Privacy Policy

1. Introduction

NorwayClips ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at norwayclips.com.

This policy complies with the EU General Data Protection Regulation (GDPR) and Norwegian data protection laws.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly:

• Account Information: Name, email address, password (encrypted)
• Profile Information: Display name, bio, portfolio URL, social media links
• Payment Information: Payment method details (processed by Stripe), billing address, tax information
• Contributor Information: Business registration details, payout preferences, bank details
• Content Metadata: Video descriptions, tags, location data, technical specifications
• Communications: Messages sent to support, feedback, and correspondence

2.2 Information Automatically Collected

When you use NorwayClips, we automatically collect:

• Usage Data: Pages viewed, search queries, clips viewed/purchased, time spent on platform
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies, preference cookies, analytics cookies
• Performance Data: Download speeds, error reports, feature usage

2.3 Information from Third Parties

• Stripe: Payment processing and payout information
• Authentication Providers: If you sign in with third-party services
• Analytics Services: Aggregated usage statistics

3. How We Use Your Information

3.1 Providing Services

• Process purchases and deliver licensed content
• Manage your account and provide customer support
• Process contributor uploads and payouts
• Generate invoices and receipts
• Enforce license terms and prevent fraud

3.2 Communication

• Send order confirmations and receipts
• Notify you of account activity
• Send contributor earnings reports
• Respond to support inquiries
• Send marketing communications (with consent)
• Notify you of service updates or changes

3.3 Platform Improvement

• Analyze usage patterns to improve features
• Personalize content recommendations
• Conduct A/B testing and research
• Identify and fix technical issues
• Optimize search and discovery

3.4 Security and Compliance

• Detect and prevent fraud or abuse
• Verify contributor authenticity
• Enforce Terms of Service
• Comply with legal obligations
• Protect our rights and property

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide our services
• Consent: When you opt in to marketing or optional features
• Legitimate Interests: Platform improvement, fraud prevention, analytics
• Legal Obligation: Tax reporting, law enforcement requests

5. How We Share Your Information

5.1 Public Information

The following may be publicly visible:

• Contributor display names and profiles
• Public collections and portfolios
• Reviews and ratings (if you choose to leave them)
• Video metadata and thumbnails

5.2 Service Providers

We share data with trusted service providers:

• Stripe: Payment processing and payouts
• AWS S3: Video storage and delivery
• Supabase: Database and authentication
• Resend: Transactional email delivery
• Analytics Providers: Usage statistics (anonymized)

5.3 Business Transfers

If NorwayClips is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

5.4 Legal Requirements

We may disclose information when required to:

• Comply with legal obligations or court orders
• Respond to law enforcement requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activity
• Enforce our Terms of Service

5.5 With Your Consent

We may share information for other purposes with your explicit consent.

6. Data Retention

We retain personal data for as long as necessary to provide services and fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active, plus 1 year after deletion
• Purchase Records: 7 years for tax and accounting purposes
• Contributor Earnings: 7 years for financial records
• Support Communications: 3 years for service improvement
• Analytics Data: Aggregated data retained indefinitely (anonymized)

7. Your Rights (GDPR & Privacy)

You have the following rights regarding your personal data:

7.1 Access

Right to access your personal data and receive a copy in a portable format.

7.2 Rectification

Right to correct inaccurate or incomplete personal data.

7.3 Erasure (Right to be Forgotten)

Right to request deletion of your personal data, subject to legal retention requirements.

7.4 Restriction

Right to restrict processing of your personal data in certain circumstances.

7.5 Data Portability

Right to receive your data in a structured, machine-readable format.

7.6 Objection

Right to object to processing based on legitimate interests or for direct marketing.

7.7 Withdraw Consent

Right to withdraw consent at any time (does not affect lawfulness of prior processing).

7.8 Lodge a Complaint

Right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

To exercise these rights, contact us at privacy@norwayclips.com. We will respond within 30 days.

8. Cookies and Tracking

8.1 Types of Cookies

• Essential Cookies: Required for authentication and security (cannot be disabled)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use our platform
• Marketing Cookies: Used to deliver relevant ads (opt-in only)

8.2 Cookie Management

You can control cookies through your browser settings. Disabling certain cookies may limit platform functionality.

8.3 Do Not Track

We respect Do Not Track (DNT) signals. When DNT is enabled, we disable non-essential tracking.

9. Data Security

We implement industry-standard security measures:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with hashed passwords
• Regular security audits and penetration testing
• Access controls and role-based permissions
• Automated backup and disaster recovery
• Employee training on data protection

However, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

10. International Data Transfers

Your data may be transferred to and processed in countries outside Norway and the EU. When we transfer data internationally, we ensure adequate safeguards through:

• Standard Contractual Clauses (SCCs) approved by the EU
• Data processing agreements with service providers
• Adequacy decisions by the European Commission

11. Children's Privacy

NorwayClips is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 16, please contact us immediately at privacy@norwayclips.com.

12. Marketing Communications

With your consent, we may send marketing emails about new features, clips, and promotions. You can:

• Opt out via the unsubscribe link in any marketing email
• Manage preferences in your account settings
• Contact us at support@norwayclips.com

Note: Transactional emails (order confirmations, account security) cannot be unsubscribed from.

13. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. We will notify you of significant changes via:

• Email to your registered address
• Prominent notice on the platform
• Update to the "Last updated" date at the top

Continued use after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions, concerns, or to exercise your privacy rights, contact us:

• Email: privacy@norwayclips.com
• Data Protection Officer: dpo@norwayclips.com
• Support: support@norwayclips.com
• Address: NorwayClips AS, Oslo, Norway

16. Supervisory Authority

Norwegian Data Protection Authority (Datatilsynet)
Website: www.datatilsynet.no
Email: postkasse@datatilsynet.no
Phone: +47 22 39 69 00