Who is responsible
Optiflode Studio operates SavedSense and is the data controller for the processing described in this policy.
Privacy questions and requests can be sent to studio@optiflode.se.
Personal data we handle
Public website
Hosting and security systems may process request data such as IP address, browser information, requested page, timestamp, and diagnostic records. If you accept analytics, Google Analytics also processes online identifiers and information about public pages and selected interactions.
We do not send Saved Posts, account details, private search terms, Library Questions, URL query strings, or URL fragments to Google Analytics.
Private application
For approved accounts, we process account and authentication data. We also process the material you ask SavedSense to store or enrich, including Saved Post permalinks, Instagram Exports, Source Media, captions, Transcripts, Analysis, Embeddings, Library Questions, Grounded Library Answers, and Processing Jobs.
Messages
If you contact us, we process your contact details and the content of your message so we can respond.
Why we use personal data
- To provide the account and SavedSense functions you request. The legal basis is performance of a contract or steps requested before entering one.
- To keep the service reliable, diagnose failures, prevent abuse, and protect accounts. The legal basis is our legitimate interest in operating a secure service, balanced against your rights.
- To measure public website use only after you accept analytics. The legal basis is your consent, which you can withdraw at any time.
- To answer messages and privacy requests. The legal basis depends on the request: steps toward a contract, legal obligation, or our legitimate interest in communicating with you.
- To meet applicable legal obligations and establish or defend legal claims when necessary.
Service providers
We use service providers to run SavedSense. They process personal data for the purposes below under their terms and data-protection commitments.
- Vercel: Website and application hosting, delivery, and security logging.
- Supabase: Authentication, database, and file storage for the private application.
- Microsoft Azure OpenAI: Transcription, Analysis, Embeddings, and Grounded Library Answers requested in the private application.
- Google Analytics: Optional measurement of visits and selected interactions on the public website.
We may also disclose information when required by law or when necessary to protect legal rights, users, or the service. We do not sell personal data.
Transfers outside the EEA
Our providers may process data in countries outside the European Economic Area. Where a transfer is not covered by an adequacy decision, we use the safeguards made available by the relevant provider, such as the European Commission's Standard Contractual Clauses, where applicable. Contact us if you want information about the safeguards relevant to your data.
How long we keep data
- Your analytics choice is stored for 6 months, unless you change it earlier.
- Google Analytics event and user-level data is configured for 2 months.
- Account and library content is kept while your approved account or service relationship remains active, unless you ask us to delete it earlier or a longer period is needed for a legal obligation or claim.
- Security, diagnostic, and backup records are kept only as long as needed for the purpose and then deleted or allowed to expire under operational schedules.
- Messages are kept as long as needed to resolve the matter and document any action we must take.
Your rights
Depending on the circumstances, you may ask for access to your personal data, correction, deletion, restriction, or portability. You may object to processing based on legitimate interests. If processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing.
Use the permanent Cookie settings control to change analytics consent, or email us for any other request. We may need to verify your identity.
Questions and complaints
Contact studio@optiflode.se first if you would like us to investigate a concern.
You also have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or the supervisory authority where you live or work. Visit IMY's complaint guidance.
Cookies and changes
The Cookie Policy lists browser storage used by SavedSense. We may update this policy when the service or legal requirements change. The date at the top shows the current version; material changes will be communicated in an appropriate way.