promovilo

Privacy policy

Last updated 5 October 2026

Muuh AS (organisation number 998 153 344), Sukkevannslia 4, 4638 Kristiansand, Norway, runs Promovilo and is responsible for the personal data described here. Questions and requests go to [email protected].

What we collect, and why

  • Your account: your email address; your name, if you give it to us or at checkout; a password, if you set one (stored only as a secure hash); and security settings such as two-factor authentication and passkeys. We need them to give you an account, to email you sign-in links and to email you about your films.
  • Your briefs and films: the product details, website address, descriptions, wishes and logos you give us, and the films, versions and feedback made from them. We need them to make your films.
  • Purchases: what you bought, when and for how much. Your card details go straight to Stripe; we never see them.
  • Use of the service: how many previews and changes you have made, and technical logs such as your IP address, the pages you open and errors. We use them to apply the free limits, prevent abuse and keep Promovilo running.

We process this data to deliver the service you signed up for (the contract with you), to meet legal duties, and in our legitimate interest in preventing abuse and keeping the service secure. We do not sell your data, show ads or use tracking cookies.

Who we share it with

We use these companies to run Promovilo. They process data on our behalf, except where noted:

  • Anthropic (AI that writes and designs your films): your brief and the content of your website. They do not use it to train their models, and delete it within 30 days, except content their safety systems flag, which they may keep for up to two years.
  • Laravel Cloud (hosting of the app and database).
  • Laravel Nightwatch (monitoring errors and performance): technical logs of what happens in the app, with your IP address, user ID, name and email address.
  • Fly.io and Tigris (rendering films and storing logos, images and MP4 files).
  • Cloudflare (sending our emails to you, and Turnstile, the check at sign-up that you are a person). For Turnstile, Cloudflare processes your IP address and browser details, and also uses them, as a controller, to improve its bot detection.

Stripe handles payments as merchant of record and is responsible for the payment data it collects under its own privacy policy.

Some of these companies are based in the United States. Data sent there is protected by the EU Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep it

  • Your account, briefs and films are kept until you delete them or your account.
  • An MP4 replaced by a newer one is deleted after 7 days; the newest MP4 of each film stays available.
  • Technical logs in Laravel Nightwatch are deleted after 90 days.
  • When you delete your account, we delete it with your briefs, films and purchase history, and the files you made in storage. Copies in backups are removed within 30 days.

Cookies

We only use the cookies Promovilo needs to work, so we do not ask for consent: promovilo-session keeps you signed in, and XSRF-TOKEN protects forms against forgery. Cloudflare Turnstile may use similar strictly necessary technical means on the sign-up page to tell people from bots.

Your rights

You can ask to see the data we hold about you, have it corrected or deleted, get a copy to take elsewhere, or object to or limit how we use it. Most of it you can change or delete yourself in the app; for the rest, email us. If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority (Datatilsynet), or to the authority where you live.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before it takes effect.