Privacy policy

Who is responsible

Filmklar is run by Uno Arch, CVR [CVR], [adresse] (Denmark). Uno Arch is the data controller for what is described here. Contact: hej@filmklar.dk.

For the people who can be seen or heard in your footage, you are the controller and we process the footage for you. Write to us if you want a data processing agreement.

What we store

• Login: name and email. There is no password. You log in with a link we send by email. We keep the time, IP address and browser of a login for up to 30 days.
• Your business: name, time zone, settings, and what you write under "Om jer" (who you are, your audience, tone, words to use or avoid, hashtags, posting times).
• Footage and images: the clips and images you upload, as you sent them. Filmklar's editing computer reviews them and writes a description, tags and, where people speak, a transcript. It also flags whether children under 18 may appear. We do not read GPS data in your files and do not pass it on.
• Plans and films: the plan for each film, film versions (watermarked until you approve), the finished films and your comments.
• Messages: what you write to us, our replies and the files you attach.
• Connected accounts: if you connect an account on Instagram, Facebook, YouTube, TikTok or Pinterest, we store the account id, name and username and an access token (OAuth). We never see your password for the platform. The token is encrypted at rest.
• Posts and numbers: the text, your per-platform choices, the time and the link to the post. 48 hours after a post we fetch numbers from the platform (views, comments, shares, followers), for your own accounts only.
• Payment: Stripe handles card payments. We do not store card numbers. We store invoices and what you bought.
• Log: what happened to each order, film and post, who did it and when.

Why, and the legal basis

• To make your films and provide the service: necessary for our contract with you (GDPR Art. 6(1)(b)).
• To keep the app secure and find faults: our legitimate interest (Art. 6(1)(f)).
• To follow the Danish Bookkeeping Act (Art. 6(1)(c)).

We do not use your data for advertising, we do not sell it and we do not use it to train AI models.

Where the data is, and who helps us

The app runs on our own server at Hetzner in Germany (EU). The database is there. These processors help us:

• Cloudflare: the network in front of the app. Cloudflare R2 (EU jurisdiction) stores your footage, small copies, images and films. Instagram, Facebook, TikTok and Pinterest fetch media from a public address, so a public copy of a post file sits briefly at media.filmklar.dk.
• Amazon Web Services (SES) in Sweden (EU) sends our emails.
• Stripe takes card payments.
• Anthropic (USA) receives 4 to 6 still frames from each clip and some measurements, so we can write a description and tags. Anthropic never receives the whole video, your name or your email. The transfer uses the EU Commission's standard contractual clauses.
• Filmklar's editing computer fetches the footage we need and puts the films back.
• Google Fonts serves the fonts on the page, so Google sees your IP address when the page opens.

Meta (Instagram, Facebook), Google (YouTube), TikTok and Pinterest are independent controllers for what they receive when you post. Once posted, it lives with them, not with us.

How long we keep it

• Footage, images and finished films: until deleted, by you in the Library or by us. We do not delete them automatically.
• Post files: 7 days after the post is out on all chosen channels. Failed or rejected posts keep the file 30 days. We keep a small cover image and the text.
• The public copy at media.filmklar.dk: deleted 48 hours after the post is out.
• Platform access tokens: deleted when you remove the account, when the platform revokes access, or when you delete your account with us.
• Login records: 30 days.
• Messages, films, posts and log: as long as you are a customer. Deleted within 30 days after you ask for deletion.
• Invoices: 5 years, as the Danish Bookkeeping Act requires.

Instagram and Facebook (Meta)

When posting is switched on for you, you can connect Instagram and Facebook. We use the Instagram API with Instagram Login and Facebook Login for Business. We ask permission to see the account and your Pages, to publish posts, to read them back and to read statistics for them. Meta's privacy policy: facebook.com/privacy/policy.

If you remove the app at Meta and ask for deletion there, Meta notifies us. We then disconnect the account and delete its access token at once. You get a confirmation code and a link to a status page.

Google and YouTube

Filmklar uses YouTube API Services. When you connect a YouTube channel we ask for three permissions: to upload videos to the channel, to view the channel (name, picture and numbers for the videos we posted), and to read YouTube Analytics for the same videos. We store the channel id and name, the ids of the videos we posted, the numbers from the 48-hour check and the access token (encrypted).

Filmklar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to give you the features in the app. We do not sell it, use it for advertising or show it to others. Nobody here reads it unless you asked Filmklar to post for you or the law requires it.

By using Filmklar with a YouTube channel you also agree to the YouTube Terms of Service. Google's privacy policy: policies.google.com/privacy. You can revoke our access at myaccount.google.com/permissions.

TikTok

We use TikTok Login Kit and the Content Posting API. We store your TikTok id, display name and the access token. Before each post we fetch your settings from TikTok. You choose who can see the post. TikTok's privacy policy: tiktok.com/legal/privacy-policy.

Pinterest

We use the Pinterest API v5. We store your Pinterest id, username, the board you chose and the access token. We do not store other people's pins or boards. Pinterest's privacy policy: policy.pinterest.com/privacy-policy.

AI

Films may be made with the help of AI, for example text, sound, images or editing. When a post is made with AI we switch on the platform's AI label. It is on by default.

Your rights

You can ask what we store about you, and have it corrected, deleted or handed over, and you can object. Write to hej@filmklar.dk. If you are unhappy with how we handle your data you can complain to the Danish Data Protection Agency, Datatilsynet.

Data deletion

You can have everything deleted:

• In the app: log in, open Indstillinger (Settings) and press "Slet vores konto og data" at the bottom. We are notified.
• Or write to hej@filmklar.dk from the email you signed up with.
• One account only: open Konti (Accounts), choose the account and press "Fjern" (Remove). The access token is deleted at once.

Deletion is not instant. We first check open orders and payments with you. Filmklar confirms and deletes within 30 days of your request: your account, footage, films, plans, messages, connected accounts and access tokens.

We keep invoices for 5 years. The Danish Bookkeeping Act requires it.

You can also remove the app at the platform itself. Our token then stops working. Full instructions, in English too, are on the data deletion page.

If you removed the app at Meta and pressed "Delete data" there, we receive a notice, disconnect the Instagram or Facebook account and delete its access token at once. Meta shows a confirmation code and a link where you can see the status.

Cookies

We use only the cookies the app needs: cf_session (your login, 30 days), cf_ml (protects the login link, 1 hour) and cf_oauth (10 minutes, while you connect an account). We use no cookies for analytics or advertising, so there is no cookie banner.

Changes

We may change this text. We tell you about larger changes before they apply. See also the terms.