Privacy Policy
Last updated: 2026-02-18
HD Memories is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller is HD Memories, based in Helsinki, Finland. You can reach us at [email protected].
2. Data We Collect
Account Data
Email address and encrypted password, required to create and manage your account.
Video Content
Video files you upload for processing, along with extracted technical metadata (resolution, codec, frame rate, duration).
Billing Data
Payment information is processed directly by Stripe. We store only transaction references, not credit card details.
Usage Data
Session analytics (if consented to), processing metrics, and system logs necessary for service operation.
3. Purpose of Processing
We process your data for the following purposes:
- Providing the video restoration service you requested.
- Processing payments and generating invoices.
- Sending transactional emails (processing notifications, file expiration reminders).
- Improving service quality through aggregated, anonymized performance metrics.
4. Legal Basis
We process your data based on:
- Contract performance — to provide the service you signed up for.
- Legitimate interest — to maintain security and improve the service.
- Consent — for optional analytics cookies.
5. Data Retention
- Video files: 90 days from processing completion, then permanently deleted.
- Account data: Retained until you delete your account.
- Invoices and billing records: Retained for 7 years as required by Finnish accounting law.
- System logs: Retained for 30 days for debugging purposes.
6. Third-Party Processors
We use the following third-party services to operate:
Stripe
Payment processing. Stripe's privacy policy applies to payment data.
Resend
Transactional email delivery (processing notifications, invoices).
We do not sell, share, or transfer your personal data to any other third parties.
7. Your GDPR Rights
As an EU resident, you have the right to:
- Access — Request a copy of all personal data we hold about you.
- Rectification — Correct inaccurate personal data.
- Erasure — Request deletion of your account and all associated data.
- Portability — Receive your data in a machine-readable format.
- Objection — Object to processing based on legitimate interest.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Cookies
We use essential cookies required for the service to function (authentication, preferences). Optional analytics cookies are only activated with your explicit consent via our cookie banner.
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure authentication, and isolated file storage per user.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email. The "Last updated" date at the top of this page indicates when the policy was last revised.
11. Contact
For privacy-related inquiries or to exercise your rights, contact our Data Protection contact at [email protected].