INTRODUCTION
The Biosignal Platform respects your privacy and is committed to protecting personal data.
This Privacy Policy explains how personal data is collected, used, stored, and shared in connection with The Biosignal Platform website, app, software, subscriptions, licensing, support, shop, digital services, and related products.
The Biosignal Platform is developed and operated by Cinematronic ApS, a company registered in Denmark.
WHO WE ARE
The Biosignal Platform is provided by:
Cinematronic ApS
Novi Science Park
Niels Jernes Vej 10
9220 Aalborg
Denmark
CVR: DK43033905
Email: hello@thebiosignalplatform.com
OUR ROLE
Cinematronic ApS acts as data controller for personal data related to account management, licensing, payments, subscriptions, support, security, website operation, shop functionality, and operation of The Biosignal Platform.
When The Biosignal Platform is used as part of a study, research project, client project, classroom project, or internal test run by a customer or organization, that customer or organization is normally the data controller for participant data, respondent data, project data, recordings, questionnaires, biosignal data, and related research material.
Where Cinematronic ApS processes project data on behalf of a customer, Cinematronic ApS may act as a data processor. In such cases, a separate data processing agreement may be required.
DATA STORED LOCALLY ON YOUR DEVICE
The Biosignal Platform is designed to store project data locally in project files on the user’s device.
This may include questionnaire content, respondent answers, comments, annotations, session metadata, timing information, imported files, created files, recordings, webcam data, biosignal data, biometric-related data, and other research material collected through the software.
Project data is not transmitted to us unless the user actively uses a feature that requires transmission, contacts support and shares files with us, or otherwise chooses to provide such data.
The application may also store certain account-related data locally, including encrypted authentication tokens, license information, machine activation data, and limited local logs.
DATA COLLECTED THROUGH OUR WEBSITE AND SHOP
When you visit our website, contact us, use chat, sign up for updates, create an account, place an order, or interact with our shop, we may process personal data such as name, email address, company name, billing information, order information, support messages, IP address, device information, browser information, and website usage data.
Our website is built and operated using third-party website and commerce services, including Wix. These services may process personal data as part of website hosting, security, forms, chat, shop functionality, analytics, and related website operations.
Cookies and similar technologies may be used to operate the website, remember preferences, improve functionality, measure usage, support security, and enable shop and checkout functionality.
DATA SENT TO EXTERNAL SERVICES
The Biosignal Platform communicates with external services only when relevant features are actively used by the user or are necessary for account, licensing, payment, security, diagnostics, or support functionality.
Depending on usage, data may be transmitted to external services for authentication, licensing, machine activation, payment session creation, payment processing, error logging, diagnostics, and optional AI summarisation.
These services may include authentication providers, licensing services, payment providers such as Stripe, diagnostics providers such as Sentry, infrastructure providers such as Scaleway, Microsoft Store, Google login, Microsoft login, and other service providers needed to operate The Biosignal Platform.
PURPOSES OF PROCESSING
We process personal data to provide and operate The Biosignal Platform, authenticate users, validate licenses, manage machine activation, provide payment and subscription functionality, process orders, provide support, maintain security, prevent misuse, diagnose errors, improve stability, communicate with users, and provide optional features such as AI summarisation.
We may also process personal data to comply with legal obligations, keep accounting records, respond to customer requests, handle complaints, and protect our rights and systems.
LEGAL BASIS
We process personal data where it is necessary to perform a contract with you or take steps before entering into a contract.
We may process personal data where it is necessary for our legitimate interests, including operating the platform, maintaining security, preventing misuse, improving services, diagnosing errors, and providing support.
We may process personal data to comply with legal obligations, including accounting, tax, consumer protection, and regulatory requirements.
Where required, we process personal data based on consent, for example for certain optional features, marketing, cookies, or processing activities that require consent.
If special categories of personal data are processed as part of a customer project, research activity, or participant study, the customer or organization running the project is responsible for ensuring that a valid legal basis and any required additional condition for such processing exists.
AUTHENTICATION AND ACCOUNT DATA
Authentication may be handled through third-party authentication providers.
Depending on configuration, authentication data may include name, email address, identity-provider information, user identifiers, authentication tokens, and related account information.
Authentication tokens may be stored locally in encrypted form using Windows security mechanisms.
LICENSING DATA
For licensing and activation, The Biosignal Platform may communicate with licensing services.
This may include authentication tokens, user identifiers, machine identifiers, license status, license actions, activation requests, deactivation requests, subscription status, and related technical metadata.
PAYMENTS
When initiating a purchase or subscription, The Biosignal Platform or our website may communicate with payment services and open a checkout flow.
Payment card data is processed directly by the relevant payment provider and is not stored by The Biosignal Platform.
Payment providers may process billing information, transaction information, payment status, and related information needed to complete and document the payment.
MICROSOFT STORE AND THIRD-PARTY PURCHASES
If you purchase or install The Biosignal Platform through Microsoft Store or another third-party platform, that platform may process personal data according to its own privacy policy, payment terms, and store rules.
We may receive limited information necessary to provide access, licensing, support, or activation where applicable.
AI SUMMARISATION
The Biosignal Platform may include an optional AI summarisation feature.
When this feature is used, relevant questionnaire content, questions, responses, notes, or other selected content may be transmitted to external AI or infrastructure services for processing.
This feature is only activated upon user request. Users are responsible for ensuring that they have an appropriate legal basis, permissions, and safeguards before submitting personal data, participant data, confidential information, or sensitive content to an AI-based feature.
DIAGNOSTICS AND ERROR LOGGING
The Biosignal Platform may use diagnostics and error logging services to investigate errors, improve stability, and maintain performance.
Diagnostic data may include technical information such as app version, operating system, device information, error messages, stack traces, time of error, and limited contextual information needed to understand the issue.
The system is designed to reduce or avoid the transmission of sensitive or respondent-identifying data where possible.
SUPPORT
If you contact us for support, we may process your name, email address, company name, support message, license information, device information, screenshots, logs, attachments, and any other information you choose to provide.
If you send us project files, recordings, biosignal data, participant data, or other research material for troubleshooting, you are responsible for ensuring that you have the necessary rights, permissions, legal basis, and safeguards to share such data with us.
SPECIAL CATEGORIES OF DATA
The Biosignal Platform may be used by customers to collect or analyze data that could include sensitive or special categories of personal data, depending on the project.
This may include biometric-related data, biosignal data, health-related data, behavioral data, video recordings, eye tracking data, or other data that may be sensitive in context.
Cinematronic ApS does not require users to upload or transmit such data to us for ordinary use of the platform.
If you use the platform to process special categories of personal data, you are responsible for ensuring that such processing is lawful, necessary, proportionate, secure, and supported by the required legal basis, consents, information notices, ethics approvals, or other safeguards where applicable.
RECIPIENTS AND SERVICE PROVIDERS
Personal data may be processed by service providers that help us operate The Biosignal Platform and our website.
These may include providers for website hosting, authentication, payment processing, license validation, diagnostics, cloud infrastructure, support, email, analytics, security, and optional AI functionality.
We only share personal data where necessary for the relevant purpose, where required by law, or where you have chosen to use a feature that requires such sharing.
INTERNATIONAL TRANSFERS
Some service providers may process personal data outside the European Economic Area.
Where required, appropriate safeguards are applied in accordance with applicable data protection laws, such as adequacy decisions, standard contractual clauses, or other legally recognized transfer mechanisms.
RETENTION
Project data stored locally on the user’s device remains stored until it is deleted by the user or by the organization managing the project.
Account, licensing, payment, order, support, website, diagnostic, and security data is retained only for as long as necessary for the relevant purpose, including contractual, legal, accounting, security, and support obligations.
Support data and diagnostic information may be retained for a reasonable period to resolve issues, document support history, improve stability, and protect our systems.
SECURITY
We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
Because no system is completely secure, we cannot guarantee absolute security. Users are responsible for protecting their own devices, accounts, passwords, project files, exports, backups, and local storage.
YOUR RIGHTS
Depending on applicable law, you may have the right to request access to your personal data, request correction of inaccurate data, request deletion, restrict processing, object to processing, request data portability, and withdraw consent where processing is based on consent.
You may also have the right to lodge a complaint with a data protection supervisory authority.
In Denmark, the supervisory authority is Datatilsynet.
If personal data is processed as part of a project run by a customer or organization using The Biosignal Platform, requests relating to that project data should normally be directed to the customer or organization responsible for the project.
AUTOMATED DECISION-MAKING
The Biosignal Platform is not intended to make automated decisions about individuals that produce legal effects or similarly significant effects.
Any interpretation, decision, conclusion, classification, research result, or action based on data generated or analyzed through the platform is the responsibility of the user, customer, or organization using the platform.
MINORS
The Biosignal Platform is intended for professional, educational, research, and organizational use.
If the platform is used in projects involving children or minors, the customer or organization running the project is responsible for ensuring that the required legal basis, information, consents, approvals, and safeguards are in place.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time.
The latest version will be available on our website with an updated date.
CONTACT
For questions about this Privacy Policy or how we process personal data, please contact us:
The Biosignal Platform
Cinematronic ApS
Novi Science Park
Niels Jernes Vej 10
9220 Aalborg
Denmark
CVR: DK43033905
Email: hello@thebiosignalplatform.com
PRIVACY POLICY
Last updated: June 2026