Privacy Policy

LAST UPDATED: SEPTEMBER 7, 2026

1. Who is responsible for your data

The data controller for gimbalpilot.com and the GimbalPilot app is:

• Briljans, a sole proprietorship registered in Falun, Sweden
• Email: hello@gimbalpilot.com

"We", "us" and "GimbalPilot" in this policy all mean Briljans. This policy is written to meet the EU General Data Protection Regulation (GDPR), which applies to us as a Swedish business.

2. What we collect, and why

Your video — nothing, ever

This is the important one, so it comes first. The GimbalPilot app processes your camera feed entirely on your own computer. The AI models run locally. Video and audio are never uploaded, never streamed to us, and never stored by us. We have no technical way to see what your camera sees. The same goes for your gimbal movements and tracking targets — they exist only on your machine.

The website has no analytics and no advertising trackers. We do not watch what you read here.

Account data

When you subscribe, we store your email address, your license key and your subscription status (active, cancelled, trial). We need these to create your license, let the app verify it, and show you your subscription on the account page. Legal basis: performing our contract with you.

License checks

When the app checks your license online, it sends your license key together with a device identifier, the device name and the app version. We use these to confirm the license is valid, to spot a key being shared far beyond one person's machines, and to know which app versions are in use when something breaks. Legal basis: performing our contract with you, and our legitimate interest in preventing license abuse. The check is designed to fail gracefully — the app keeps a generous offline grace period, so a dropped connection never stops a service.

Support emails

If you write to hello@gimbalpilot.com, we keep the correspondence so we can actually help you, and so we can look up what was said if you write again. Legal basis: our legitimate interest in providing support.

3. Who processes data on our behalf

• Stripe handles all payments. Your card number goes directly to Stripe and never touches our servers. Stripe tells us only whether the subscription is paid. Stripe is an independent controller for the payment itself — see Stripe's privacy policy.
• Cloudflare hosts the website and the database that stores account data. Data may be processed on Cloudflare infrastructure in the EU and the US, under the safeguards described in section 7.

That is the whole list. We do not sell or share your data with anyone else.

4. How long we keep it

• Account data (email, license key, device identifiers, subscription status) is kept while your subscription is active. When you cancel, we keep it only as long as needed to handle refunds and reactivations, then delete it.
• Transaction records (invoices and payment records) must be kept for 7 years under the Swedish Bookkeeping Act — that one is not optional for us.
• Support emails are kept as long as they are useful for helping you, and deleted on request where the law allows.

5. Legal bases, summarised

• Contract (GDPR art. 6.1.b): account data and license checks — we cannot deliver the service without them.
• Legal obligation (art. 6.1.c): keeping transaction records under Swedish bookkeeping law.
• Legitimate interest (art. 6.1.f): preventing license abuse, and keeping support correspondence.

We do not rely on consent for anything, because we do not do anything that would need it — no marketing lists, no tracking, no profiling.

6. Your rights

Under the GDPR you can, at any time:

• Access — ask for a copy of the data we hold about you.
• Rectification — have incorrect data corrected.
• Erasure — have your data deleted (except what bookkeeping law forces us to keep).
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.

Email hello@gimbalpilot.com and we will sort it out — there is no form to fill in. If you think we have handled your data wrongly, you also have the right to complain to the Swedish data protection authority, IMY (Integritetsskyddsmyndigheten, imy.se), or to the authority in your own EU country.

7. International transfers

We are based in Sweden and prefer to keep data in the EU. Because Stripe and Cloudflare are US companies, some data may be processed in the United States. Both operate under recognised GDPR transfer safeguards — the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses — and we only use them for the purposes described above.

8. Cookies

The public website sets no cookies at all. The only cookie on this domain is a single session cookie on the /admin page, used to keep the site administrator logged in. It is strictly necessary for that function, which is why you see no cookie consent banner — there is nothing to consent to. No marketing or analytics cookies, ever.

9. Changes to this policy

If we change this policy, we update this page and the date at the top. If a change is significant — for example a new processor or a new category of data — we will tell subscribers by email before it takes effect. We will never quietly start collecting your video; that would contradict the entire point of the product.

10. Contact

Questions about privacy, or about anything else: hello@gimbalpilot.com. A human in Sweden reads every email.