Last updated: August 11, 2026
This policy explains how personal data is processed when you visit Saazly’s website, use the web or mobile app, contact support, or communicate through a customer’s Saazly chat.
Who is responsible for your data?
The company responsible for Saazly is ICM AS, company registration number 995 372 304, with an address in Oslo. ICM AS is normally the controller for processing related to Saazly’s own website, business accounts, support, and agreements.
When a customer company uses Saazly to communicate with its visitors, the customer company is normally the controller for the conversation, while Saazly processes the data on the customer’s instructions. You should therefore first contact the company whose website or service you used.
Data we may process
- Accounts: name, work email address, profile, language, workspace, role, permissions, and login events.
- Customer conversations: messages, name or alias, email address, attachments, timestamps, conversation status, website, and technical session data.
- AI features: current message, relevant conversation history, customer-approved knowledge content, instructions, and generated response.
- Operations and security: IP address, URL, browser, device and app version, logs, cookie preferences, push token, and notification status when the feature is used.
- Agreements and support: company, subscription, billing, and support information. Full card details are normally handled by the payment provider.
- Evidence of your agreement: we record which terms you accepted, when you accepted them, in which language, and your name, email address, and role, and we retain this information for ten years even if you ask us to delete your account because it is our evidence that the agreement was entered into, while the IP address and browser information are removed when the account is deleted and no later than after two years.
The data comes from you, your employer or workspace administrator, the customer company, your device, login providers such as Google or Apple, and integrations enabled by the customer.
Purposes and lawful bases
We process data to create and secure accounts; provide inbox, messaging, file, AI, and notification features; administer agreements and payments; provide support; prevent misuse; and comply with legal obligations. Depending on the circumstances, the lawful basis is performance of a contract, compliance with a legal obligation, legitimate interests, or consent. When Saazly acts as a processor, processing follows the customer’s documented instructions.
AI and automation
Saazly may provide suggested replies, summaries, classification, routing, and automated responses. AI can make mistakes. Saazly must not be used as the sole basis for decisions that have legal or similarly significant effects without a separate assessment. Learn more about AI and transparency.
Providers and international transfers
We use providers for services including authentication, databases, AI, email, payments, operations, and notifications. Current verified information is available on our subprocessors and service providers page.
Retention periods
Data is retained for as long as necessary for the relevant purpose, the customer’s documented instructions, security, or a legal obligation. Retention periods vary for items such as accounts, conversations, billing records, support cases, and technical logs. Protected database backups are deleted after no more than 90 days. Deleted data may therefore remain in those backups for this limited period and may need to be retained longer in separate systems where required by law or in connection with a legal claim.
Your rights
Depending on the circumstances, you may have the right to information, access, rectification, deletion, restriction, data portability, objection, and withdrawal of consent. We may need to verify your identity. See account deletion and data removal or contact support.
You may lodge a complaint with the relevant data protection authority. For ICM AS, the Norwegian Data Protection Authority, Datatilsynet, is a relevant authority. You may also contact the authority where you live or work.
Cookies, security, and children
Information about cookies and how to change your preferences is available in our Cookie Policy. We use security measures designed to protect data, but no internet service can guarantee absolute security. Saazly is a business service and is not intended for children to create operator accounts.
Contact and updates
We publish a new date whenever material changes are made to this policy. For privacy questions and requests concerning your rights, use the following contact details:
ICM AS, company registration no. 995 372 304
Skur 35, Akershusstranda 15
0150 Oslo, Norge
Email: [email protected]