Privacy Policy

1. Who we are

Kliping d.o.o. is the provider of Servanta and the controller of the personal data described in this policy, except where we process data on behalf of a customer under a data-processing agreement. In that case, the customer is the controller and Kliping acts as its processor.

2. Data we process

Depending on how you use Servanta, we process the following categories of data:

3. How and why we use data

We process personal data to:

• authenticate users and provide the Servanta services requested by our customers;
• search, retrieve, organize, summarize, and analyze monitored media coverage;
• preserve user settings, saved work, and notification preferences;
• protect accounts, prevent abuse, maintain service reliability, and diagnose errors;
• provide customer support and communicate about operational service matters;
• comply with legal obligations and establish, exercise, or defend legal claims; and
• improve Servanta using aggregated or appropriately de-identified information.

Our legal bases under the GDPR are performance of a contract, our legitimate interests in providing and securing a business service, compliance with legal obligations, and consent where a feature is optional and consent is required. You can withdraw consent for optional notifications through your browser or device settings.

Servanta does not make decisions about individuals that produce legal or similarly significant effects solely by automated means.

4. ChatGPT, Claude Code, Microsoft 365, and connected services

When you use Servanta through ChatGPT, Claude Code, Microsoft 365 Copilot, Microsoft Teams, or another MCP-compatible client, the service or client sends Servanta the prompt, search criteria, tool parameters, and available user or organization context needed to complete your request. Servanta returns matching media information and tool output to that service or client so it can prepare and present a response.

The selected service or client can ask you to authorize Servanta before the first connection. It manages the connection according to its account, workspace, and client configuration, while Servanta validates the presented access token before serving customer data. Processing by the connected provider is governed by your agreement with that provider and its privacy terms, including the Microsoft Privacy Statement , OpenAI Privacy Policy , and Anthropic Privacy Policy .

Servanta uses essential browser storage and IndexedDB to maintain authentication, preferences, cached application data, and pending notification actions. If you enable push notifications, Google Firebase Cloud Messaging processes a device token and message delivery information under Google's Privacy Policy . Servanta does not use this storage for third-party behavioural advertising.

5. How we share data

We disclose personal data only when necessary to:

• provide the service to your employer or customer organization, whose administrators can manage accounts, permissions, integrations, and organizational content;
• work with contracted hosting, identity, communication, support, and infrastructure providers that process data under our instructions and confidentiality obligations;
• connect Servanta to ChatGPT, Claude Code, Microsoft 365, or another service you choose to use;
• comply with law, enforce our agreements, or protect users and the service; or
• complete a corporate transaction, subject to appropriate confidentiality and data protection safeguards.

We do not sell personal data or use it for third-party targeted advertising.

Our primary operations are in the European Economic Area. If a service provider processes personal data outside the EEA, we use a lawful transfer mechanism and appropriate safeguards, such as an adequacy decision or standard contractual clauses, where required.

6. Retention and deletion

We retain personal data only for as long as it is needed for the purposes above:

• account, profile, and customer configuration data is retained while the account and applicable customer agreement remain active;
• searches, saved work, monitored media content, and reports follow the retention period configured for the customer service or agreed in the customer contract;
• operational, diagnostic, and security logs are kept for the limited period needed for security, troubleshooting, audit, and legal purposes, then deleted or aggregated;
• push-notification tokens are retained until notifications are disabled, the token is invalidated, or the account is closed; and
• local browser data remains on the device until it is cleared by Servanta, the user, or the browser. Signing out removes authentication and account data managed by Servanta.

When an account or customer service ends, we delete or anonymize personal data after the applicable return and deletion period. Data can remain temporarily in protected backups until those backups are overwritten on their normal rotation. We retain records longer only when required by law or necessary to resolve a dispute or protect legal rights.

To request deletion, email info@kliping.si. If your account is managed by an organization, contact its administrator first; the organization may need to authorize or complete the request.

7. Security

We use technical and organizational measures appropriate to the risk, including encrypted network connections, authentication and role-based access controls, tenant-based authorization, restricted administrative access, logging and monitoring, backups, security updates, and incident-response procedures. No system is completely secure, so users should protect their credentials and report suspected misuse promptly.

8. Your data-protection rights

Subject to applicable law, you can request access to your personal data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can also withdraw consent without affecting processing that occurred before the withdrawal.

We may need to verify your identity and coordinate with the customer organization that manages your account. You also have the right to lodge a complaint with the supervisory authority in your country. In Slovenia, this is the Information Commissioner of the Republic of Slovenia .

9. Children

Servanta is a business service and is not directed to children. We do not knowingly collect personal data directly from children through Servanta accounts.

10. Changes to this policy

We may update this policy as Servanta or applicable law changes. We will publish the revised policy on this page, update the date above, and provide additional notice when a change materially affects how we process personal data.