inc. To read Google’s privacy policy, click this link: https://policies.google.com/privacy

We use Cloudinary. Videos and images you upload to us may be processed and stored by Cloudinary. This to let you quickly edit the videos you upload, and for the video stream to work well on all networks and browsers. Cloudinary might collect your IP address when uploading video and images in our production platform or when viewing video in some of our Services. To read Cloudinary’s privacy policy, click this link: https://cloudinary.com/privacy

We use Firebase Analytics in our iOS and Android app. It may collect data about you, including by use of identifiers for mobile devices (including Android Advertising ID and Advertising Identifier for iOS), cookies and similar technologies. Firebase Analytics is owned and operated by Google Inc. Firebase uses subprocessors as set out in this link for analyzing this data: https://firebase.google.com/terms/subprocessors. For more information on how Google generally uses your data, read “How Google uses data when you use our partners’ sites or apps” at www.google.com/policies/privacy/partners/

We use Firebase Crashlytics in our iOS and android app. It may automatically collect certain information that does not personally identify users who access or use the App. This information includes, but is not limited to, device state information, unique device identifiers, device hardware and OS information, information relating to how an application functions, and the physical location of a device at the time of a crash. Crashlytics is owned and operated by Google Inc. The information may be shared with third party service providers, including, but not limited to, Crashlytics. Crashlytics may use aggregate and anonymous information to: improve Crashlytics, create analysis of trends or behaviors, and other similar uses. To read Crashlytics’ privacy policy, click this link: https://firebase.google.com/support/privacy

We use Copper.com as CRM to keep track of our dialog with you. Company information and Information you share in emails, calls or meetings might be stored and processed by Copper. For more information: https://www.copper.com/privacy

We use G-suite by Google to communicate with our customers. Information you share in emails will be processed by g-suite. For more information about their privacy policy:  https://policies.google.com/privacy

We use Tripletex AS for invoicing. Information about your company, subscription and contact information might be processed by Tripletex AS. For more information about their privacy policy: https://www.tripletex.no/personvernerklaering/

We use Google Cloud Platform and Amazon web services. The Services run through servers and different operating systems, and cloud storage is provided by Amazon Web Services Inc and Google Cloud Platform. The cloud storage is proved and information is stored within AWS data center in Germany and Google Clouds data center in Germany by our instructions.

4. General information regarding your Data

Data – Your data is not publicly available, unless you upload it to one of the Stories you participate in or share a key that provides access to view your story (“View Key”).  Once you upload it to one of the Stories, all the members of the Story will be able to see whatever data you upload. By sharing Content, you accept that this Content may be exploited by the Story Owner, subject to  their sole direction and responsibility. Such exploitation may include: to license, use, copy, modify, create derivative works of, distribute, publicly display, publicly perform, and otherwise exploit in any manner such User Generated Content in all formats and distribution channels now known or hereafter devised. 

In addition, you grant Gobi Technologies and our affiliates a worldwide, royalty-free, sublicensable, and transferable license to host, store, use, display, reproduce, modify, adapt, edit, publish, and distribute user generated content. This license is for the limited purpose of operating, developing, providing, promoting, and improving the Services and researching and developing new features.

We reserve the right to immediately remove, with no prior warning, any data or user generated content that violates our Terms of Use. Data or user generated content may also be removed without prior warning where the content is of bad quality or we, in our reasonable discretion, consider it to be spam.

Compliance –  We can share your data In response to an information request from a competent authority if we believe disclosure is required by applicable law, regulation or legal process; With police officers, government agencies or other third parties if we believe your actions are not in accordance with our license agreement with any applicable Customer, Terms of Use, Privacy Policy, code of conduct or to protect the rights, property, or security of Gobi or others

6. How we process your data

Data processor and data controller

We have strict data processing agreements with all our providers/data processors with regard to all Processing of Personal Data on behalf of Gobi Technologies in order to ensure that all Processing of Personal Data is conducted in compliance with applicable data protection legislation.

With regards to your Data, Gobi Technologies is the Data Controller. The Processors we engage shall only Process Personal Data on the instructions from us and strictly in accordance with such instructions. Gobi Technologies may at any time have agreements with data processors in other parts of the world, including in America, Asia or Europe, who will process your data on our behalf and in accordance with the applicable data privacy law. We will only transfer data out of the EU in accordance with the Decision 2010/87/EU, binding corporate rules, to companies certified by the EU privacy shield or any replacement or alternative clauses approved by the European Commission.

By downloading and using the Gobi App or registering a user on our Web platform you acknowledge that your data may be transferred, stored, processed and used in the EU, and other countries where any third party service providers are operating on our behalf. You also confirm that you are aware that the privacy and data protection laws in some of these countries may vary from the laws in the country where you live. Where this is the case, we will take appropriate precautions to protect your personal information pursuant to this Policy, e.g by  using data encryption for password protection.

Storage and use of your Data

Gobi Technologies may not use your Data for any purposes other than those stated in this Privacy Policy. We will only store your Data for as long as necessary in order to fulfill the specific purpose for the processing.

Securing your Data

A description of the information security measures implemented for the protection of your personal data follows below: 

Personnel and access control

  • Only authorized staff with signed confidential agreements can grant, modify or revoke access to an information system that uses or houses Personal Information. Authorized personnel will only have access to data needed to provide and improve our service.

 Contractual Control:

  • We enter into data processing agreements with third parties that are processing data on our behalf.
  • We ensure that Personal Information is Processed solely in accordance with the Customer’s instructions (control of instructions);

Logical access Control

  • Your data is logically separated from other data. 
  • Our database is protected from unauthorized access using passwords and IP-address whitelisting.
  • Images, videos and related data is stored without encryption.

Business Continuity

  • Ensure that Personal Information is protected against accidental destruction or loss (availability control); by performing backups either ourselves or through some of our sub-processors like Google Cloud and AWS.

7. Communications between you and Gobitech

Email – We may send you emails regarding your account, Service updates, surveys regarding our Tools, Web Platform and Service, and changes to the Terms of Use and Privacy Policy.

8. Data Deletion

Images and videos will be removed from our servers once deleted from a story, but they could remain in cache or backups for up to 30 days after deletion. We do not control what users do with the data received, and you confirm that you are aware it is possible to take screenshots or use other image-capturing technologies to reproduce and store content externally, and without consent. The use is at your own risk as mentioned in the Terms of Use. Gobi Technologies therefore advise that you do not share Content that you do not want someone to store. We are not responsible for the User Generated Content uploaded to our Services or the actions of our users. 

If you, however, see Content that violates any of our terms, you can contact us at contact@gobistories.co, and we will use reasonable efforts to remove that information from our records. 

If you want to delete your account created in our Android and iOS you can use our GDPR tool to delete your account at https://gobistories.co/gdpr/. When you use our GDPR tool to delete your account we will automatically delete your account data, including, username, email, password, Facebook data, device notification tokens, device information. Images and videos you have posted will become unavailable for viewing in the groups they were posted. Stories you have created may not be deleted, and ownership of your stories may be transferred to another user, or the stories may have no owner.

If you want to delete your account created on our web platform, please contact us at contact@gobistories.co.

Note that your account data may still be present in database backups for up to 30 days, until those backups are deleted.

With regards to analytical data, such as crash reporting, we will only retain these on our third party servers for as long as they are required to fulfill the purposes set out above.

9. Correcting and Receiving information about your Data

If you discover that any information about you in the App is incorrect or missing, please use the applicable functions in the App itself to change this information, if this is not possible, or you are unable to do so, please contact us at contact@gobistories.co.

Subject to any laws requiring confidentiality, you have a right to receive general information about how Gobi Technologies uses your personal data. If you wish to receive such information, please contact us at contact@gobistories.co. To exert your “right to erasure” (EU GDPR, Article 17) or “right to data portability” (EU GDPR, Article 20), you can use our Service at https://gobistories.co/gdpr.

10. Children

We do not knowingly collect or store personally identifiable information from anyone under the age of 13 years. Anyone that provides personally identifiable information through the Website or Gobi App affirms that they are over 13 years of age. If you become aware of users under the age of 13 we advise that you contact us, and we will use reasonable efforts to remove that information from our records.

11. Notices and Updates

Gobi reserves the right to change or modify the Privacy Policy and Terms of Use at any time without prior notice. Your continued use of the App will constitute your acceptance of any revised agreements. If we make significant changes to this Privacy Policy we will notify you. We recommend that you periodically check these agreements for changes. If you choose to use our services, then any dispute regarding privacy matters will be subject to this Privacy Policy and our Terms of Use. Unless stated otherwise, our current Privacy Policy applies to all information that we collect about you and your account, including other data and information that we collect when you interact with our Services. 

If you have any concerns about privacy at Gobi Technologies, please contact us at contact@gobistories.co, and we will try to resolve it.

12. Choice of Law and Jurisdiction

The laws of Norway shall govern the Terms of Use and this Privacy Policy. Should you have a dispute with Gobi Technologies AS, you will first contact us by sending an email to contact@gobistories.co. Any disputes arising under the Terms of Use and this Privacy Policy shall be sought settled amicably. Unless an amicable solution can be obtained, the dispute shall be subject to ordinary court proceedings. The legal venue for disputes shall be Oslo District Court.

Last updated: 03.07.2020