Privacy notice

Who is responsible

SJ1 ehf., registered in Iceland and trading as VideoConsistency, is the data controller for personal data collected through videoconsistency.com. Questions and requests go to sindri@johannsson.io.

What we collect and why

• Email address and sign-in data. To create your account and send sign-in links. Legal basis: performing our contract with you.
• Videos you upload, reports and fixed shots. To run the analysis and fixes you ask for. Legal basis: contract.
• Plan, credit balance and purchase records. To know what you have paid for and to keep accounts. Legal basis: contract and legal obligation.
• Usage data such as pages visited, time spent on pages while signed in, runs started, IP address and browser details. To keep the service secure, stop abuse and improve it. Legal basis: legitimate interests.
• Messages you send us. To answer you. Legal basis: legitimate interests.

We do not sell personal data, and we do not use your videos to train models or for advertising.

Who we share it with

• Hosting, database and file storage providers that run the site.
• AI model providers that read your video to make the report, and render a shot when you ask for a fix. They get the video, not your account details.
• Paddle.com, our Merchant of Record, for selling plans and credits, managing subscriptions, payments, tax and invoices. Paddle collects payment details directly under its own privacy notice.
• Professional advisers such as lawyers and accountants, when needed.
• Authorities, when the law requires it.

International transfers

Some of these providers process data outside the EEA, for example in the United States. When that happens we rely on adequacy decisions or the European Commission's Standard Contractual Clauses.

How long we keep it

Videos and reports are kept while your account is open, or until you delete the run. Account data is deleted within 30 days of closing your account. Purchase records are kept as long as Icelandic accounting law requires, currently seven years. Usage data is deleted or anonymised after 12 months.

Your rights

Under the GDPR, as applied in Iceland, you can ask to see your data, correct it, delete it, restrict or object to how we use it, get a copy to take elsewhere, and withdraw consent where we rely on it. Email sindri@johannsson.io and we will reply within one month. You can also complain to the Icelandic Data Protection Authority (Persónuvernd, personuvernd.is) or the authority where you live.

Security

Data is encrypted in transit, videos are stored in private storage and shared only through short-lived links, and access is limited to what each part of the service needs.

Cookies and local storage

We only use what the site needs to work: browser storage that keeps you signed in and remembers unfinished uploads, and the cookies Paddle sets during checkout. We do not use advertising cookies. You can clear these in your browser settings, which signs you out.

Changes

If we change this notice in a way that matters, we will say so on the site or by email.