Effective as of: Payment date
Trueframe Studio Oy (“Trueframe”, “we”, “us”) is committed to protecting your
privacy and ensuring the lawful and transparent processing of your personal data. This Privacy Policy explains how we collect, use,
store, and protect your personal data when you use our services, software platform, and website, in accordance with the
EU General Data Protection Regulation (GDPR)
and applicable Finnish and EU data protection laws.
1. Who We Are
- Controller: Trueframe Studio Oy
- Business ID: XXXXX
- Address: Helsinki, Finland
- Email: admin@trueframestudio.com
For some processing activities (e.g. hosting, analytics, payments), we may act as a data processor on behalf of our customers.
In such cases, our customers are the data controllers and we process personal data according to a separate
Data Processing Agreement (DPA)
.
2. What Data We Collect
We may collect and process the following categories of personal data:
- Identification data: name, company name, contact details (email, phone, billing address).
- Account data: login credentials, user preferences.
- Payment data: processed securely via Stripe; we do not store full credit card details.
- Customer content: data, images, text, and other materials uploaded or shared by customers.
- Technical data: IP address, browser type, device information, usage logs.
- Support data: messages, emails, or tickets sent to our support team.
3. Purposes and Legal Bases of Processing
We process personal data only when we have a lawful basis under GDPR:
- Contract performance (Art. 6(1)(b)): to provide and manage your account, deliver services, and process payments.
- Legal obligations (Art. 6(1)(c)): for accounting, tax, and regulatory compliance.
- Legitimate interests (Art. 6(1)(f)): to secure our systems, prevent fraud, improve services, and provide customer
support.
- Consent (Art. 6(1)(a)): where required for optional features (e.g. newsletters, cookies for marketing).
4. How We Use Personal Data
We use personal data to:
- Provide and operate our AI-powered video and photo production services.
- Manage billing and subscriptions.
- Respond to support requests.
- Maintain and improve our platform.
- Meet legal and contractual obligations.
We do not sell or rent your personal data to third parties.
5. Sharing and Disclosure
We may share data with:
- Service providers (processors): e.g. hosting, cloud storage, analytics, customer support tools.
- Payment provider: Stripe, for secure payment processing.
- Legal authorities: if required by law or to protect rights and security.
All third parties are bound by contractual obligations ensuring GDPR compliance.
6. International Data Transfers
If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards (such as
the EU Commission’s Standard Contractual Clauses) are in place.
7. Data Retention
We retain personal data only as long as necessary for the purposes set out in this policy:
- Contractual data: kept for the duration of the agreement and up to 6 years for legal obligations.
- Account data: deleted or anonymised within 30 days of termination, unless required by law.
- Technical logs: generally retained up to 12 months.
8. Data Subject Rights
Under GDPR, you have the following rights:
- Access – obtain confirmation and a copy of your personal data.
- Rectification – request correction of inaccurate or incomplete data.
- Erasure – request deletion of your data (“right to be forgotten”).
- Restriction – request limitation of processing in certain cases.
- Portability – receive your data in a structured, machine-readable format.
- Objection – object to processing based on legitimate interests or direct marketing.
- Withdraw consent – where processing is based on your consent.
To exercise these rights, contact us at admin@trueframestudio.com. We may require verification of identity.
If you are not satisfied with our response, you may lodge a complaint with your local data protection authority. In Finland, this is
the Office of the Data Protection Ombudsman: https://tietosuoja.fi.
9. Security Measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or
disclosure. Access to data is restricted to authorised personnel only.
10. Cookies and Tracking
Our website and platform may use cookies or similar technologies for essential functionality, analytics, and (where consent is given)
marketing. You can manage your preferences through your browser settings or our cookie banner.
11. Changes to This Privacy Policy
We may update this policy from time to time to reflect changes in our practices or legal obligations. Significant changes will be
notified via email or platform notice at least 14 days in advance.
12. Contact
Trueframe Studio Oy
Helsinki, Finland
Email: admin@trueframestudio.com