Overview

Who is responsible for your data?

Snellr AB provides the AetherAudio platform and is the data controller for personal data used to create accounts, secure and operate the platform, administer subscriptions, provide support, and issue invoices.

Your employer or the customer organisation that gives you access may separately be the controller for its workforce and site-management data. In that situation, Snellr AB processes that data on the customer's instructions. Questions about decisions made by your organisation should first be directed to that organisation.

Personal data we process

• Account and contact data, including your name or email address, company, role, and workspace membership.
• Authentication and security data, including password hashes, encrypted MFA setup data, sessions, sign-in events, recovery-code hashes, network address, and security audit records.
• Operational data, including sites, zones, speakers, audio profiles, streaming-source configuration, control actions, health information, and diagnostic logs associated with a user or customer.
• Billing data, including legal entity, invoice recipient, postal address, VAT and registration numbers, purchase references, site usage, and invoice records.
• Support and communication data that you choose to provide when contacting us.

We ask customers and users not to submit special-category personal data through AetherAudio.

Where the data comes from and what is required

We receive data directly from you, from an administrator in your customer organisation, from your configured identity provider, and from connected AetherAudio site systems. Account, authentication, customer, site, and billing fields marked as required are necessary to provide and secure the service or issue a valid invoice. Without them, the relevant account, site operation, or billing function cannot be provided.

Why we process it

We do not rely on acceptance of this notice as consent for these core activities. If we introduce an optional activity that requires consent, such as certain direct marketing, it will have a separate and voluntary choice.

Who receives the data?

Personal data is available only to authorised Snellr AB personnel who need it, authorised administrators in your customer organisation, and suppliers that help us host, secure, communicate, support, or bill for AetherAudio. Microsoft Azure and Azure Communication Services are key infrastructure and email-service providers. Professional advisers and authorities may receive data when necessary or legally required.

Suppliers that process personal data for us are subject to data-processing and confidentiality requirements. We do not sell personal data.

Where data is processed

We aim to keep primary platform processing in the European Economic Area. A supplier may process limited data outside the EEA. Where that happens, we require a lawful transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with additional safeguards where needed.

How long data is kept

Account and operational data is retained while the customer relationship or account is active and afterwards only for as long as needed for support, security, disputes, or applicable limitation periods. Short-lived verification and reset records expire after their stated validity period. Security and diagnostic records follow limited operational retention schedules. Invoices and accounting material are retained for the period required by applicable accounting and tax law.

Data may be anonymised so that it can no longer identify a person. Anonymised data is not personal data.

Security

We use access controls, encrypted transport, protected credentials, tenant separation, logging, backups, and operational monitoring appropriate to the service. No internet service can guarantee absolute security, so we continuously review these measures.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing.

Email contact@snellr.se to exercise a right. We may need to verify your identity. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or the supervisory authority where you live or work.

Browser storage and automated decisions

AetherAudio uses necessary browser storage for authentication sessions, workspace context, and interface preferences. It is not used for third-party advertising. We do not make decisions producing legal or similarly significant effects about users solely by automated means.

Changes to this notice

We will publish material changes here with a new effective date and version. A signed-in user may be asked to acknowledge an updated notice in My Account. The acknowledgement records which notice was shown; it does not change the legal basis described above.