Legal
Privacy Policy
How People Stories handles personal data for organisers, contributors and the people who receive videos.
Who is responsible for your data
People Stories is provided by Leonardo English AB (“People Stories”, “we”, “us”), organisation number 559484-2857 (VAT SE559484285701), registered at Wrangelsgatan 4 B, 416 62 Gothenburg, Sweden. We are the data controller for the personal data described below. You can reach us at hello@peoplestories.video.
What we collect
- Organisers (the person who creates a project): name and work email, used to sign in and identify who owns a workspace; workspace and billing details, including invoices and subscription status held by Stripe.
- Contributors (a colleague who records a clip): the name and optional relationship, location and context they choose to add, and the video and audio they record or upload. We ask for explicit consent before storing a contribution, and a private link lets a contributor replace or delete it afterwards.
- Recipients (the person a video is made for): the name and role entered by the organiser, and the finished private video. A recipient does not create an account and does not interact with us directly.
We also count how the service is used, for example page views and when a video is created or published, so we can improve it. We count every visit without storing anything on your device. With your consent this product analytics also uses cookies to recognise you between visits. If you accept, we also record how you move through the site (clicks, scrolling and the page layout) so we can see where people get stuck; see “Session recordings” below. It never includes the private links in our addresses, and it identifies an organiser's workspace rather than the person. We do not use advertising cookies. See “Cookies” below.
Why we process it, and on what legal basis
- We process an organiser's account and billing data to perform our contract with them: providing the service they signed up for and taking payment through Stripe.
- We process a contributor's video, audio and details on the basis of their explicit consent, given before they submit a clip. A contributor can withdraw that consent at any time by deleting their contribution through their private link, or by asking us to do it for them.
- We process a recipient's name and role as part of performing our contract with the organiser who added them, and to produce the video the organiser requested.
- We may process limited technical data (for example server logs) on the basis of our legitimate interest in keeping the service secure and working.
- We use analytics cookies and session recordings only with your consent, which you can withdraw at any time through “Cookie settings” at the foot of our public pages. Until you accept, and if you decline, we count visits without cookies on the basis of our legitimate interest in understanding how the service is used and improving it.
Where your data is stored and processed
Uploaded clips, finished videos and application data are stored in Cloudflare object storage (R2) and database (D1). Clips are sent temporarily to Google Cloud, region europe-north1 (Finland), while a video is being assembled, and deleted from that environment once rendering finishes. All of these locations are within the European Economic Area.
Some of the companies that provide parts of the service to us are based outside the EEA. Where that is the case, we rely on their published data processing terms and, where required, Standard Contractual Clauses or an equivalent safeguard. See “Who we share your data with” below and the data processing page for the full list.
Who we share your data with
We do not sell personal data. We share it only with the companies that help us run the service, each acting as our processor:
- Cloudflare — application hosting, database and private media storage.
- Google Cloud (europe-north1) — background video rendering.
- Stripe — payment processing, invoicing and tax collection for organiser subscriptions.
- WorkOS — organiser sign-in (a password or an emailed code).
- Resend — transactional email, for example invitation and account emails.
- PostHog (EU cloud) — product analytics.
We may also disclose personal data if required by law, or to protect the rights, property or safety of People Stories, our customers or others.
How long we keep your data
We keep a project and its media for as long as the workspace is active. If a workspace has no active subscription and a project has not been edited for 12 months, we delete the project and its media. When a contribution is removed from a project, whether by the contributor or the organiser, we permanently delete the clip, and any unpublished version of the video that shows it, within 30 days. If the clip is already in the published video, that video is kept so its link keeps working until the organiser publishes a new version, unpublishes it or deletes the project; the version an organiser paid for with a redemption code is kept until the project is deleted, so the code keeps working. A contributor who wants their clip out of a published video can ask the organiser, or email us and we will arrange it. Billing records are kept for as long as Stripe and applicable tax law require.
Your rights
Depending on where you live, you may have the right to:
- ask what personal data we hold about you and get a copy of it;
- ask us to correct inaccurate data;
- ask us to delete your data, including a specific contribution;
- withdraw consent you previously gave, without affecting anything we did before you withdrew it;
- object to or ask us to restrict certain processing; and
- complain to your local data protection authority.
A contributor can exercise most of these rights directly, without contacting us, using the private link sent after a contribution is submitted. An organiser can delete any single clip or team profile from their workspace, and the workspace owner can delete the whole workspace from Settings, which removes every project, clip, video, profile and organiser account in it and cancels the subscription; that is how an organiser account is deleted. For anything else, email hello@peoplestories.video and we will respond within 30 days.
Cookies
People Stories sets one essential cookie, ps_session, so an organiser stays signed in between visits. It is needed for the service to work and is not used for advertising or tracking.
We also ask whether you accept analytics cookies from PostHog, our product analytics provider. Until you accept, and if you decline, nothing is stored on your device: your visits are counted using an anonymous identifier that PostHog calculates on its servers from your connection and changes every day. If you accept, PostHog stores an identifier in a cookie and in your browser's local storage so it can recognise you between visits. PostHog remembers your choice on your device, and you can change it at any time with “Cookie settings” at the foot of our public pages.
Session recordings
If you accept analytics cookies, PostHog also records your visit as a replay: the layout of each page, where you click and scroll, and how long pages take to load. We use these recordings to find and fix confusing or broken parts of the service. They are never recorded if you decline or have not chosen yet. Anything you type into a form is hidden before it leaves your browser, private links are removed, and on pages opened through a private link (a contribution, introduction, invitation or watch link) all text is hidden too. Video and camera images are never recorded. PostHog keeps recordings for a limited period and then deletes them.
Contributors' browsers also keep, in local storage, the private link to their own contribution on the device they used to submit it, so they can replace or delete it later.
Children
People Stories is intended for use by employed adults contributing to workplace videos, not by children.
Changes to this notice
If we make a material change to this notice, we will update the date at the top of this page and, where required, tell affected organisers directly.
Contact us
Questions or requests about this notice or your data: hello@peoplestories.video.