Privacy

This English version is provided for convenience. If it differs from the Swedish original, the Swedish version applies.

1. Who is responsible for your data?

E-handelsgruppen Sverige AB, Uppsala, Sweden ("we", "us") is the controller of the personal data processed in connection with DisplayFlow ("the service").

2. What data do we collect?

• Account data: name, email address, password (stored as a hash).
• Payment data: handled by Stripe. We only store your customer ID with Stripe, never card numbers.
• Usage data: screens, playlists, schedules and media files you create.
• Technical data: IP address, browser type and device information, for security and operations.

3. How do we process your data?

Your data is used to provide the service, handle payments via Stripe, monitor operations and security, and to communicate with you about your account.

4. Subprocessors

We use the following subprocessors to operate the service:

• Stripe — payment processing and invoicing. Processes card details and transaction data.
• Cloudflare — networking, CDN, DDoS protection and file storage (R2). Processes IP addresses and traffic data.

Both providers are processors under the GDPR and have data processing agreements with us. Your data may be transferred to these providers' servers inside or outside the EU/EEA.

5. Legal basis

We process your personal data on the basis of:

• Performance of a contract (to deliver the service you have ordered).
• Legal obligation (e.g. accounting legislation).
• Legitimate interest (security and operational monitoring).

6. Retention period

We store your data for as long as you have an active account. After account closure, personal data is deleted within 90 days, except for data that must be retained by law (e.g. accounting records).

7. Your rights

Under the GDPR, you have the right to:

• Access your personal data.
• Rectification of inaccurate data.
• Erasure ("the right to be forgotten").
• Restriction of processing.
• Data portability.
• Object to processing.
• Withdraw consent.

To exercise your rights, contact us at [email protected].

8. Contact us

Do you have questions about how we process your personal data? Send an email to [email protected].

Optional analytics on public pages

With your active consent, we use PostHog to count pageviews on allowed public pages. Analytics stays off before consent and after rejection or withdrawal. Open Cookie settings in the footer to change your choice.

We send a public path without query parameters or fragments and a new random event ID per pageview. We do not send form fields, account IDs, names, email addresses or referrer URLs. We do not use analytics cookies, persistent analytics IDs, person profiles, automatic click capture or recordings. The app, authentication, editor and player are not measured.

PostHog receives these events. A network request also allows the provider to process its connection IP address for delivery and security; we do not add IP addresses to event properties. Your consent choice is valid for 180 days. Withdrawal stops future collection but does not automatically delete previously received events. Contact us about analytics retention or deletion. See cookies and page analytics.