Privacy Policy
We prioritize protecting your personal data. This privacy statement outlines the personal data that Zentrigo Consulting AB, based in Stockholm, Sweden (hereinafter referred to as "Zentrigo", "we", or "Nora"), processes from you. "Personal data" refers to any information related to an identified or identifiable individual. In this document, you will learn about the personal data we collect from you when you visit our website or app, which allows conversations in foreign languages, how we process it, and your rights and obligations regarding your data.
I. Responsible Entity
The entity responsible for the data processing described in this privacy policy is:
Zentrigo Consulting AB
LÖVÄNGSGATAN 12 LGH 1001,
115 44 Stockholm, Sweden
Org.no: 559390-1183
E-mail: [email protected]
For any concerns or questions about data protection or this privacy policy, please contact us at any time.
II. Collection, Processing, and Use of Personal Data
1. Affected Persons
Nora collects and processes personal data from visitors to the website https://hellonora.ai, users of the app, other Nora channels, and newsletter subscribers. Personal data is typically collected directly from the data subjects, such as during a conversation using our app or when creating a user account ("Nora account") or subscribing to our newsletter.
Each time the app or our website https://hellonora.ai is accessed, our system automatically collects information transmitted by your device's internet browser. This includes:
- Date and time of access
- Browser type/version
- Operating system
- URL of the previously visited website
- Domain accessed
- Search terms used
- IP address
This data is collected for technical reasons and stored in server log files for a short period until automated deletion. This ensures a functional, stable, and secure website or app and the services provided. We use this data for error analysis, security, logging access, and improving our offerings, which aligns with our legitimate interest.
2. Data Collected and Purposes of Data Processing
2.1 Conversation Service
Regardless of whether you use our paid or free service, data is collected during and in connection with our conversation service as described below.
When using our conversation service, you decide which content to record. The words you speak are recorded and transcribed. Once you send a reply, the transcript is transferred to our servers and stored to facilitate a conversation and provide our contractual services. No audio files are created or stored.
We retain the transcribed words and conversations conducted via our app for as long as you maintain an account with us, to continually improve our conversation service, which is our legitimate interest. After your account is closed, this data is automatically deleted.
Additionally, the following data is stored for each conversation:
- Conversation length
- Selected conversation language
- Selected conversation topic
- Voluntary user feedback on the conversation
This data is processed to improve our products' functionality and ensure relevant responses. It is also retained for as long as you have an account with us, and then automatically deleted upon account closure. Users of our Conversation Service are assigned a randomly generated user ID to recognize you in future visits. This data helps us improve our conversation service and prevent fraud. For data stored in connection with our paid service and a Nora account, see section II.2.2.
2.2 Creating a Nora Account
You can create a free Nora account at any time. Registration for a Nora account is required to conclude a membership and use the conversation service under Nora's applicable GTC (see section II.2.1).
You can create a Nora account by providing a username, email address, and password (email login) or by using an existing Google account (single sign-on). With single sign-on, a separate registration with Nora is unnecessary as this data is directly transmitted from Google to us. Regardless of the registration method, we process your data for account creation, administration, membership management, and access control (including fraud prevention). Additional details and information (such as language preference) are requested to provide our conversation service.
We also process additional (usage) data relevant for the provision and billing of our conversation service, such as membership number, membership start time, successful payment processing, and number of conversations conducted. This data processing and storage are necessary for contract fulfillment.
We store this data for the duration of the contract period (membership) and any legally required retention periods. Your account will remain active after membership cancellation unless you request deletion. If you have created a Nora account but do not subscribe to a membership, your account will remain until you delete it via the app.
III. Data Disclosure and Transfer Abroad
Personal data collected from users of our conversation service is transferred to processors, particularly in IT services, that support our service provision. Depending on the location of Nora's service providers, your data may be transferred to countries within and outside the EU/EEA, including the USA. If data is transferred to a service provider in a country without adequate data protection, Nora ensures protection through contractual guarantees, such as EU standard contractual clauses, or relies on consent or contract processing exceptions.
For payment processing, we pass necessary payment data to Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland. Stripe may also transfer data to Stripe, Inc. in the USA. More information on Stripe's data protection can be found here.
IV. Cookies and Web Storage Objects
Nora uses cookies and web storage objects to provide various functionalities and improve user experience. Cookies and web storage objects are small text files stored on your device through your browser. You can change your browser settings if you do not want us to use cookies or web storage objects. However, disabling them may affect the functionality and scope of our website and app, as they are essential for operation.
V. Use of Analytics Tools
We use Google Analytics for data analysis and visualization regarding our communication service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies, which are stored on your computer and allow an analysis of your use of our website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
Google will use this information to evaluate your use of the website, compile reports on website activity for website operators, and provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or if such third parties process the information on Google's behalf. Under no circumstances will Google associate your IP address with any other data held by Google.
You can prevent the installation of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of our website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. For more information on Google's data protection and how to opt-out from Google Analytics, please visit: Google Privacy Policy.
We also use PostHog (22261 Market Street #4008, San Francisco, CA 94114) to monitor our services. PostHog may collect anonymous data about user interactions, including visited pages, IP addresses, and device information. More details can be found in PostHog's Privacy Policy at PostHog Privacy. Users can disable PostHog's service by deleting their account. After account deletion, we continue to store anonymized data to further enhance service security and performance. This anonymized data cannot be traced back to any individual. Data storage and processing by Mixpanel occur in the EU. This data processing is based on our legitimate interest in evaluating and developing our Conversation Service and preventing fraud and abuse.
VI. Nora Newsletter and Customer Satisfaction Surveys
If you sign up for our newsletter, you will receive occasional emails about our company, products, services, special offers, and news. This processing is based on your consent, which you can revoke at any time by emailing [email protected] or using the unsubscribe link in our emails.
We may also invite you to participate in customer satisfaction surveys via email. Participation is voluntary, and responses can be anonymous. Providing your name and/or email address is optional and allows us to contact you for further feedback. You can revoke this consent at any time. Sending and evaluating the survey corresponds to our legitimate interest in improving our products based on customer feedback.
VII. Company Profiles on Social Media
We create and manage company profiles on social media channels like Facebook, LinkedIn, X, Discord, Reddit, Line, YouTube, etc., to present Nora's offerings and communicate with interested parties. If you contact us through these channels and are a member of the respective social network, we may receive data that identifies you. We use personal data disclosed during communication solely for processing contact and communication.
As profile page operators, we may access anonymous statistics on visitor interactions (insights function) through cookies and similar technologies. More detailed information on data processing by these services can be found in the respective social network's privacy policy. The use of company profiles and insights functions is based on our legitimate interest in providing information about our company and improving our presence. If users have consented to data processing on social platforms, processing is based on this consent.
Note that we share responsibility with the social network operators for data processing triggered when visiting our profile pages. However, social networks may also process your data for their purposes, which are not covered in this privacy policy. Data collected about you may be transferred to third countries, particularly the USA. We have no control over these data processing procedures and refer you to the respective service or channel operator's privacy policy.
VIII. Data Security
We implement appropriate administrative and technical safeguards to protect the confidentiality, integrity, and availability of your personal information. Collected data is stored on secure servers and transmitted in encrypted form (SSL transmission).
IX. Your Rights
You can delete your Nora account at any time by following the app's instructions. As a Nora user or website visitor, you have specific data subject rights, including the right to information, data correction, deletion, data processing restriction, and objection to data processing. You can revoke your consent to specific data processing at any time with future effect.
In the EU or EEA, data subjects have the right to receive data generated by online services in a structured, commonly used, and machine-readable format for further use and transmission.
You can contact us at any time with a request to this effect at [email protected]. Please note that some of your rights are not absolute and we reserve the right to limit the rights of data subjects under applicable law and, for example, not to provide certain information under given circumstances.
X. Changes to the Privacy Policy
Since we would like to adapt this privacy policy from time to time, we reserve the right to change the privacy policy. The current version of the Privacy Policy is available on our website at all times and we encourage you to consult our Privacy Policy regularly.
To the extent that the Privacy Policy is part of an agreement with users of Nora or any other data subject, we will notify them of the change by email or other appropriate means in the event of an update. If no objection is received within 30 days, the new privacy policy will be deemed agreed. If an objection is made, we may terminate the agreement extraordinarily and without notice, in whole or in part, or limit or adjust our services to the data subject to reasonably reflect the refusal to consent.