Data Protection & GDPR

Glinded, Inc. is the data controller for the personal information you provide when you use Glinded. We take data protection seriously, especially because the memories you entrust to us are personal and often irreplaceable. This page summarizes how we approach the EU General Data Protection Regulation (GDPR) and UK GDPR. It supplements, and should be read together with, our Privacy Policy.

Our compliance posture

We have conducted a Data Protection Impact Assessment (DPIA) covering our AI-assisted video composition, maintain Records of Processing Activities under Article 30, keep a Data Transfer Impact Assessment for our vendors, and operate an internal information security policy with a breach-response procedure. We apply data-protection-by-design principles: we collect only what we need to compose your video, we never use your uploaded content to train our own models, and we do not sell your personal information.

Lawful bases

We process your account information to provide the Service (contract), the photos, videos, and audio you upload on the basis of your consent, payment records to meet legal obligations, and limited security and aggregate-analytics data on the basis of our legitimate interests. You can withdraw consent at any time by deleting the relevant content or your account.

Sub-processors

We rely on a small set of vetted service providers to operate Glinded. Each is bound by a data processing agreement and, where it processes data outside the EEA, by an appropriate transfer mechanism.

When you use Glinded inside a third-party AI assistant (such as ChatGPT), that platform is the service you have chosen and handles your conversation under its own privacy policy; it is not our sub-processor. We explain this data flow in detail in Sections IV and V of our Privacy Policy.

International data transfers

Glinded is based in the United States, and most of our infrastructure runs there. Where your personal data is transferred outside the European Economic Area, the UK, or Switzerland, that transfer is covered by the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) for certified providers, or by the European Commission's Standard Contractual Clauses (2021/914) together with the UK Addendum. Our live-chat provider is hosted in the EU.

Your rights

If you are in the EEA or the UK, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. You can:

• Delete individual assets or whole projects from within the product.
• Delete your entire account from your account, which erases your account data and projects.
• Request a copy of your data, a correction, or any other right by emailing help@glinded.com. We aim to respond within one month.

You also have the right to lodge a complaint with your local supervisory authority.

Cookies

We use only strictly-necessary cookies (to keep you signed in) by default; our usage analytics are cookieless. The live-chat support widget sets optional cookies and is loaded only after you accept it in our cookie banner. You can change or withdraw your choice at any time via the “Cookie preferences” link in the footer.

Contact

For any data-protection question or to exercise your rights, contact us at help@glinded.com.