Privacy Policy

Medal Social AS is a content management system designed for social media, helping you distribute ideas across channels, save time, and simplify content creation.
We take your privacy seriously and are committed to protecting your personal data. This Privacy Notice outlines how we collect, use, and safeguard your information and explains your privacy rights. As privacy is an ongoing responsibility, this Notice will be updated periodically to reflect changes in our practices or policies.

Medal Social is headquartered in Oslo, in Norway. Medal Social has appointed an internal data protection officer for you to contact if you have any questions or concerns about medal social’s personal data policies or practices. If you would like to exercise your privacy rights, please direct your query to medal social’s data protection officer. Medal Social’s data protection officer’s name and contact information are as follows:

Ada Aligiai

Medal Social AS

Vallastølsvegen 7, 5227 Nesttun, Norway

privacy@medalsocial.com

Medal Social collects personal information about its website visitors and customers. With a few exceptions, this information is generally limited to:

• name
• email
• phone number
• address

We use this information to provide prospects and customers with services.

We do not sell personal information to anyone and only share it with third parties who are facilitating the delivery of our services.

From time to time, Medal Social receives personal information about individuals from third parties. Typically, information collected from third parties will include further details on your employer or industry. We may also collect your personal data from a third party website (e.g. LinkedIn)

As is true of most other websites, Medal Social’s website collects certain information automatically and stores it in log files. The information may include internet protocol (IP) addresses, the region or general location where your computer or device is accessing the internet, browser type, operating system and other usage information about the use of Medal Social’s website, including a history of the pages you view. We use this information to help us design our site to better suit our users’ needs. We may also use your IP address to help diagnose problems with our server and to administer our website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences.

Medal Social has a legitimate interest in understanding how members, customers and potential customers use its website. This assists Medal Social with providing more relevant products and services, with communicating value to our sponsors and corporate members, and with providing appropriate staffing to meet member and customer needs.

Medal Social makes available a comprehensive cookie notice that describes the cookies and tracking technologies used on Medal Social website and provides information on how users can accept or reject them. To view the notice, just click https://medalsocial.com/cookie-notice

The personal information Medal Social collects from you is stored in one or more databases hosted by third parties located in the EU. These third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval. On occasion, Medal Social engages third parties to send information to you, including information about our products, services, and events.

A list of our third party sub processors can be found here:

Stripe

When adding a credit card to your billing profile we send the card information to Stripe directly, without reading that information ourselves.

To Stripe we send:

• credit card details, which we cannot read ourselves apart the last 4 digits,
• email

Stripe GDPR Compliance

Google workspace

We use Google workspace to send and receive email and to book meetings.

Google GDPR Compliance

We do not otherwise reveal your personal data to non-Medal Social persons or businesses for their independent use unless: (1) you request or authorize it; (2) it’s in connection with Medal Social-hosted and Medal Social co-sponsored conferences as described above; (3) the information is provided to comply with the law (for example, compelled by law enforcement to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others; (4) the information is provided to our agents, vendors or service providers who perform functions on our behalf; (5) to address emergencies or acts of God; or (6) to address disputes, claims, or to persons demonstrating legal authority to act on your behalf. We may also gather aggregated data about our services and website visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, advertisers, and/or other third parties for marketing or promotional purposes.

The Medal Social App connects with third party services such as Facebook, LinkedIn, Twitter and others. If you choose to share information from the Medal Social website through these services, you should review the privacy policy of that service. If you are a member of a third party service, the aforementioned connections may allow that service to connect your visit to our site to your personal data.

Transferring personal data to the U.S.

Medal Social has its headquarters in the Norway. Information we collect about you will be processed in the EU. By using Medal Social’s services, you acknowledge that your personal information will be processed in the EU. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the GDPR. Pursuant to Article 46 of the GDPR, Medal Social is providing for appropriate safeguards by entering binding, standard data protection clauses, enforceable by data subjects in the EEA and the UK. These clauses have been enhanced based on the guidance of the European Data Protection Board and will be updated when the new draft model clauses are approved.

Depending on the circumstance, Medal Social also collects and transfers to the U.S. personal data with consent; to perform a contract with you; or to fulfill a compelling legitimate interest of Medal Social in a manner that does not outweigh your rights and freedoms. Medal Social endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with Medal Social and the practices described in this Privacy Statement. Medal Social also enters into data processing agreements and model clauses with its vendors whenever feasible and appropriate. Since it was founded, Medal Social has received zero government requests for information.

For more information or if you have any questions, please contact us at privacy@medalsocial.com

Medal Social inkluderer KI-assisterte funksjoner, blant annet «Pilot», en innebygd KI-assistent. Når du bruker Pilot, behandles innholdet du sender inn — forespørslene dine og innholdet du ber Pilot om å arbeide med — av store språkmodeller for å generere svar og forslag. Vi bruker ikke innholdet ditt til å trene delte eller offentlige KI-modeller.

Tekstfunksjoner (OpenRouter). Pilots tekstfunksjoner behandles via vår backend og rutes gjennom OpenRouter til leverandører av store språkmodeller, som Anthropic og OpenAI, som kun behandler innholdet ditt for å returnere et resultat til oss.

Talefunksjoner (ElevenLabs). Pilot har en valgfri talemodus. Når du starter en taleøkt og gir tillatelse til mikrofonen, strømmes lyden fra mikrofonen din til ElevenLabs, en tredjeparts KI-taleleverandør, for å transkribere talen din og generere talte svar i sanntid. Talemodus kjører kun når du starter den; appen tar ikke opp lyd i bakgrunnen.

OpenRouter og ElevenLabs fungerer som våre underleverandører (databehandlere) og behandler disse dataene på våre vegne utelukkende for å levere disse funksjonene. Denne behandlingen brukes ikke til annonsering, og vi selger ikke dataene dine.

The European Union’s General Data Protection Regulation (GDPR) and other countries’ privacy laws provide certain rights for data subjects. Data Subject rights under GDPR include the following:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right of data portability
• Right to object
• Rights related to automated decision making including profiling

This Privacy Notice is intended to provide you with information about what personal data Medal Social collects about you and how it is used.

If you wish to confirm that Medal Social is processing your personal data, or to have access to the personal data Medal Social may have about you, please contact us.

You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside Medal Social might have received the data from Medal Social; what the source of the information was (if you didn’t provide it directly to Medal Social); and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by Medal Social if it is inaccurate. You may request that Medal Social erase that data or cease processing it, subject to certain exceptions. You may also request that Medal Social cease using your data for direct marketing purposes. In many countries, you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how Medal Social processes your personal data. When technically feasible, Medal Social will—at your request—provide your personal data to you.

Reasonable access to your personal data will be provided at no cost. If access cannot be provided within a reasonable time frame, Medal Social will provide you with a date when the information will be provided. If for some reason access is denied, Medal Social will provide an explanation as to why access has been denied.

For questions or complaints concerning the processing of your personal data, you can email us at privacy@medalsocial.com. Alternatively, if you are located in the European Union, you can also have recourse to the European Data Protection Supervisor or with your nation’s data protection authority.

Your personal data is stored by the Medal Social on its servers, and on the servers of the cloud-based database management services the Medal Social engages, located in the United States. The Medal Social retains service data for the duration of the customer’s business relationship with the Medal Social and for a period of time thereafter, to analyze the data for Medal Social’s own operations, and for historical and archiving purposes associated with Medal Social’s services. Medal Social retains prospect data until such time as it no longer has business value and is purged from Medal Social systems. All personal data that Medal Social controls may be deleted upon verified request from Data Subjects or their authorized agents. For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at: privacy@medalsocial.com

We do not knowingly attempt to solicit or receive information from children.

If you have questions, concerns, complaints, or would like to exercise your rights, please contact us at:

Medal Social AS (Org. nr. 931 996 738)

Vallastølsvegen 7, 5227 Nesttun

privacy@medalsocial.com