Who is responsible
Sammera is run by Revly AB, org. no. 559487-1419, Genvägen 9, 146 40 Tullinge, Sweden.
Revly AB is the controller for account data: your name, your email address, the organisations you belong to and your role in each, and your sign-in.
For call data, the organisation that uses Sammera is the controller and Revly AB is its processor. Call data is what the organisation puts into Sammera: transcripts, summaries, ticket drafts, suggestions, documentation gaps and the documentation itself. We handle it only to run Sammera for that organisation.
Account data
- Your name and email address, from when you create an account or are invited.
- Which organisations you belong to and your role in each.
- Your sign-in. Passwords are handled by Supabase and are never stored in plain text.
- A log of who added and removed people, changed roles and changed who sees the calls. Owners and admins of the organisation can read it.
We use account data to let you in, send invitations and sign-in emails, and keep each organisation apart from the others. We need it to provide the service you or your organisation signed up for.
Account data is kept while you have an account. Write to us and we delete it.
Call audio and transcripts
- Speech recognition runs on Sammera's own server in Germany (Hetzner). The audio is sent there encrypted while the call is transcribed, and never to an outside speech service.
- While the call runs, a copy of its audio is also kept on the agent's computer, so a dropped connection loses nothing. It is deleted once the call is transcribed and saved, and after 7 days at the latest.
- Audio is off by default, and then the server deletes the recording as soon as the transcript is ready. If the organisation turns audio on, the server keeps the recording for the 1 to 7 days it chose and then deletes it. Until then, the people who may see the call can play it from the call page.
- If the organisation keeps transcripts, the transcript, summary, ticket draft and suggestions are stored in the database in Stockholm.
- The organisation chooses how long they are kept, between one day and one year. The default is 30 days. Every night the database deletes what is older than that. The record that a call took place, with its time and agent, stays until the organisation is deleted.
- Documentation gaps are saved even when transcripts are not. A gap is a short description of the question, not the transcript.
- By default each agent sees only their own calls. The organisation can let team leads, or everyone in the organisation, see more.
Language models
The suggestions and the summary are written by a language model. It gets text from the call and excerpts from the documentation.
The organisation chooses the model in its AI settings: Sammera's AI, Claude on its own Anthropic key, or its own server that follows OpenAI's interface. With Sammera's AI, we tell you which model it is and where it runs before you start. With your own key or server, the text goes to that provider under your organisation's own agreement with it.
Booking a demo and writing to us
- When you book a demo or write to us from the website, we get what you enter: your name, your work email address, your company and anything you add in the message.
- A booking creates an event in our calendar at Zoho, and Zoho sends you the invitation. A message is sent to our mailbox through Resend.
- The website passes it on through a function at Supabase, which stores none of it.
We use it to answer you and to hold the demo, which is what you asked for. We keep it while we are in contact about Sammera. Write to us and we delete it.
Who processes data for us
| Service | Where | What it does |
|---|---|---|
| Supabase | Stockholm, Sweden, on Amazon Web Services | The database and sign-in: accounts, organisations, settings, calls, transcripts and documentation. When an organisation uses its own AI key, the key stays here and the calls to that provider pass through a Supabase function that adds it. |
| Resend | Ireland | Email: invitations, email address confirmation and new password links. Open and click tracking is off. |
| Vercel | Stockholm and the US | Hosts this website. Signed-in pages fetch their data straight from the database, so Vercel stores no call data. Like any web host it sees the technical details of each visit, such as your IP address. |
| Zoho | The EU | Our mailbox and our calendar. Holds the messages you send us and the demos you book. |
| Anthropic | The US | Only if Sammera's AI uses Claude for your organisation. Writes the suggestions and the summary from the call text. With the web search add-on, Claude also writes a short search query from the call and searches the web at Anthropic. The transfer outside the EU relies on the EU standard contractual clauses in Anthropic's data processing terms. |
Cookies and local storage
- This website has no analytics and no tracking cookies.
- One cookie, lang, remembers the language you chose, for a year.
- When you sign in, your session is kept in your browser's local storage, along with the organisation you last opened. Signing out removes the session.
Your rights
- You can ask for a copy of your personal data, and ask us to correct it, delete it or restrict how we use it. You can object to how we use it, and ask for it in a format you can take elsewhere.
- If your question is about call data, the organisation that runs the service desk is responsible for it. Ask them first. We help them answer.
- If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Changes
When this policy changes, we update the date at the top. If a change affects how we use your data, we email account holders before it applies.
Contact
Questions about your data or this policy? We answer within a month. Write to hello@sammera.com.