01Who is responsible
Nordkod Media AB (Sweden) is the data controller for your account and billing data. For the footage and other content you upload, we process personal data (for example the faces and voices in your videos) on your behalf, to make your edits. Contact us at the contact details at nordkod.io.
02What we collect
- Account data: your email address, name if you give one, and a hashed password. We never store your password in readable form.
- Your content: the videos, audio, images, documents and brand material you upload, and what Skarv makes from them: transcripts, edit timelines, renders, captions and post copy.
- Billing data: your plan, credit balance and invoices. Card details go straight to Stripe; we never see the full card number.
- Security data: sign-in sessions, a one-way hash of your IP address and your browser type, used to keep accounts safe and prevent abuse of the free trial.
- Messages you send us.
03Why we use it
- To run Skarv for you: sign in, edit, render, deliver and bill (performance of our contract with you).
- To keep Skarv secure and prevent fraud and abuse (our legitimate interest).
- To keep accounting records the law requires (legal obligation).
- To email you about your account and your films, for example when a render is ready. We do not send marketing email without your consent.
04Who processes it
We use service providers that process data only on our instructions, under data processing agreements:
- Hosting and compute: Vercel.
- Database: Supabase, in the EU (Stockholm region).
- File storage: Cloudflare R2 (EU) or Vercel Blob.
- Payments and tax: Stripe.
- Media and AI processing, depending on the Surge level and add-ons you choose: speech recognition (such as ElevenLabs and AssemblyAI), voice enhancement (such as ElevenLabs and Auphonic), the edit planner (Anthropic’s Claude models), video analysis (such as Google Gemini), and background, relighting, B-roll and music models (such as fal.ai and Stability AI). Only the parts of your content a step needs are sent, for that step only.
Some providers are outside the EU/EEA. Transfers are covered by the EU Standard Contractual Clauses or an adequacy decision. We do not sell your data, and we do not use your footage to train AI models.
05How long we keep it
- Original uploads are deleted 7 days after Skarv has processed them. A compressed working copy is kept for 30 days after your last edit, so you can keep editing.
- Finished renders stay available for 90 days on paid plans and 7 days on the free trial.
- Projects you delete, and everything in them, are purged within 30 days. Closing your account does the same for all of it.
- Job logs are kept for 30 days. Invoices are kept as long as accounting law requires (7 years in Sweden).
07Your rights
You can access, correct, export or delete your data, object to processing based on our legitimate interest, and restrict processing. Most of this you can do yourself in your account; for the rest, contact us at the contact details at nordkod.io. You may also complain to the Swedish Authority for Privacy Protection (IMY) or the data protection authority where you live.
08Security
Data is encrypted in transit, files are stored privately and reached only through short-lived signed links, and provider keys are encrypted at rest. Access inside Nordkod is limited to the people who need it to run Skarv.
09Changes
We will update this page when our processing changes, and email you before changes that matter. See also the terms of service.
Skarv is operated by Nordkod Media AB, Sweden. Questions about this page: the contact details at nordkod.io.