Privacy policy

Manual to Video turns assembly manuals into animated assembly films. This policy explains what personal data we handle, why, who helps us, how long we keep it, and what you can ask us to do. It follows the EU General Data Protection Regulation (GDPR) as it applies in Norway through the Personal Data Act (personopplysningsloven).

Who is responsible

The data controller is NorwAI AS (org. no. 920 631 908 MVA), Oslo, Norway. Manual to Video is a service of NorwAI AS. Write to sondre@norwai.as with "privacy" in the subject line for anything in this policy.

What we collect

• Account data: your email address, and your name and profile picture if you sign in with Google. We never see or store a Google password.
• What you send us: manuals (PDFs, images or links), product names, your website address if you give it (we read public colours, fonts and logo from it to match your brand), brand files, and notes or change requests.
• Films and orders: the previews and films we make, the order history, and messages about them.
• Payment data: when paid orders open, payments are handled by Stripe. We receive the payment status, amount, and your billing name, address and VAT number if you give them. We never receive full card numbers.
• Security data: your IP address, a random device id (the mtv_device cookie), and the email domain of each preview order, used to enforce the free-preview limit and to stop abuse.
• Usage data: our own cookieless page-view count (page, referring site, device type, language, country, and a visitor key that changes every day and cannot be traced back), and session analytics from Microsoft Clarity, described below.

Please do not put personal data about other people into manuals or notes. Assembly manuals rarely need any.

Purposes and legal bases

• Making and delivering films, running your account, taking payment and answering you: to perform our contract with you (GDPR art. 6(1)(b)).
• Preventing abuse of the free preview, keeping the service secure, and checking uploads for harmful files: our legitimate interest in a safe service that is not misused (art. 6(1)(f)).
• Understanding how the website is used so we can improve it (page counts and Clarity): our legitimate interest in a website that works (art. 6(1)(f)). Where the law requires consent for cookies, see session analytics and cookies.
• Keeping accounting records: a legal obligation under the Norwegian Bookkeeping Act (art. 6(1)(c)).
• Emails about your films and account: part of the contract. We send no newsletters or marketing unless you ask for them.

Films are made with AI. We do not make decisions about you with legal or similarly significant effects by automated means. An automatic check declines a risky upload straight away and asks for a clean copy; a person decides on any block of an account.

Session analytics (Microsoft Clarity)

We use Microsoft Clarity to see how people use the website and, during our beta, the signed-in app: where they click, how far they scroll, and where they get stuck. Clarity records these interactions as session replays and heatmaps. In the signed-in app a recording is linked to your account's internal number (never your email), so we can see where a customer got stuck and fix it. It is set to mask text you type into fields, and it never reads the manuals or films you upload. Clarity sets cookies (listed below) and sends the data to Microsoft, which acts as our processor for Clarity and may process it in the United States. Microsoft's own terms and privacy statement apply to cookies it sets on its own domains.

We have not added a cookie banner yet. You can switch Clarity off for this browser here at any time. You can also block cookies from clarity.ms in your browser settings, use a tracker blocker, or ask us to delete recorded sessions linked to you.

Who processes data for us

These providers process personal data only on our instructions, under data processing agreements:

• Railway: application servers and databases (EU region).
• Cloudflare R2: storage for manuals, brand files and films.
• Vercel: delivery of the website pages.
• Resend: sending sign-in codes and emails about your films.
• Google: sign-in, only if you choose "Sign in with Google".
• Stripe: payments, when paid orders open. Stripe is independently responsible for some data under its own rules on fraud and financial regulation.
• Microsoft Clarity: session analytics, as described above.
• AI model providers used by our film engine to read the manual and plan the film. They process the manual content only to return a result to us.

The film engine itself is run by NorwAI AS on the providers above. We share data with authorities only when the law requires it.

Transfers outside the EEA

Some providers are based in, or have support staff in, the United States. Where personal data leaves the EEA, the transfer relies on the EU-U.S. Data Privacy Framework for certified providers, or on the European Commission's standard contractual clauses. Ask us for details of the safeguard for a given provider.

How long we keep it

• Sign-in codes: minutes, until used or expired. Sessions: up to 30 days, or until you sign out.
• Account, manuals, brand files and films: while your account is active, so you can find and download them again. Ask us, and we delete them; backups roll over within 30 days.
• Security records (IP address, device id, preview limits): as long as needed to prevent abuse of the free preview, and no longer than 24 months. Short rate-limit counters are deleted within 7 days.
• Our own page-view counts: without cookies; the daily key cannot be traced back once the day is over.
• Clarity recordings: kept by Microsoft for the period Clarity sets for recordings and heatmaps (recordings are short-lived; aggregate heatmaps last longer).
• Accounting records: as long as Norwegian bookkeeping law requires, currently up to five years.

Your rights

You can ask for access to your data and a copy of it, and ask us to correct it, delete it, restrict its use or move it to another service (data portability). Where we rely on legitimate interest, you can object, and we then stop unless we have compelling reasons. Where we rely on consent, you can withdraw it at any time. Write to sondre@norwai.as. We answer within one month.

You also have the right to complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or to the authority where you live in the EEA. We would be glad to try to fix things with you first.

Cookies

Cookies are small files a website stores in your browser. We use the ones needed to sign you in and to protect the free preview, and Microsoft Clarity's cookies for session analytics. We use no advertising cookies.

The website also uses your browser's local storage for small conveniences, such as remembering an upload in progress and your analytics choice above. That data stays on your device.

Changes to this policy

If we change how we use personal data, we update this page and the date at the top. If the change matters for you, we tell you by email before it takes effect.