Privacy notice

Who we are

LivePictureAI AB (org.nr 559529-3753, Nävervägen 8, 531 74 Källby, Sweden) is the controller for the personal data processed in the LivePictureAI Partner Portal.

The portal is where our reseller and distribution partners sign their agreements, register deals, order material packages and manage their team's access. It is used by business contacts at partner companies, not by consumers.

Account data

To give you access we process the details of your portal account. We use them to sign you in, keep your account secure and show you what your role allows. The legal basis is the performance of our agreement with your organization.

• Name and work email address.
• Your organization and your role in the portal (for example admin, signatory or sales).
• Sign-in provider identifiers when you sign in with Microsoft or Google (account and tenant identifiers).
• Two-factor authentication: an encrypted authenticator (TOTP) secret and hashed recovery codes.
• Sign-in and session records, including IP address and browser user agent.

Contract evidence

When your organization signs the Non-Disclosure Agreement or the Commercial Reseller Agreement in the portal, we keep the signed documents and the signature records: the signer's name and title, the time of signing, a fingerprint of the signed document, and the IP address and user agent used.

We keep this evidence for 10 years after the later of the agreements ends, because it may be needed to establish or defend legal rights. It is stored so that it cannot be altered.

Deal registrations

When you register a deal you share details about the end customer, including the name, title, email and phone number of their contact person. We process this as business-to-business sales data on the basis of our legitimate interest in managing our partner channel.

End-customer contact details are kept while the registration is active and for 24 months after it closes. After that the contact's name and email are anonymized; company details are kept.

CRM synchronization (Attio)

We use Attio as our customer relationship management system. Partner organization details, partner contacts and deal registrations are mirrored to Attio so our team can follow up on partnerships and deals. Attio processes this data on our behalf.

Where your data is stored

The portal, its database and its files are hosted by Microsoft Azure in the Sweden Central region, inside the EU. Emails from the portal are sent through Azure Communication Services.

When you sign in with Microsoft or Google, that provider confirms your identity to us under its own privacy terms.

How long we keep data

• Contract evidence (signed agreements and signature records): 10 years.
• End-customer contact details in deal registrations: anonymized 24 months after the registration closes.
• Application logs: 90 days.
• Rate-limit records used to protect sign-in and other endpoints: 24 hours.
• Audit and download logs: IP address and user agent are removed after 24 months. When your membership ends, your user identifier in these logs is replaced with a pseudonym.
• Sessions are deleted when they expire.

When a partnership ends

If the partnership with your organization ends, all of its portal accounts are disabled and sessions and two-factor credentials are deleted. Within 10 days we send your organization a written deletion report describing what was removed and what was kept.

Contract evidence and audit records are kept for the periods above, as records reasonably necessary to establish or defend legal rights.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you and receive a copy.
• Have inaccurate data rectified.
• Have your data erased, where we no longer have a reason to keep it.
• Restrict our processing of your data.
• Object to processing based on our legitimate interest.
• Data portability: receive your data in a structured, machine-readable format.
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Contact

For questions about this notice or to exercise your rights, email privacy@livepicture.ai.