← Back to Skald

Privacy Notice

Version: privacy-2026-07-18 · Effective: 18 July 2026 · English translation

This English version is a translation of the German privacy notice. It describes the same processing; selecting English does not change the controller, purposes, legal bases or applicable data-protection law.

1. Controller

NEWAYS Management und Beratungs GmbH, Reiherweg 14, Priel, 9431 Wolfsberg, Austria, FN 159425 z, Regional Court Klagenfurt, VAT ID ATU 42733306. Contact for privacy requests: info@getskald.ai.

2. Website, account and contract

We process technical access data, IP address, time, URL, browser/client information and security logs, as well as account data such as email address, display name, password hash, verification status, roles, technical IDs, licence, payment, device and usage status. Purposes include providing and securing the website and apps, authentication, contract performance, billing, abuse prevention, support and statutory evidence.

Legal bases include Art. 6(1)(b) GDPR (contract and pre-contractual steps), point (c) (legal obligations) and point (f) (secure, stable and auditable operation). Acknowledging this notice is not consent.

The website and account use only technically necessary cookies or equivalent storage for sign-in, security, language and limited purchase status. Skald currently uses no marketing or audience-measurement cookies requiring consent.

3. Payments and email

We use Stripe for checkout, payment, invoices, refunds, fraud prevention and payment evidence under Stripe’s own and contractually agreed privacy terms. Skald does not store full card details.

Transactional emails are sent through Postscale. Recipient address, subject, content and technical delivery data are processed.

4. Audio and text processing

Temporary Skald EU artefacts are generally scheduled for deletion within 24 hours. Usage and cost metadata are generally retained for 365 days and audit evidence for 730 days, unless a longer statutory duty or a specific security/legal case applies. Backup retention may delay physical deletion until the operational deletion cycle completes.

5. Local data and diagnostics

Desktop and mobile apps store settings, protected session and access information, device information, histories and exports locally. Users control local deletion through app and operating-system functions. Voluntary bug reports may include descriptions, diagnostics and screenshots explicitly selected by the user.

6. Recipients and transfers

Recipients may include hosting, infrastructure, email, payment and cloud providers and customer-configured BYO providers. Where data are processed outside the EEA, we use legally prescribed transfer mechanisms and additional safeguards where required.

7. Retention

Account, contract, payment and licence data are stored during the contract and afterwards according to statutory retention, warranty, limitation and evidence duties. Security logs are retained only as long as required for protection, investigation and evidence. Legal acceptance evidence is retained for the contract term and relevant limitation and evidence periods.

8. Rights

Data subjects have rights under the GDPR to access, rectification, erasure, restriction, portability and objection. Consent may be withdrawn for the future. Complaints may be submitted to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna.

9. Required and optional processing

Skald cannot be provided without data required for the account, licence, security and contract. Cloud routes are active only where required by the package or selected and configured by the user or organisation.

10. Updates

A new versioned notice will be provided for material changes. Where required for continued app use, receipt will be acknowledged online again.