Draft for legal review. Placeholders in [brackets] are filled in before launch. This page is not indexed until then.
Privacy Policy
Last updated: [DATE]. Controller: [OPERATOR LEGAL NAME], [BUSINESS ID], [ADDRESS], Finland. Contact: hello@greatsprites.com.
What we collect
- Early access list: your email, and optionally your company and what you build. Used only to tell you when GreatSprites opens.
- Account: when you sign in with Google, the name, email address and account identifier Google shares with us (nothing else from your Google account); your workspace and team membership. A sign-in cookie keeps you signed in for 30 days.
- Content: the pictures you upload and the animations made from them.
- Billing: handled by our payment provider; we receive the plan, the amounts and the status, never your full card number.
- Technical: IP address and request logs for security and abuse prevention, kept for [N] days.
Why, and on what basis
- To provide the service you asked for (contract).
- To prevent abuse of free tests and keep the service secure (legitimate interest).
- To email you about early access or your account (consent, or contract for account notices).
- To meet accounting and tax duties (legal obligation).
Who processes it for us
Service providers for hosting, content delivery and protection, authentication and database, email, payments, and AI generation. They act on our instructions under data processing agreements. No account data is sent to AI generation providers. A current list of our processors is available on request, and to business customers in our data processing agreement.
Transfers outside the EEA
Some providers process data outside the European Economic Area. Where they do, we rely on appropriate safeguards such as the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
Early access emails until we open and for [N] months after, or until you unsubscribe. Account data while your account exists and [N] months after. Billing records as long as the law requires.
Your rights
Access, correction, deletion, restriction, objection, portability, and withdrawing consent at any time. You may complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Cookies
Only what is needed to sign you in and keep you signed in. [ANALYTICS: none at the time of writing; any future analytics only with consent.]