Privacy notice
What we collect, why we have it, who else sees it, and exactly how long each piece survives.
Version 1.0.0 Effective 2026-08-24 Last updated 2026-08-24
In short
Applies to: Anyone whose personal data we handle
- Session audio is processed while the room is live and no recording of it is kept.
- Every retention period on this page is a number of days, months or years.
- Session audio and transcripts are processed in the United States.
Who is responsible
The controller for your account data, and the processor for the content of your sessions, is the entity below.
- Legal entity: SNOWWANE LIMITED
- Company number: 13823125
- Registered address: Online company registered in England and Wales
- Jurisdiction of incorporation: England and Wales
- Data protection contact: privacy@tingvar.com
For anything about this notice, write to the address below. It is not the support inbox and it is read by a person.
privacy@tingvar.com
What a session produces
The full inventory, with the sensitivity of each piece, is on the data page. The short version is that your audio is processed while the room is live and never written down, and the transcript is the artefact that persists.
What we collect, and why
| Purpose | Item | Why |
|---|---|---|
| Running a session | Your audio, your transcript, your brief, the personas’ output | Performance of our contract with you |
| Keeping a transcript you can read later | The attributed transcript and the session metadata | Performance of our contract with you |
| Account and sign-in | Email address, password hash, sign-in events | Performance of our contract with you |
| Taking payment | Billing identifiers and transaction metadata. No card number reaches us | Performance of our contract, and a legal obligation for the records |
| Keeping the service up and finding faults | Server logs, error reports with no request bodies | Our legitimate interest in a service that works |
| Measuring how the site is used | Page level events, first party and with no cross site identifier | Your consent, which you can withdraw at any time |
| Sending you a message you asked for | Your email address and what you asked to be told about | Your consent, which you can withdraw at any time |
| Answering a legal or regulatory demand | Whatever the demand covers | A legal obligation |
How long we keep it
Every row carries a number. That is our own commitment C20 and it is enforced by the build rather than by a reviewer's memory.
| Item | How long | How to delete it |
|---|---|---|
| Session audio, yours and the personas' | Not retained. Processed while the room is live | Nothing to delete, because nothing is written |
| Transcripts and the brief | Kept until you delete them, then gone within 30 days including backups | Delete a session yourself, or delete the account |
| Session metadata, such as duration and floor share | 24 months, then aggregated | Aggregated records carry no identifier |
| The one question a session ends on | Destroyed with the session, so within 30 days of you deleting it | Deleted with the session |
| Server logs | 90 days | Purged automatically |
| Backups | Purged within 30 days of the source being deleted | Automatic, and this is the number questionnaires ask for |
| Billing records | 7 years | Tax law requires them, so they survive a deletion request |
| Consent records | 6 years after the consent is withdrawn | Kept to evidence that the choice was honoured |
Who else sees it
Every vendor that touches customer data is named, including the model vendor. The list carries what each one receives and where it operates.
| Vendor | Data it receives | Where |
|---|---|---|
| Google Cloud, Vertex AI | Your audio, your transcript, the brief, persona speech | us-central1, United States |
| Google Cloud, Speech-to-Text | Your audio, your transcript | us-central1, United States |
| Media server | Your audio and persona audio, in transit | Decided with the vendor |
| Paddle, merchant of record | Billing identifiers and transaction metadata | Decided with the vendor |
| Application hosting | Request metadata, account data, transcripts, the brief | Decided with the vendor |
| Brevo, transactional email | Your email address and the content of the message | Decided with the vendor |
| WorkOS, enterprise federation | Your email address, your name, and the group memberships your employer syncs | Decided with the vendor |
| Error monitoring | Stack traces. No request bodies | Decided with the vendor |
Where it is processed
In the United States. The model that runs the personas is pinned to Google Cloud's us-central1 region and there is no EU only deployment of that configuration. For customers in the UK and the EEA that is a transfer out of your region, and we rely on Standard Contractual Clauses and the safeguards in our data processing agreement. If your procurement requires EU residency, we cannot meet it today.
Your rights
| Item | What happens | When |
|---|---|---|
| Access | A copy of what we hold about you | Within 30 days |
| Deletion | Destruction of your sessions and your account | Self-service, immediately |
| Correction | Fixing something that is wrong | Within 30 days |
| Portability | Your sessions in a format that opens elsewhere | Self-service, immediately |
| Objection | Stopping processing that rests on our legitimate interest | Within 30 days |
| Withdrawing consent | Turning off measurement or messages | Immediately, and it does not affect what happened before |
Under the UK and EU GDPR the statutory window is one month. Under the California Consumer Privacy Act it is 45 days. We answer inside whichever applies to you, and we tell you the reference number when we start.
Storage on your device
This site sets no advertising storage and contacts no third party host. Every key it writes is named on the cookie notice with its lifetime and the control that switches it off.
Children
Tingvar is not for children. There is a minimum age to hold an account and it is not settled yet.
- Minimum age to hold an account: 18
It is one entry in one register, and the terms read the same entry, so the terms, the signup form and every store listing carry the same number rather than three different numbers in three places.
Changes to this notice
The version and the date at the top of this page change when the notice changes, and the legal index lists both. A change that widens what we do with your data is announced before it takes effect rather than after.
| Version | Published | What happens |
|---|---|---|
| 1.0.0 | 2026-08-24 | First publication. The entity, the company number, the registered address, the data protection contact and the minimum age are outstanding and are labelled on this page |