Privacy

This page describes what the Videolift platform stores about the people who use it. It is a private pilot for invited teams, not a public service.

Account data

Your email address, a password hash (never the password), your team memberships and roles, and your two-factor enrollment (the authenticator secret is stored encrypted; recovery codes are stored as hashes).

Files you upload

Uploads are working files for measurement. They expire and are deleted a short time after their last use, and team storage limits apply. Measurement results and issued certificates belong to your team.

Security logging

The platform keeps security logs so that access to it can be protected, misuse can be detected, and incidents can be reconstructed. This is done in the platform operator's legitimate interest in securing the service. Two layers exist:

• An application audit trail: for sign-ins and every meaningful action it records the time, the action, your account, the IP address, the browser's user agent string, a device identifier (a random cookie your browser holds), an internal session reference, the object acted on, and the outcome. Sign-ins from a device your account has not used before also trigger a notice mail to your address.
• A web server access log: requests with IP address, user agent, path, status and size.

Retention: the access log is kept for 30 to 90 days. The application audit trail is kept for the lifetime of the pilot plus 12 months. Audit records are append-only and are not edited or selectively deleted.

Where the data lives

All of it is stored and processed inside the EU, on infrastructure in Germany or Finland, and it stays there. Nothing is sold or shared with third parties beyond the service providers needed to run the platform (hosting, transactional mail).

Questions

Ask your team owner, who can also show you your sign-in history on request.