Privacy

Privacy Policy

How Streams AS collects and processes personal data about the users of StreamsCloud.

Welcome to StreamsCloud !

This data and privacy policy covers how Streams AS (“Streams”), John Strandruds vei 16, 1360 Fornebu, collects and treats information about its users. Streams AS is the data controller for the processing of personal data of its users.

1. Legal Basis For Streams Processing Of Personal Data

Streams only processes personal data necessary for the performance of Streams’s contractual obligations to the user according to the Terms of Service, or in order to take steps at the request of the user prior to entering into the Terms of Service.
Streams does not intend to process special categories of personal data, such as data on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a person, data concerning health or data concerning a person’s sex life or sexual orientation.
Streams will only process special categories of personal data as specified above at the request of the User (“Data Subject”), i.e. when the user submits such data to StreamsCloud at their own will. For example, users may choose to register a profile on StreamsCloud or to access special services or website information. Streams will only process such special categories of personal data following the informed, expressly and freely given consent of the Data Subject.
Streams may anonymize and aggregate data for the purpose of machine learning and statistics in order to improve the Service.

2. How Personal Data Is Collected Through Use Of StreamsCloud

Streams may collect information (including personal data) about Data Subjects:

(a) during the conclusion and modification of the agreements it concludes with Data Subjects (the information collected may include the data provided in such agreements, such as the Data Subject’s contact information, or for the purposes of negotiating, concluding or amending same);
(b) when a Data Subject fills in forms via the Service, opens a User Account, subscribes to, or unsubscribes from, a Service Plan, creates or modifies a user profile, or enters or modifies other information associated with their User Account (the information thus provided by the Data Subject);
(c) when a Data Subject downloads, installs, updates or uninstalls the Software, or accesses or uses the Service or any other service connected with StreamsCloud, manner, means and duration of such activity as well as other information the Data Subject may provide); and
(d) when otherwise knowingly made available to StreamsCloud (the information the Data Subject provides).

2.1 Collection of Behavioral Data

In addition to the personal data described above, StreamsCloud collects behavioral data during your use of the platform:

We collect information about how you interact with StreamsCloud, including viewed items, clicked items, time spent on specific content, navigation patterns, and other user interactions and behavioral data.
This behavioral data is collected to improve our services, personalize your experience, analyze service performance, and enhance functionality.
All behavioral data is collected using anonymous identifiers and does not contain personally identifiable information. We only associate behavioral data with user IDs, not with personal information such as names or email addresses.
This behavioral data may be shared with the organization that invited you to the platform, to help them understand engagement with their content.
We do not sell your behavioral data or any other personal data to third parties under any circumstances.
Data Retention: Raw behavioral data containing user identifiers is retained for 30 days, after which it is either deleted or aggregated into anonymous statistics. Aggregated behavioral data without individual user identifiers may be retained for up to 2 years to provide long-term analytics insights.
By accepting the Terms of Service and using StreamsCloud, you consent to the collection and processing of this behavioral data as described in this Privacy Policy.

2.2 Analytics Data Collection

Use of Firebase Analytics (Google Analytics)

StreamsCloud uses Firebase Analytics (Google Analytics) to collect usage data about how visitors and users interact with our platform. This helps us understand how our services are being used, improve user experience, and optimize our features.

What information is collected:

Usage data: We collect information about how you interact with our platform, including which features you use, how long you spend on different screens, and how you navigate through the application.
Device information: We collect technical information about the device and browser you use to access our service, including device type, operating system, browser type, screen resolution, and language settings.
Performance data: We collect information about how our application performs on your device, including loading times, crashes, and other technical issues.
In-app events: We track specific actions you take within the application, such as button clicks, page views, and feature usage.

How we use analytics data:

To analyze usage patterns and improve our platform’s functionality and user experience
To identify and fix technical issues and bugs
To measure the effectiveness of new features and updates
To understand which parts of our service are most valuable to users
To optimize performance across different devices and browsers

Important privacy information regarding Firebase Analytics:

Data processing by Google: The analytics data collected through Firebase Analytics is transmitted to and processed on Google’s servers. Google’s privacy practices are governed by their own privacy policy, which can be found at https://policies.google.com/privacy.
Data minimization: We have configured Firebase Analytics to use data minimization techniques where possible, including IP anonymization and disabling the collection of personally identifiable information.
No personal identification: The analytics data we collect does not personally identify you as an individual. Firebase Analytics assigns your device a random, anonymous identifier that is not linked to your personal information such as your name or email address.
Data retention: Firebase Analytics data is retained for 14 months, after which it is automatically deleted or aggregated into anonymous statistics.
Legal basis: We process this analytics data based on our legitimate interest in improving and optimizing our services and ensuring they function properly.

Your choices regarding analytics data:

Most mobile devices allow you to disable analytics collection through your device settings
You can disable analytics for web browsers by using appropriate browser extensions or privacy settings
You may contact us at support@streamscloud.com if you have questions or concerns about our analytics practices

This analytics data collection is separate from and in addition to the behavioral data described in Section 2.1. While both types of data help us improve our services, they are collected, processed, and stored through different mechanisms.

For users located in the European Economic Area (EEA), United Kingdom, and Switzerland, we comply with the General Data Protection Regulation (GDPR) and equivalent local laws regarding the collection and processing of analytics data.

Required Analytics for Service Functionality:

The analytics data collection described in Section 2.2 is necessary for the provision of our services and forms a core part of how we maintain, improve, and secure the StreamsCloud platform.
By using our services, you acknowledge and agree that the collection of analytics data as described is a necessary condition of service use.
We have configured our analytics implementation to collect only what is necessary for maintaining and improving our service, in line with the GDPR principle of data minimization.

Legal Basis under GDPR:

The legal basis for our analytics data processing is primarily contractual necessity (GDPR Article 6(1)(b)), as this data collection is required to provide, maintain, and improve the services you have contracted for.
For certain analytics functions, we also rely on legitimate interest as defined in GDPR Article 6(1)(f), specifically our interest in ensuring service security, analyzing usage patterns, and optimizing platform performance.
We have conducted and documented a balancing assessment confirming that these interests are not overridden by your interests or fundamental rights and freedoms.

International Data Transfers:

Analytics data may be transferred to and processed on servers located outside the EEA, including to Google’s servers in the United States and other countries.
We have verified that our analytics provider (Google) has implemented supplementary measures to protect data in transit and at rest.

Data Subject Rights for Analytics Data:

Right to Access: You can request information about what analytics data we have collected about your device.
Right to Rectification: You can request correction of inaccurate analytics data associated with your device.
Right to Erasure: You can request deletion of your account and associated analytics data, though this will terminate your access to our services.
Right to Restriction: You can request that we temporarily stop processing your analytics data while addressing your concerns.
Right to Object: You can object to processing of your analytics data that is based on legitimate interest, though this may affect your ability to use certain features.
Right to Data Portability: You can request your analytics data in a machine-readable format.
To exercise any of these rights regarding analytics data, please contact us at support@streamscloud.com.

Technical Measures for Data Protection:

We have implemented IP anonymization in our analytics configuration to enhance privacy protection.
We have disabled personalized advertising features in our analytics implementation.
We have limited the retention period of raw analytics data to 14 months.
We regularly review and update our analytics practices to ensure ongoing compliance with GDPR principles of data minimization and privacy by design.

This GDPR-specific information supplements the general description of our analytics practices in Section 2.2, and forms part of our overall commitment to transparent and lawful data processing.

What We Collect Through Widgets and Embedded Content:

When organizations embed StreamsCloud widgets or content on their websites, we collect analytics data to provide performance insights to the content owners. This includes:

Content interaction data: Views, clicks, scroll depth, and engagement time with embedded content
Performance metrics: Stream tile impressions, click-through rates, and content effectiveness
User journey data: Navigation patterns within embedded widgets and content consumption behavior
Technical data: Loading times, errors, and system performance metrics

User Identification for Analytics:

Logged-in users: We use your actual user ID to track your interactions across our platform and embedded content
Anonymous users: We assign temporary session-based identifiers to track behavior patterns during your visit to websites with embedded StreamsCloud content
Cross-session tracking: We can identify returning users to calculate unique vs. returning visitor metrics

Legal Basis:

We process this analytics data based on our legitimate interest in providing analytics services to our customers (the organizations who embed our content). This helps them understand how their content performs and engages their audience.

Data Sharing:

Analytics data collected from embedded widgets is shared with the organization that owns the content, in aggregated and anonymized form, to help them understand engagement with their content. We do not sell this data to third parties.

Data Retention for Analytics:

Raw analytics events: Stored for 30 days, then automatically deleted
Aggregated analytics data: Retained for up to 2 years in anonymous, aggregated form without individual user identifiers
Performance and security logs: Retained for 1 year for system maintenance and fraud prevention

Your Rights Regarding Analytics Data:

You have the right to:

Access what analytics data we have collected about your interactions
Object to the processing of your analytics data
Request deletion of your analytics data
Opt out of analytics collection on websites where technically feasible

To exercise these rights, contact us at support@streamscloud.com.

3. Purpose Of The Processing Of Personal Data

Supplier will process information as referenced in section 5 and 6 (collectively, “Data”) for the purposes of

(a) providing the Service,
(b) improving or otherwise modifying the Service and notifying Data Subjects thereof,
(c) customizing the content and/or layout of the Service for the particular Data Subject,
(d) performing Supplier’s obligations towards the Data Subject,
(e) exercising and enforcing Supplier’s rights according to the Terms of Service
(f) analyzing usage patterns and behavioral data to improve and optimize the user experience and service performance

4. Storage Period For Personal Data

Streams will keep personal data for as long as necessary to fulfil their contractual obligations towards the Data Subject, as specified in the Terms of Service. Personal data will be deleted or anonymized as soon as possible after the termination of the Data Subject’s account, unless it must be stored in order for Streams to fulfil obligations in statutory law.

For analytics and behavioral data specifically: Raw event data containing user identifiers (including anonymous session identifiers) is automatically deleted after 30 days. Aggregated and anonymized analytics data may be retained for up to 2 years for statistical and service improvement purposes.

5. Where Personal Data Is Processed

The data controller is Streams AS, a company based in Oslo, Norway. Streams AS may use sub-suppliers and transfer personal data to these sub-suppliers, including sub-suppliers in countries not considered to provide adequate protection for personal data. In such cases, Streams will only transfer personal data subject to appropriate safeguards provided by sub-suppliers., such as a legally binding and enforceable instrument between public authorities or bodies, or standard data protection clauses adopted by the EU Commission. A copy of such safeguards may be obtained by contacting Streams at service@StreamsCloud.com

6. Transfer Of Personal Data To Others

Streams will not transfer or provide access to Data Subject’s personal data to any third party except when, to the extent, and to persons i. With the Data Subject’s consent, ii. required by law, or iii. necessary in order to perform Streams’s obligations under the Agreement, or its statutory obligations, or to exercise its legal rights, or defend against claims or other process.
Behavioral data collected about your interactions with the platform may be shared with the organization that invited you to the platform, to help them understand engagement with their content. This data is anonymized and does not include personally identifiable information.
Streams does not sell your personal data or behavioral data to third parties under any circumstances.
Streams represents that it has implemented and will continue to employ appropriate measures to ensure that Customer Details are processed securely and in compliance with the applicable law.
Streams has no obligation to monitor or access its customers’ accounts, but may do so in cases where such action is reasonably justified (e.g., in order to prevent illegal or harmful activity, provide customer support, or perform its legal duties).
Analytics data from embedded widgets and content is shared with the organization that owns the embedded content, in aggregated and anonymized form, to provide them with performance insights about their content. This data sharing is limited to organizations that have a direct business relationship with us and have embedded our content on their websites.

6.1 Data Processing for Third-Party Websites

When you interact with StreamsCloud content embedded on third-party websites:

Dual Processing Relationship:

The website owner (where content is embedded) acts as a data controller for your visit to their website
StreamsCloud acts as a data processor to provide analytics services to that website owner
Both parties have responsibilities under applicable privacy laws

Website Owner Responsibilities:

The website owner must inform you about StreamsCloud’s analytics collection in their privacy policy
They must have a legal basis for sharing your interaction data with us
They are responsible for obtaining any required consent for data collection on their website

Your Rights:

You can exercise your data rights regarding analytics data collected from embedded content by contacting us directly
You may also contact the website owner where the embedded content appears
If you have concerns about data collection on a specific website, you should review that website’s privacy policy

Data Processing Agreement:

We maintain appropriate data processing agreements with organizations that embed our content, ensuring they understand their responsibilities as data controllers.

7. Data Subject’s Rights

Access of rights: Upon the Data Subject’s request, Streams will grant the Data Subject access to, all Personal Data that Streams maintains about the Data Subject, unless such information is otherwise available to the Data Subject or Supplier is legally prohibited from disclosing such records.
Right to rectification or erasure of personal data or restriction of processing. If any Personal Data prove to be incorrect or misleading, the Data Subject is entitled to have the data rectified. Registered Data Subject’s can access and correct certain of their own Personal Data through the Service by visiting their personal profile page and account setting page.
Rights in connection with Disclosure. In all cases where Streams is allowed to disclose Personal Data to third parties, it will ensure that the person to whom disclosure is made grants the respective Data Subject the same as those set forth herein with respect to the processing of such Customer Details (including the right to be informed about the data maintained on the Data Subject and the right to correct or have corrected incorrect or misleading information).
Right to data portability. The Data Subject has the right to receive the personal data concerning him or her, which he or she has provided to Streams, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from Streams.
Right to lodge a complaint with a supervisory authority. The Data Subject has the right to lodge a complaint with a supervisory authority if the Data Subject considers that the processing of personal data relating to him or her infringes his or her rights.

8. Notification

If a Data Subject participates in StreamsCloud’s mailing or similar program, Streams may use their personal data to send them information about products, services, promotions, and events that Streams believes may be of interest to them. Any subscription to any such program may be cancelled at will.
Streams may send registered Data Subjects certain important communications relating to the Service, such as (e.g.) service announcements and administrative messages, without offering Data Subjects the opportunity to opt out of receiving them.
Streams asks that all requests, enquiries, complaints, and other communications that Data Subject wishes to address to Streams with respect to this privacy policy or Data processing be submitted via support email listed at the StreamsCloud website.

9. Jurisdiction

Any dispute that may arise between the Data Subject and Streams, or between an Data Subject and Streams in connection with this Privacy Policy or Streams’s data processing activities, shall be subject to the jurisdiction specified in the respective Streams’s Terms of Service.

10. Change Of Policy

Streams may amend or repeal this privacy policy at any time by posting a revised Privacy Policy or a new policy document in its place. If such revised or new policy includes a significant change to the way that Personal Data may be treated, Streams will notify registered users of the fact that its privacy policy has changed by sending users an email to the address associated with their User Account, and by posting a prominent notice on the Service.