Privacy notice

1. Who controls your data

Olof Lindh Film AB is the controller of personal data used to operate How They Met.

2. What we collect

• Portraits, names, cameo images, story details, preferences, scene choices, and generated media.
• Your email address and any review-recipient addresses you choose to provide.
• Order identifiers, package, price, payment status, and tax/billing information supplied through Stripe. We do not receive full card details.
• Technical and security data such as IP-derived request information, device/browser information, timestamps, rate-limit records, production status, and error codes.
• Cookieless, aggregate product-use events such as starting an upload, choosing a package, and completing a production. We do not put names, email addresses, portraits, or story text in analytics events.

3. Why we use it

We process order and project data to perform our contract: create, assemble, deliver, revise, and support the film. We process checkout consent and transaction records to meet legal obligations. We use proportionate technical, fraud-prevention, product analytics, and issue data for our legitimate interests in securing and improving the service. Where consent is legally required, we ask for it separately.

4. Service providers and transfers

We disclose only what is needed to providers acting for us: Vercel for hosting, workflows, analytics, and application infrastructure; Upstash for production records and rate limits; fal.ai and its model providers for image/video generation and media processing; Stripe for payments, tax, and fraud prevention; and Resend for transactional email.

Some processing may occur outside the EU/EEA. Where required, transfers rely on an adequacy decision, approved standard contractual clauses, or another lawful safeguard. Providers may also act as independent controllers for limited purposes described in their own notices, particularly payments and fraud prevention.

5. Retention

Active project records and delivered media are retained for up to 12 months after the project’s most recent activity so you can access and revise the film, unless a longer period is needed for a dispute, security incident, or legal obligation. Provider-hosted generation outputs may expire sooner, so download final assets promptly. Payment, accounting, consent, and tax records are kept for the period required by applicable law. Rate-limit and diagnostic data is kept only as long as reasonably needed for security and troubleshooting.

6. Recipients you add

If you add another person’s email, you confirm you are entitled to provide it for the limited purpose of reviewing this film. We use it only for production and delivery messages for that project, not marketing.

7. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, and may withdraw consent without affecting earlier processing. You may also complain to your data-protection authority; in Sweden this is Integritetsskyddsmyndigheten (IMY). We may need to verify your identity before acting on a request.

8. Security and children

We use access controls, unguessable project identifiers, rate limits, encrypted provider connections, and restricted production credentials. No online service can guarantee absolute security. The service is intended for adults and is not directed to children.

Contact

Olof Lindh Film AB
Company number: 559154-6881
VAT number: SE559154688101