GDPR Compliance

How we comply with the UK GDPR and EU GDPR, and how to exercise your rights.

Data controller

Project BiFrost is the data controller for personal data processed through the Project BiFrost After Effects plugin and dashboard. Contact: support@projectbifrost.app.

Lawful bases for processing

  • Contract — providing licences, downloads, and subscription features you signed up for.
  • Legitimate interest — protecting the Service from fraud and seat abuse.
  • Legal obligation — retaining payment records for accounting law.
  • Consent — where you have specifically opted in (currently, none of our email is marketing).

Your rights

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your data (subject to legal retention requirements).
  • Portability — receive your data in a machine-readable format.
  • Restriction — ask us to stop processing your data while a dispute is resolved.
  • Objection — object to processing based on legitimate interest.
  • Complaint — you may lodge a complaint with the UK ICO or your local supervisory authority.

How to exercise them

Email support@projectbifrost.app or open a ticket at /support. We respond within 30 days. We may ask you to verify your identity before actioning sensitive requests.

International transfers

Some sub-processors (Stripe, Lovable) may process data outside the UK/EEA. Where they do, we rely on the UK IDTA and EU Standard Contractual Clauses to protect your data.

Data breach notification

If a breach is likely to result in a high risk to your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

Data protection contact

For any data protection question — support@projectbifrost.app.