GDPR Compliance

Data controller

Project Bifrost is the data controller for personal data processed through the Project Bifrost After Effects plugin and dashboard. Contact us via /support.

Lawful bases for processing

• Contract — providing licences, downloads, and subscription features you signed up for.
• Legitimate interest — protecting the Service from fraud and seat abuse.
• Legal obligation — retaining payment records for accounting law.
• Consent — where you have specifically opted in (currently, none of our email is marketing).

Your rights

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (subject to legal retention requirements).
• Portability — receive your data in a machine-readable format.
• Restriction — ask us to stop processing your data while a dispute is resolved.
• Objection — object to processing based on legitimate interest.
• Complaint — you may lodge a complaint with the UK ICO or your local supervisory authority.

How to exercise them

Open a ticket at /support. We respond within 30 days. We may ask you to verify your identity before actioning sensitive requests.

International transfers

Some sub-processors (Stripe, Lovable) may process data outside the UK/EEA. Where they do, we rely on the UK IDTA and EU Standard Contractual Clauses to protect your data.

Data breach notification

If a breach is likely to result in a high risk to your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

Data protection contact

For any data protection question — open a ticket at /support.