1. Data controller

Bitfrost FX is the data controller for your personal data. Contact: privacy@bitfrostfx.com.

2. What data we collect

Account: email address, name (if you provide it), avatar.
Payment: handled by Stripe — we only store a customer ID and subscription status, never card details.
Content: scenes, templates, teams, players and media you create or upload.
Technical: IP address, browser type and log data for security and troubleshooting.

3. Why we process data

To deliver the service (contractual fulfilment).
To handle billing and prevent fraud (legal obligation + legitimate interest).
To send service messages about your account (contractual fulfilment).
To improve the service through anonymous usage statistics (legitimate interest).

4. Third-party services

We use the following sub-processors to deliver the service:

Supabase (Lovable Cloud) — database, file storage and authentication. Servers in the EU.
Stripe — payments and billing.
Cloudflare — hosting, edge delivery and DDoS protection.

5. Retention

Account data is stored for as long as your account is active. If you delete your account, your personal data is deleted within 30 days, except for data we are required to keep under accounting law (invoices for 7 years).

6. Your rights (GDPR)

You have the right to:

request a copy of your personal data,
request correction of inaccurate data,
request deletion of your account,
request data portability,
object to processing based on legitimate interest,
file a complaint with the Swedish Authority for Privacy Protection (IMY).

Send your request to privacy@bitfrostfx.com. We respond within 30 days.

7. Cookies

We only use necessary cookies for login and session management. We do not use any marketing or third-party tracking cookies.

8. Security

All data is transmitted encrypted (TLS) and stored encrypted at rest. Access to production data is limited to essential staff.

Privacy Policy