Privacy policy

Version 2.10. Last updated: September 11, 2026.

AlvarCreations, a sole proprietorship registered in Sweden ("we", "us"), is the data controller for the personal data described in this policy. It applies to alvarcreations.com, the Alvar Suite panel for Adobe After Effects, any other product or service we offer, and purchases of any of them. Our registered name, postal address and organisation number are stated on every invoice we issue and are provided on request; all data protection enquiries should be addressed to info@alvarcreations.com.

In summary: we process personal data to run the Service, to keep it secure, and to make it better, and no more widely than those purposes need; we do not sell personal data; and material submitted to the AI features is transmitted solely upon your invocation of the feature concerned.

Categories of personal data processed

  • Account data. Your email address, the date the account was created, and the date of last sign-in. No password exists; one-time sign-in codes are stored only as hashes. A device identifier is retained for each device you sign in on, which is necessary to enforce the two-device limit. In the panel this identifier is a hash derived from the machine; on the website it is a random value generated in your browser, and in neither case does it identify you personally.
  • Purchase data. Payment is processed by Stripe. Card details are never transmitted to or stored on our systems; we receive the card brand and last four digits, your email address, the items purchased, and the billing country. Checkout requires you to tick a box accepting the policies that form the contract, and we record the exact wording you accepted, the time, and the transaction it relates to, as evidence for both parties. For purchases made through our previous store we also keep the item bought, the time, and the town or region of the buyer, which is what the recent-purchases notice on the site draws on; no email address or name is attached to it. If you choose to give us an optional contact handle when you buy (such as a Discord username), we store it so we can reach you about support and membership; it is optional, and you can ask us to remove it at any time. Separately, if you choose to link your Discord account so that your community role reflects your plan, we store the Discord account identifier alongside your account and tell Discord which linked accounts currently hold an active subscription, which is what keeps the role accurate. Linking is entirely optional and you can unlink at any time.
  • How you use the Service. So that we can see what is working and what to build next, we keep a record of significant events in your use of the panel and the website, tied to your account or to a device identifier. These include when you sign in, which presets and features you open and use, the order and frequency of that use, when you reach a plan limit or a credit ceiling, and when you come across a feature your current plan does not include. We use this to prioritise what we improve, to compare different versions of a feature, and to judge which of our features, plans or offers are likely to be genuinely relevant to you, so that anything we send is worth reading rather than generic.
  • AI usage data. Metering records identifying the feature invoked, the quantity of material processed, and the time, associated with a pseudonymous account identifier. These records determine credit consumption and therefore constitute billing records.
  • Support and chat data. Correspondence you send us, and conversations with the website chat assistant, which are stored to improve responses and to enable follow-up where you request it. An email address is recorded only if you provide one. Where a message is flagged as suspicious, a short extract of it is kept with the flag so that we can tell a real problem from a false alarm.
  • Technical request data. Keeping the Service available to everyone means being able to tell ordinary use from automated abuse. Our servers therefore record the IP address a request came from, together with the function called and the time, for every request to the parts of the Service that carry a rate limit, and on each licence activation and check. This is counting rather than watching: the records exist to enforce limits and to investigate abuse, they are kept only as long as that needs, and they are never used to build a picture of you. For downloads under our older store links, the address is stored as a salted hash rather than in the clear.
  • Affiliate program data. We run an affiliate program that people apply to and that we approve by hand. If you buy with an affiliate's code, or through an affiliate's link, we record which affiliate's code you used and, for the twelve months after that, the amounts you pay, so that we can work out that affiliate's commission. The affiliate sees only totals and dates, such as how many customers used their code and what they earned, and never your name, your email address or anything else that identifies you. If you apply to the affiliate program, we keep your application: your name, the social profiles you give us (Instagram, YouTube or TikTok), and the fact that you accepted the Affiliate Program Terms and this policy, which is also how you confirm you are old enough to take part. For each affiliate in the program we hold their name, their code, their account, any contact details, a scrambled copy of their private dashboard link if they have one, the payments their customers made, and a record of the commission paid to them. When an affiliate asks to be paid, the bank details they enter are encrypted on their own device before they are sent, so that only we can read them, and they are deleted as soon as the payment is made, or after 60 days if it is not.
  • Email engagement. For the email we send you, we keep a record of what was sent and whether it was delivered, opened, or a link in it was followed. This is how we tell a useful message from an unwelcome one and send fewer of the latter.
  • Diagnostic data (only if you agree). The first time you open the panel it asks whether it may send diagnostics, and no diagnostic report or open-panel message is sent until you answer. (The panel separately checks for updates and account offers when it starts; those checks carry no error details or file information and are not affected by this choice.) If you agree, then on a failure the panel transmits a report containing an error code, a short technical description of what failed, which feature was involved, your After Effects and operating system versions, the panel version, and hashed identifiers. A short reference number is included so you can quote it to us. It contains no files, file names, project contents, or email address. Because the hashed identifiers are the same scrambled account and device references already used to run your licence, a report can be linked to your account; it is pseudonymous, not anonymous. You can withdraw your agreement at any time with the Send diagnostics switch in the panel's Account tab, which stops all sending immediately. The panel works identically either way.
  • While the panel is open (only if you agree). Under the same agreement, while the panel is open and you are signed in it sends a short message every three minutes to say it is still running: your account, the panel version, and the time. We use this to see how many people have the panel open right now, roughly how many accounts use it over a day, how long a working session lasts, and which panel versions are in use, so that we can tell whether a release is healthy. It carries no IP address, no project or file names, and nothing about what you are working on. We keep only the current session, one row per account, and never a history of when you had the panel open.

Processing of audiovisual material submitted by you

The AI features operate on material you select. No material is transmitted until you invoke the feature concerned. When you do:

  • Auto Captions sends the composition's audio to ElevenLabs for speech-to-text. The resulting text transcript is then sent to Anthropic, which decides where captions should break and which phrases must be kept together. Where you additionally enable Smart Emphasis, a second analysis pass is sent to Anthropic to choose styling. No audio is sent to Anthropic, only text.
  • Dialogue Isolation sends the audio to ElevenLabs and returns the cleaned track directly.
  • Sound Effects sends only your text description to ElevenLabs.
  • AlvarAI, the assistant, sends what you type together with a short description of the composition you have open, so that it can answer usefully. That description lists the names, types and timings of your layers and compositions. It contains no media: no video, no audio and no images are sent to Anthropic at any point.
  • Auto Tracker and Scene switch detection send the video clip to our own model hosted at Replicate, where inputs and outputs are automatically deleted within one hour.

Improving the assistant. Conversations with AlvarAI are kept so that we can find the things it gets wrong and put them right. In an early product this is how it improves: a request it misunderstood, or a tool it reached for incorrectly, is only visible in the exchange itself. Conversations are reviewed for that purpose alone. They are never used for advertising and never sold or shared, and no provider trains a model on them. Were we ever to want to use them to improve our own assistant, we would ask for your agreement first. Where you rate an answer with the thumbs beneath it, that rating and any comment you add are kept with the exchange, because a rating is the clearest signal we receive.

You decide whether this happens. The setting sits in the panel, in the Account tab, under Keep my AlvarAI conversations. It is on to begin with, and turning it off stops conversations being kept from that moment on; AlvarAI carries on working exactly as before. You can also ask us to turn it off, or to delete what has already been kept, by writing to the address at the end of this policy, and we will do it.

This is separate from the plugin's Send diagnostics switch, which covers only the error reports described above under Diagnostic data and never contains your work.

We keep no copy of your media. It passes through our servers to the provider that performs the feature, the result comes back to you, and all we keep is the metering record described above. The providers hold it briefly on their own side in order to do the work: Replicate deletes the inputs and outputs of a prediction within one hour; Anthropic deletes API content within 30 days; ElevenLabs retains an API history on its own systems, which we can and do have deleted on request. Our ElevenLabs workspace is configured with provider model training disabled, and Anthropic is contractually prohibited from training on API content, so nothing you submit trains a provider's model. If we ever wanted to use submitted material to improve our own models, we would ask you first and it would be your choice to opt in; we do not do so today.

One narrow exception, for everyone's protection. Where we have specific reason to believe a submission breaches clause 8 of the Terms of Service, for example because someone has reported it to us under clause 8.3, we may keep the material involved for up to 30 days so that the report can actually be looked into, and longer where it is needed to establish or defend a legal claim. This rests on our legitimate interest in preventing misuse of the Service and in being able to act on a complaint.

Face and voice processing. Auto Tracker locates and follows a face in your footage so the shot can be stabilised or re-framed, and the audio features analyse or separate speech. This processing detects and follows those characteristics only to perform the function you request. It does not identify anyone, does not match anyone against any database, and creates no persistent facial or voice template; the video or audio is processed and then deleted as described above, and nothing derived from a face or a voice is stored. Data of this kind may be considered biometric data under some laws (for example in certain U.S. states), which is why we describe our handling of it here in full. Because the people in your footage are yours to record, obtaining any consent that the law of your location requires from them is your responsibility, not ours.

Purposes of processing and the legal bases relied upon

  • Providing what you bought (accounts, delivery of content, AI processing you request, support): performance of our contract.
  • Billing, receipts, and bookkeeping: legal obligation (Swedish bokföringslagen) and contract.
  • Preventing fraud and abuse, including rate limits, trial caps, licence-sharing checks and download-abuse controls: our legitimate interest in protecting the Service against fraud and unauthorised use, applied no more broadly than necessary.
  • Diagnostics and the open-panel message: your consent. Both are sent from software installed on your computer, so under the Swedish Electronic Communications Act (lagen om elektronisk kommunikation, 9 kap. 28 §, implementing Article 5(3) of the ePrivacy Directive) we ask before anything is sent, and the processing that follows rests on Article 6(1)(a) GDPR. Declining has no effect on the panel or on anything you have bought. You may withdraw at any time from the panel's Account tab, and withdrawal does not affect the lawfulness of what was sent before it.
  • Understanding and improving the Service: we examine how the tools are actually used, at the level of individual events tied to an account or device as well as in aggregate, to decide what to build next, to find what is not working, and to run experiments comparing different versions of a feature. This rests on our legitimate interest in developing our own products, and you may object to it at any time by writing to us. The records of reaching a plan limit or a locked feature described here are sent only if you have agreed to diagnostics.
  • Making what we send you relevant: we use the same usage information to work out which of our features, plans or offers are likely to suit how you actually work, so that a message we send is worth your time. This rests on our legitimate interest in promoting our own similar products. You have an absolute right to object to your data being used for direct marketing, at any time and without giving a reason, and we will stop; the unsubscribe link in any message does this immediately, or you can simply write to us.
  • Improving the assistant: keeping and reviewing AlvarAI exchanges so that the things it gets wrong can be found and corrected, as described above. This rests on our legitimate interest in improving the quality of the assistant, and the account setting described in that section turns it off.
  • Running the affiliate program: reviewing applications, recording which affiliate's code a purchase used, and working out and paying that affiliate's commission. For customers this rests on our legitimate interest in paying affiliates accurately for the customers they send us; for affiliates it is part of our agreement with them, the Affiliate Program Terms.
  • Website analytics: understanding which pages people visit and where they run into trouble, so the site can be improved. This is counted as totals only, with no cookie and nothing stored on your device, and rests on our legitimate interest in knowing whether the site works.
  • Marketing email: any promotional email is sent either with your consent or, to existing customers, about our own similar products on the basis of legitimate interest, and always carries a working unsubscribe link. Transactional email (sign-in codes, receipts, important service notices) is part of the service.

Recipients and processors

Personal data is disclosed to the providers that operate the Service, listed below. We do not sell personal data and do not disclose it for any purpose other than those stated in this policy, save where required by law.

  • Stripe (payments; Stripe Payments Europe Ltd, Ireland). For fraud prevention, compliance, and its Link feature, Stripe acts as an independent controller under its own privacy policy.
  • Apple and Google, where you choose to pay with Apple Pay or Google Pay. These wallets are offered inside Stripe’s hosted checkout, on Stripe’s own domain, and we neither see nor receive your wallet credentials. If you use one, the wallet provider processes the transaction as an independent controller under its own terms, and may use data about the transaction for its own purposes, including analytics. See Apple’s privacy policy and Google’s privacy policy. Choosing a card instead avoids this entirely.
  • Supabase (our database and backend; hosted in the EU, Ireland).
  • Cloudflare (website hosting and content delivery).
  • Resend (sends our email; processes in the United States, retains email data about 30 days).
  • ElevenLabs (audio processing, as above).
  • Anthropic (text analysis and the site chat assistant, as above).
  • Replicate (video processing for Auto Tracker and Scene switch detection, deleted within one hour, as above).
  • Google (Gmail), where we prepare a reply or a follow-up to a customer by email; the recipient address and message pass through that account.
  • Better Stack (availability monitoring; Better Stack, Inc., United States). It checks from the outside that our website and services are responding, by requesting a few of our own addresses on a schedule. It receives no information about you: no page views, no browser or device details, no media, no projects, and nothing from your account.
  • Discord, where you have chosen to link your Discord account. We tell Discord which linked accounts hold an active subscription so that your community role stays correct, and nothing more.
  • Shopify, for orders placed through our previous store and for the store knowledge base the chat assistant consults. This role ends when our migration away from Shopify completes.

Our providers use providers of their own. Each provider above relies on its own sub-processors, for example hosting and infrastructure vendors. Data protection law (Article 28 GDPR) requires our providers to pass the same duties on to those sub-processors by contract, and each provider publishes its own current sub-processor list. We review those lists when we choose a provider and when we revise this policy.

If the business changes hands. If we sell, merge or reorganise the business, personal data may pass to whoever goes on running the Service, so that your account and your purchases continue to work. They would be bound to keep processing it for the purposes set out in this policy, and we would tell you of any change to those purposes.

Aggregated and anonymised information. We may compile and publish statistics about how the Service is used which do not identify anyone and from which no individual can be picked out. Information in that form is no longer personal data, and we may use it without restriction, including in our own marketing.

Transfers to third countries

Our database lives in the EU, but several providers above process data in the United States, and some Supabase platform operations (edge computing, platform logs) also run outside the EU. For these transfers we rely on the EU-U.S. Data Privacy Framework where the provider holds an active certification, and on Standard Contractual Clauses in the providers' data processing agreements otherwise. As at the date of this version, Stripe, Cloudflare, Resend and ElevenLabs hold active certifications, and Supabase, Anthropic, ElevenLabs and Better Stack are covered by Standard Contractual Clauses. Certifications are renewed annually, and we re-check each provider's status whenever we revise this policy. Video sent to Replicate is transferred only because it is necessary to perform the exact feature you invoke, and is deleted within the hour.

Retention periods

  • Account data: for as long as the account exists. It is deleted on request.
  • Purchase and credit records, and the checkout acceptance record: seven years, as required by the Swedish Bookkeeping Act (bokföringslagen). These are retained notwithstanding a request for erasure, because keeping them is a legal obligation and the record is evidence for both of us of what was agreed. This covers the record of the terms accepted at checkout, and not any other permission you give us, which you remain free to withdraw at any time.
  • Records relating to a suspected or established breach: for as long as necessary to establish, exercise or defend legal claims.
  • Sign-in codes: valid for ten minutes, and the expired records are deleted within seven days.
  • Chat records (the website chat and AlvarAI conversations): deleted automatically after twelve months. Diagnostic records: retained while operationally useful, reviewed and deleted periodically, and on request.
  • Open-panel message: one row per account, overwritten each time the panel checks in, and deleted 24 hours after the last message. The deletion runs every hour whether or not any panel is open. Turning the switch off stops new messages immediately; the existing row then ages out through the same sweep, within 24 hours. It is deleted immediately if you delete your account.
  • Usage and event records: kept while they remain useful for understanding how the Service is used, and reviewed periodically so that anything no longer serving that purpose is removed.
  • Technical request records (the IP-based rate-limit and activation records): kept only as long as needed to enforce a limit or look into abuse, and cleared routinely thereafter.
  • Email engagement records: kept while they remain useful for judging what to send, and removed on request.
  • Affiliate program records: which affiliate's code a purchase used is kept for as long as commission can be owed on it; applications and an affiliate's details are kept while the program runs and deleted on request, except the record of commission paid, which the Swedish Bookkeeping Act requires us to keep for seven years. Bank details entered for a payout are deleted as soon as the payment is made, or after 60 days if it is not.
  • Submitted media: no copy retained, save for the narrow abuse-investigation exception described above.

Rights of the data subject

Under the General Data Protection Regulation you have the right to access your personal data, to rectification, to erasure, to restriction of processing, to object to processing carried out on the basis of legitimate interests, and to data portability. To exercise any of these rights, write to info@alvarcreations.com from the address registered to your account; we respond within one month. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se) about how we process your personal data, and with the Swedish Post and Telecom Authority (Post- och telestyrelsen, PTS, pts.se) about the consent question covering the diagnostics and open-panel message described above. We would ask that you raise the matter with us first.

We do not make solely automated decisions that produce legal or similarly significant effects about you, and we do not sell your personal data.

Personal data breaches

If a security incident affecting your personal data occurs and is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, describing what happened, the likely consequences, and the steps we are taking, in accordance with Article 34 of the General Data Protection Regulation. Where the law requires it, we also notify the Swedish Authority for Privacy Protection.

Cookies and local storage

This site sets no advertising cookies and takes part in no advertising network. A limited amount of browser storage is used for strictly functional purposes, which needs no permission and is always active: the chat session, dismissed prompts, interface preferences, and a creator's discount code when you arrive through their link, which is kept only until you close the tab.

Website analytics. We use Cloudflare Web Analytics to count how many people open each page. It sets no cookies. It stores nothing in your browser. It does not follow you between visits, does not build a profile of you, and is not shared with any advertiser. What we see is totals: how many people opened a page, roughly which part of the world they were in, and what kind of browser and device they used. Because it collects nothing that identifies you and stores nothing on your device, there is nothing here to ask your permission for, which is why this site shows you no cookie banner. If you would rather it did not run at all, any browser setting or extension that blocks analytics scripts will stop it, and the site works exactly the same.

Embedded video uses YouTube's no-cookie player and loads only on interaction. Stripe's checkout is hosted on stripe.com and sets cookies under Stripe's own policy; if you pay there with Apple Pay or Google Pay, that wallet's provider may also set storage of its own, again on Stripe's domain rather than ours.

Amendments to this policy

Where this policy is amended, the revised version is published at this address with a new version number and date. Amendments that materially affect your rights are notified to account holders by email in advance.

Contact

AlvarCreations, Sweden. Data protection enquiries: info@alvarcreations.com. Registered name, postal address and organisation number are stated on every invoice and provided on request.