Data we process
We process data you provide at registration (email address, also if you join the waiting list), the HPR files you upload, metadata about files you choose to save (filename, size, timestamps), payment information processed by Mollie, and operational telemetry needed to run and debug the service.
The waiting list
If you join the waiting list on our website, the form asks only for your email address. We use it to get in touch when the services you are interested in become available, and for nothing else. The address is sent as an email to our support mailbox (support@forestomni.com) through our email provider (see Subprocessors) and is not stored in any separate database. The legal basis is your consent, which you can withdraw at any time by writing to us at support@forestomni.com — we then delete the address. We keep the address until we have been in touch about the launch or you ask us to remove it, and for twelve months at most.
Files and usage data
HPR files you upload are processed and stored on our servers. We also send some technical usage data tied to your account (like a rough file-size range) to help us improve the product — this happens regardless of your analytics preference, though we won't log it on our side if you've opted out.
Subprocessors
We use the following subprocessors: Mollie (payments), Microsoft Azure (hosting and storage within the EU), an email provider for transactional email, and Microsoft Defender for Cloud (virus scanning of uploaded files).
Retention
Account and file data is permanently deleted within 30 days of a deletion request. Audit logs are anonymised after the same period. Accounting records are retained for as long as the Swedish Bookkeeping Act requires.
Your rights
You have the right to access, rectification, erasure (our account-deletion process), data portability, objection and restriction of processing. Complaints may be filed with the Swedish Authority for Privacy Protection (IMY).
Cookies
We do not use cookies for marketing, and the page-view statistics we collect on our landing page are cookieless. We set two first-party cookies. .AspNetCore.Culture is set when you switch language via the SV/EN button; it stores only your language preference and has a one-year lifetime. fo_lp_sid is an opaque session identifier set when you visit a page, with a 24-hour lifetime; it is never logged in raw form, only as a daily-rotated hash, so it cannot be used to recognise you from one day to the next. Per IMY guidance both are "strictly necessary" — the first fulfils an action you explicitly requested, the second carries only our own functional traffic measurement — so no consent banner is required.
Contact
Questions about this policy or about the processing of your personal data should be sent to the address below.