Privacy Policy

Who We Are

NarraFlo is a per-edit wedding film editing service operated by Lam Group LTD. Professional videographers and studios send us their wedding footage, and we return finished, edited films. To provide the Service we operate a customer portal for clients, an internal portal for our staff, and a public marketing website.

For the purposes of applicable privacy law, Lam Group LTD is the organization responsible for the personal information handled through the Service. If you have any questions about this policy or how we handle your information, you can reach us at hello@narraflo.com.

Account and Identity Information

When you create an account or are invited to one, we collect identity and account information such as your name, email address or addresses, phone number, profile photo, and your role and preferences within the Service.

Account and identity information is collected and stored primarily by our third-party authentication and identity provider rather than in our own database. Within our own systems we generally store only an opaque user identifier that links your activity to your account, along with your role and preference settings needed to operate the Service.

Contact Form Information

Our public website offers a contact form for prospective customers. When you submit it, we collect the information you provide, which includes your name and email address, and optionally your studio or business name, the number of weddings you handle per year, and any notes you share about your workflow.

We use this information to review and respond to your inquiry, to understand whether the Service is a good fit for your work, and to follow up with you. If you do not want to provide this information, you can contact us directly by email instead.

Payment and Billing Information

We use a third-party payment processor to handle payments. Card details are entered on the payment processor's own hosted page, so we never receive or store full card numbers. From a completed payment we retain only limited information such as the card brand and the last four digits, along with transaction records needed for accounting.

We also collect and store billing details such as the billing name, billing email address, and billing address associated with an invoice. Billing street-address fields are encrypted at rest using AES-256-GCM. We use billing information to issue invoices and receipts, to calculate applicable taxes, and to meet our legal and accounting obligations.

Uploaded Content and Footage

To provide the Service, clients upload wedding video footage and images for us to edit. This uploaded content may contain personal information about third parties, such as the couple, their families, and guests who appear in the footage.

If you upload content, you are responsible for having the necessary rights, permissions, and consents to provide it to us and to allow us to store, process, and edit it in order to deliver the Service, including any consents required from the individuals who appear in the footage. We treat uploaded content as confidential.

Uploaded content is stored in private cloud object storage that is not publicly listed. Access to specific files is granted through short-lived signed links that expire, rather than through permanent public URLs.

Communications

The Service includes an in-app chat feature that lets clients and our staff exchange messages about a project. Chat messages may include image attachments. We store these messages and attachments so that the conversation history is available to the participants.

We also send transactional emails that are part of the Service, such as invoices, payment receipts, and notifications about your projects. These messages are operational and relate to your use of the Service.

Technical and Usage Data

When you use the Service, our authentication provider sets session cookies that keep you signed in. We also use your browser's local storage to remember preferences, such as a notification sound setting, and to hold unsaved form drafts so you do not lose work in progress.

Our servers keep logs that may record technical details such as identifiers, request information, and timestamps, which help us operate, secure, and troubleshoot the Service.

We use a third-party error-monitoring provider that may capture limited diagnostic data, including identifiers, when something goes wrong, so that we can diagnose and fix problems. This includes a session-replay feature that may capture on-screen activity, with text masked. Because masking applies to text and not necessarily to all media on the screen, you should avoid displaying highly sensitive material on screen while using the Service.

We do not use third-party advertising cookies or product-analytics trackers, and we do not use the Service to serve you targeted advertising.

How We Use Your Information

We use personal information to provide, operate, maintain, and improve the Service. This includes creating and managing accounts, authenticating users, editing and delivering wedding films, communicating with you, and providing customer support.

We also use personal information to process payments and issue invoices and receipts, to calculate applicable taxes, to keep records required for legal and accounting purposes, to secure the Service and prevent misuse, to diagnose and fix technical problems, and to comply with our legal obligations.

We use the information you submit through the contact form to respond to your inquiry and to follow up about the Service. We do not sell your personal information.

Cookies and Local Storage

We rely on cookies set by our authentication provider to keep you signed in and to maintain your session. These cookies are necessary for the Service to function.

We use your browser's local storage to remember interface preferences and to temporarily hold unsaved form drafts on your device. We do not use advertising or third-party analytics cookies. You can clear cookies and local storage through your browser settings, though doing so may sign you out or remove saved preferences and drafts.

How We Share Information

We share personal information with service providers who process it on our behalf and under our instructions, only as needed to provide the Service. These providers act as our processors and are not permitted to use the information for their own purposes.

The categories of providers we use include our authentication and identity provider; our payment processor; cloud hosting, database, and object-storage providers; email delivery providers; and an error-monitoring provider. We share only the information each provider needs to perform its function.

We may also disclose personal information when required to comply with the law, to respond to lawful requests from public authorities, to enforce our agreements, to protect the rights, property, or safety of our users, the public, or us, or in connection with a business transaction such as a merger, acquisition, or sale of assets. We do not sell personal information.

International Transfers

We and our service providers may store and process personal information in countries other than the one in which you are located, including the United States and elsewhere. Privacy laws in those countries may differ from the laws in your jurisdiction.

When personal information is transferred across borders, we take steps intended to ensure it continues to receive an appropriate level of protection, consistent with applicable privacy law.

Data Retention

We keep personal information for as long as it is needed to provide the Service and to meet our legal, accounting, and reporting obligations. Retention periods vary depending on the type of information and the purpose for which it was collected.

Uploaded footage is retained for the duration of the related project and is cleaned up when it is no longer referenced by an active project. You may request deletion of your information by contacting us. Account deletion is currently handled by our staff on request rather than through a self-serve control.

Please note that deleting an identity or account does not automatically remove historical project and invoice records that we are required to keep for legal and accounting reasons. We retain those records for the period required by applicable law.

Security

We use technical and organizational measures designed to protect personal information. These include encryption in transit, encryption at rest for sensitive billing fields, private storage for uploaded content with access through short-lived signed links, and access controls that limit who can view information within the Service.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us right away.

Your Privacy Rights

Subject to applicable law, you have the right to access the personal information we hold about you, to request correction of information that is inaccurate or incomplete, to request deletion of your information, and to withdraw consent you previously gave, understanding that withdrawing consent may limit our ability to provide the Service.

These rights are available to you under Alberta's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and, where applicable, under other laws such as United States state privacy laws.

To exercise any of these rights, contact us at hello@narraflo.com. We may need to verify your identity before acting on a request. If you are not satisfied with how we handle your request, you may have the right to contact the relevant privacy regulator.

Children's Privacy

The Service is intended for professional videographers, studios, and their business clients. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate steps.

Third-Party Links

The Service and our communications may contain links to third-party websites or services that we do not operate. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party site or service you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this policy and, where appropriate, provide additional notice.

Your continued use of the Service after an updated policy takes effect means you accept the revised policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact Lam Group LTD at hello@narraflo.com.