Privacy notice

1. Who controls your data

Olof Lindh Film AB is the controller of personal data used to operate How They Met.

2. What we collect

• Portraits, names, cameo images, story details, preferences, scene choices, and generated media.
• Your email address and any review-recipient addresses you choose to provide.
• Order identifiers, package, price, payment status, and tax/billing information supplied through Stripe. We do not receive full card details.
• Technical and security data such as IP-derived request information, device/browser information, timestamps, rate-limit records, production status, and error codes.
• Aggregate product-use events such as starting an upload, choosing a package, and completing a production. We do not put names, email addresses, portraits, or story text in product analytics events.
• For advertising measurement, a completed purchase may send Google Ads the package value, currency, a transaction identifier, and limited technical request data. We do not send portraits, story details, or customer email addresses through this event.

3. Why we use it

We process order and project data to perform our contract: create, assemble, deliver, revise, and support the film. We process checkout consent and transaction records to meet legal obligations. We use proportionate technical, fraud-prevention, product analytics, and issue data for our legitimate interests in securing and improving the service. Where consent is legally required, we ask for it separately.

4. Service providers and transfers

We disclose only what is needed to providers acting for us: Vercel for hosting, workflows, analytics, and application infrastructure; Upstash for production records and rate limits; fal.ai and its model providers for image/video generation and media processing; Stripe for payments, tax, and fraud prevention; Resend for transactional email; and Google Ads for purchase conversion measurement. The Google tag starts with advertising storage, analytics storage, advertising user-data, and personalization signals denied.

Some processing may occur outside the EU/EEA. Where required, transfers rely on an adequacy decision, approved standard contractual clauses, or another lawful safeguard. Providers may also act as independent controllers for limited purposes described in their own notices, particularly payments and fraud prevention.

5. Retention

Project records are retained for up to 12 months from project creation so you can access the film and use included scene revisions. Portraits and generated media are configured to expire automatically no later than 12 months after they are uploaded or generated. Download the final film before that period ends. We may delete project media sooner in response to a verified deletion request unless it must be kept for a dispute, security incident, or legal obligation. Payment, accounting, consent, and tax records are kept for the period required by applicable law. Rate-limit and diagnostic data is kept only as long as reasonably needed for security and troubleshooting.

6. Recipients you add

If you add another person’s email, you confirm you are entitled to provide it for the limited purpose of reviewing this film. We use it only for production and delivery messages for that project, not marketing.

7. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, and may withdraw consent without affecting earlier processing. You may also complain to your data-protection authority; in Sweden this is Integritetsskyddsmyndigheten (IMY). We may need to verify your identity before acting on a request.

8. Security and children

We use access controls, unguessable project identifiers, rate limits, encrypted provider connections, restricted production credentials, and expiry rules for project media. Media is delivered through provider-hosted links, so anyone who receives an exact media or creator link may be able to open it; keep those links private. No online service can guarantee absolute security. The service is intended for adults and is not directed to children.

Contact

Olof Lindh Film AB
Company number: 559154-6881
VAT number: SE559154688101