Privacy Policy
1. Introduction
Welcome to Shattup, a service provided by Liferoom S.L (“Shattup”, “we”, “our”, or “us”).
We are committed to protecting your privacy and ensuring transparency about how we collect, use, and share your personal information. This Privacy Policy describes our data practices in connection with our application, services, and website at https://shattup.com (collectively, the “Services”).
By using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our Services.
2. Information We Collect
Video and Audio Data:
When using the Shattup application, your webcam and microphone capture input to compute a momentary General Attention Score (mGAS).
This data includes behavioral and physiological variables such as head pose, eye gaze, blinking, mouth status, and facial expressions.
Derived Attention Metrics:
These are attention-level scores and time-series data generated from your input, used for visualizing and analyzing your attention patterns.
Session Data and History:
We record anonymized session data (mGAS over time, mean scores, reports, and graphs) to allow you to review or delete sessions later.
Contact Information:
If you reach out to us (e.g., through email or forms), we may collect your name, email address, and message details.
3. How We Use Your Information
We process your information to:
Compute and display your attention levels during sessions.
Generate session reports, graphs, and audio summaries.
Improve and optimize our Technology and user experience.
Respond to inquiries and provide technical support.
Ensure security, fraud prevention, and compliance with laws.
4. Processing and Data Flow
Local Processing:
Most video/audio processing occurs locally on your device. Only derived data (numerical or anonymized attention scores) is sent to our servers.
Cloud Processing:
We operate globally through cloud-hosted infrastructure (AWS) to provide reliable and scalable service delivery.
Analytics:
We use Google Tag Manager (GTM) and related analytics tools to understand service usage and improve performance.
5. Legal Basis for Processing
We process your personal data under one or more of the following legal bases:
Consent: When you voluntarily use video/audio features or contact us.
Legitimate Interests: To enhance and secure our services and technology.
Legal Obligations: To comply with applicable laws and regulatory requirements.
6. Data Retention
We retain anonymized session data for two (2) years from the date of collection, after which it is automatically deleted.
Contact information or correspondence is retained only as long as necessary to fulfill the purpose for which it was collected or as required by law.
7. Data Sharing and Disclosure
We do not sell or rent personal data.
We may share information only with:
Service Providers: Cloud hosting (AWS) and analytics (GTM) providers who process data on our behalf under strict confidentiality and security obligations.
Legal Requirements: Authorities or regulators when required by law or to protect our rights.
Aggregated or Anonymized Data: Shared for research or service improvement without identifying individuals.
8. Data Security
We implement appropriate technical and organizational measures to protect your information from unauthorized access, loss, misuse, alteration, or destruction.
While we take reasonable steps to safeguard data, no system is completely secure, and users should also take precautions when using online services.
9. International Data Transfers
As our services are cloud-hosted globally, your data may be processed in different countries.
We ensure appropriate safeguards are in place to maintain equivalent protection standards in compliance with the GDPR and other international data protection laws.
10. Your Rights
Depending on your jurisdiction, you may have the following rights:
Access – Request a copy of your personal data we hold.
Correction – Request correction of inaccurate or incomplete data.
Deletion – Request erasure of your data (“right to be forgotten”).
Restriction – Request limitation of data processing.
Portability – Receive your data in a portable format.
Objection – Object to data processing based on legitimate interest.
Withdraw Consent – Withdraw previously given consent at any time.
To exercise these rights, contact us at [email protected].
11. Children’s Privacy
Our Services are not intended for children under 16 years of age.
We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us to request deletion.
12. Cookies and Tracking
We may use cookies and similar technologies to enhance functionality, analyze usage, and improve user experience.
You can control cookie settings through your browser or device preferences.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
When we do, we will revise the “Effective Date” and post the updated version on our website.
We encourage you to review this page periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Liferoom S.L (Shattup)
Email: [email protected]
Website: https://shattup.com