Terms and Conditions
Last updated: October 9, 2026
Please read these Terms and Conditions carefully before using Our Service.
Interpretation and Definitions
Interpretation
Words with capitalized initial letters have the meanings defined below. These definitions apply whether the terms appear in singular or plural.
Definitions
For the purposes of these Terms and Conditions:
Application means the fylm.ai applications and software provided by the Company.
Application Store means a third-party digital distribution service, where applicable.
Affiliate means an entity that controls, is controlled by or is under common control with a party.
Account means an account created to access the Service.
Company, We, Us or Our means G.T. GradeVision AI d.o.o., Novi Goljak 7/C, 10000 Zagreb, Croatia, OIB: 99767742988, trading as fylm.ai.
Content means images, videos, files, colour grades, projects, comments and other information uploaded, created, stored or shared through the Service.
Country means the Republic of Croatia.
Device means any device capable of accessing the Service.
Feedback means suggestions or comments concerning the Service.
Free Trial means a limited period during which paid Subscription features may be made available without charge.
In-app Purchase means a purchase made through an Application Store, where applicable.
Promotions means contests or other promotional activities.
Service means the fylm.ai website, applications and related services.
Subscription means access to paid Service features on a recurring basis.
Terms means these Terms and Conditions, including the applicable Data Processing Addendum.
Website means https://fylm.ai, https://app.fylm.ai and https://lite.fylm.ai.
You means the individual or legal entity accessing or using the Service.
Acknowledgment
These Terms govern Your use of the Service and establish the contractual relationship between You and the Company concerning such use.
By accessing or using the Service, You agree to be bound by these Terms, to the extent permitted by applicable law.
If You do not agree with these Terms, You should not access or use the Service.
You represent that You are at least 18 years old. The Company does not permit persons under 18 to use the Service.
Your use of the Service is also subject to Our Privacy Policy.
Purchases and Subscription transactions through Our checkout are sold and processed by FastSpring, acting as merchant of record, and are governed by FastSpring’s Terms of Sale and applicable law.
These Terms govern use of the Service and do not replace FastSpring’s terms governing purchase transactions.
Nothing in these Terms excludes or limits mandatory consumer rights.
Subscriptions
Subscription Period
The Service, or certain parts of it, may be available only through a paid Subscription.
Subscriptions are billed in advance at the recurring interval displayed before purchase.
Annual Subscriptions renew each year unless cancelled before the next renewal.
At the end of each billing period, Your Subscription will automatically renew unless cancelled or otherwise lawfully terminated.
Subscription Cancellations
You may cancel automatic renewal through Your Account settings or the subscription management options provided by FastSpring.
You may also contact FastSpring Buyer Support or [email protected] for assistance.
Cancellation prevents future renewal charges.
Unless otherwise required by law or the applicable purchase terms, cancellation does not entitle You to a refund for the current paid billing period. Your access will normally continue until the end of that period.
Nothing in this section restricts statutory withdrawal, termination or refund rights.
Billing
All purchases through Our checkout are sold and processed by FastSpring, acting as merchant of record.
FastSpring handles payment collection, invoicing, applicable taxes, recurring Subscription billing, payment-related refunds and chargebacks according to its Terms of Sale and applicable law.
You must provide accurate and complete billing information to FastSpring and keep Your Account information current.
If a recurring payment fails, FastSpring may provide an opportunity to update Your payment details or complete the payment.
Fee Changes
The Company may change Subscription fees for future billing periods, subject to applicable law and existing contractual price commitments.
Where a change affects an existing Subscription, We will provide any required advance notice and applicable right to cancel before the new price takes effect.
Fee changes apply only in accordance with the Subscription terms and applicable law.
Refunds and Consumer Rights
Except where required by applicable law or the applicable purchase terms, paid Subscription fees are generally non-refundable.
Certain refund requests may be considered individually.
Consumers purchasing online may have a statutory right to withdraw from a distance contract within 14 days of concluding the contract, subject to applicable exceptions.
For ongoing digital services, the commencement of service does not automatically remove the statutory withdrawal right. Where permitted by law, a consumer who expressly requests performance during the withdrawal period may be required to pay a proportionate amount for services already provided upon withdrawal.
For digital content not supplied on a physical medium, separate withdrawal exceptions may apply where all statutory requirements have been met, including the required consent, acknowledgment and confirmation.
Nothing in these Terms excludes mandatory rights concerning withdrawal, non-supply, lack of conformity, price reduction, termination or refunds.
Purchase transactions and refunds are administered through FastSpring according to its Terms of Sale and applicable law.
For refund assistance, contact FastSpring Buyer Support.
Free Trial
The Company may offer a Subscription with a Free Trial for a limited period.
You may be required to provide billing information to register.
Where a Free Trial converts automatically to a paid Subscription, the price, duration and renewal conditions will be disclosed before registration.
Unless cancelled before the disclosed trial period expires, the Subscription may convert to a paid Subscription under the terms accepted during registration.
The Company may modify or discontinue Free Trial offers for future registrations, subject to applicable law.
In-app Purchases
Where the Application is distributed through an Application Store and permits In-app Purchases, those purchases may be subject to the relevant Application Store’s terms.
Billing, cancellations and refunds for such purchases are governed by the applicable Application Store terms and mandatory law.
Purchases made through FastSpring are governed separately by FastSpring’s Terms of Sale.
Nothing in this section excludes statutory consumer rights.
Promotions
Promotions may be subject to separate rules.
If You participate in a Promotion, review its applicable rules and Our Privacy Policy.
Where Promotion rules conflict with these Terms, the specific Promotion rules apply to that Promotion, subject to applicable law.
User Accounts
When creating an Account, You must provide accurate, complete and current information.
You are responsible for safeguarding Your login credentials and for activities performed using Your Account to the extent permitted by applicable law.
You must promptly notify Us if You become aware of unauthorised Account access.
You must not use a username that unlawfully infringes another person’s rights, impersonates another person or violates applicable law.
Material breaches may result in restriction or termination of Your Account according to these Terms and applicable law.
Content
Your Right to Post Content
The Service allows You to upload, create, store, process and share Content.
You retain ownership of Your Content and all rights You hold in it.
Image editing, colour grading and AI-assisted image processing are performed locally on Your Device.
Where You use cloud storage, relevant Content and project data may be uploaded to and stored using Amazon Web Services, including Amazon S3.
By uploading Content or using cloud features, You grant the Company a limited, non-exclusive, worldwide, royalty-free license to host, store, reproduce, transmit, retrieve and otherwise process that Content solely as necessary to provide, maintain, secure and support the Service and the functionality You request.
This license also permits Us to make Your Content available to collaborators and other users according to the sharing permissions You select.
The Company does not acquire ownership of Your Content.
You represent and warrant that You own the Content or have obtained all rights, licenses, permissions and authorisations necessary to upload, store, process and share it through the Service.
Where Content contains Personal Data concerning other individuals, You are responsible for ensuring that Your use of the Content complies with applicable data protection laws, including having an appropriate lawful basis, providing required notices and obtaining consent where necessary.
You must not upload Content that violates the privacy, publicity, copyright, contractual or other legal rights of another person.
Nothing in this provision excludes the Company’s own obligations under applicable law.
Where You are a business customer acting as a controller of Personal Data stored through the Service, the Data Processing Addendum below applies to processing performed by the Company on Your behalf.
Content Restrictions
You are responsible for the Content You upload and share and must ensure that Your use of the Service is lawful.
You must not knowingly upload special categories of Personal Data under Article 9 GDPR, including sensitive medical imagery, or personal data relating to criminal convictions and offences under Article 10 GDPR, unless expressly authorised under a separate written agreement with the Company.
You must not upload or distribute Content that:
Promotes or facilitates unlawful activity.
Unlawfully infringes intellectual property or privacy rights.
Contains viruses, malware or malicious code.
Impersonates another person or entity.
Constitutes unlawful harassment, threats or discrimination.
Contains spam or unauthorised commercial solicitations.
Otherwise violates these Terms or applicable law.
The Company may restrict access to or remove Content that violates these Terms or applicable law, subject to applicable notice, procedural and other legal requirements.
To report potentially unlawful Content, contact [email protected] and identify the relevant Content, its location and the reasons for the report.
Nothing in this section excludes liability that cannot lawfully be excluded.
Content Backups
We take reasonable measures to maintain the availability and integrity of Content stored through the Service.
However, no storage system can guarantee that data will never be lost or corrupted.
You should maintain independent copies of important Content and exported project files.
We will take reasonable steps to investigate and address storage or backup issues according to Our contractual and statutory obligations.
Nothing in this section excludes mandatory rights or liability that cannot lawfully be excluded.
Copyright Policy
Intellectual Property Infringement
We respect the intellectual property rights of others and respond to notices alleging that Content infringes those rights.
If You believe that Content infringes Your intellectual property rights, contact [email protected] with a description of the allegedly infringing material, its location and sufficient information to evaluate Your claim.
We may remove or restrict access to infringing Content where justified and permitted by applicable law.
DMCA Notices
Where applicable, copyright owners may submit notifications under the United States Digital Millennium Copyright Act (DMCA).
Notifications should identify the copyrighted work, the allegedly infringing material and its location, provide the claimant’s contact information and include the statements and signature required by applicable law.
Notices may be sent to [email protected].
This procedure does not restrict remedies available under other applicable copyright laws.
Intellectual Property
The Service and its original content, excluding Content provided by users, together with its software, features, design and functionality, remain the property of the Company and its respective licensors.
The Service is protected by applicable intellectual property laws.
Our trademarks and logos may not be used in a manner that falsely suggests affiliation or endorsement without prior written authorisation.
Nothing in these Terms transfers ownership of the Company’s intellectual property to You.
Your Feedback to Us
If You provide Feedback concerning the Service, You grant the Company a non-exclusive, perpetual, worldwide, royalty-free license to use, reproduce, modify and incorporate that Feedback into its products and services, to the extent permitted by law.
This provision does not transfer ownership of Content uploaded for use through the Service or override applicable data protection rights.
Links to Other Websites
The Service may contain links to third-party websites or services.
We do not control the independent content or practices of those websites and recommend reviewing their terms and privacy policies.
To the extent permitted by law, We are not responsible for losses arising from independent third-party services outside Our control.
Nothing in this section excludes mandatory consumer rights or liability that cannot lawfully be excluded.
Termination
We may suspend or terminate Your Account or access to the Service if You materially breach these Terms or where reasonably necessary for security or legal compliance.
Any restriction or termination is subject to applicable notice, opportunity to remedy and other requirements imposed by law.
Upon lawful termination, Your right to access the affected Service may cease.
Termination does not affect accrued contractual rights or mandatory statutory remedies.
You may stop using the Service at any time. Cancellation of a paid Subscription is governed by the Subscription Cancellations section.
Limitation of Liability
To the maximum extent permitted by applicable law, the Company and its suppliers shall not be liable for indirect, incidental, special or consequential losses arising from the use or inability to use the Service.
Nothing in these Terms excludes or limits liability that cannot lawfully be excluded, including liability for fraud, wilful misconduct, death or personal injury where applicable, or mandatory consumer rights concerning digital content and digital services.
For business customers, the Company’s aggregate contractual liability in connection with the Service shall not exceed the fees paid for the affected Service during the 12 months preceding the event giving rise to the claim, except where such limitation is prohibited by law.
“AS IS” and “AS AVAILABLE” Disclaimer
To the extent permitted by applicable law, the Service is provided on an “as is” and “as available” basis without additional voluntary warranties.
We do not guarantee uninterrupted operation or that the Service will meet every user’s individual expectations.
Nothing in this section excludes mandatory statutory warranties, consumer rights relating to digital content or digital services, or other rights that cannot lawfully be excluded.
Governing Law
These Terms shall be governed by and construed in accordance with the laws of the Republic of Croatia.
If You are a consumer, this choice of law does not deprive You of mandatory protections of the law of Your country of habitual residence where applicable.
Nothing in these Terms restricts Your right to bring proceedings before a court having jurisdiction under applicable consumer protection law.
Purchase transactions processed by FastSpring are governed separately by FastSpring’s Terms of Sale.
Disputes Resolution
If You have a concern or dispute regarding the Service, You may contact the Company to seek a resolution.
Consumers may submit written complaints concerning fylm.ai products and services to [email protected] or by post to the Company’s registered address.
We will acknowledge receipt without delay and provide a written response within 15 days stating whether We accept the complaint as justified.
Nothing in this section restricts Your right to pursue available legal remedies or alternative dispute resolution.
For payment, billing or refund inquiries concerning FastSpring purchases, You may also contact FastSpring Buyer Support.
For European Union Users
EU consumers benefit from mandatory consumer protection rules applicable to their contracts.
These may include rights concerning the supply and conformity of digital services, withdrawal, termination and statutory remedies.
Nothing in these Terms restricts such rights.
United States Federal Government End Use Provisions
If You are a United States federal government end user, the Service is a commercial product or commercial service for purposes of applicable US procurement regulations.
United States Legal Compliance
You agree that Your use of the Service will comply with applicable export-control and trade-sanctions laws.
Severability and Waiver
Severability
If a provision of these Terms is held unlawful, invalid or unenforceable, it shall be severed or limited to the minimum extent necessary without affecting the remaining provisions.
Waiver
Failure to enforce a provision does not constitute a waiver of that provision or any subsequent breach.
Translation Interpretation
These Terms may be made available in multiple languages.
Where applicable law requires contractual information to be presented in a particular language, those requirements apply.
No language-precedence rule overrides mandatory consumer rights.
Changes to These Terms
We may update these Terms from time to time.
Where a revision is material, We will make reasonable efforts to provide at least 30 days’ advance notice or such notice as applicable law requires.
Updated Terms generally apply to future use of the Service.
Changes affecting existing Subscriptions or contractual rights are subject to applicable law, including any required notice and rights of termination.
Continued use of the Service after updated Terms become effective may constitute acceptance where permitted by applicable law.
Contact Us
For questions concerning these Terms, contact:
G.T. GradeVision AI d.o.o.
Novi Goljak 7/C
10000 Zagreb, Croatia
OIB: 99767742988
Court Register Number (MBS): 081675502
Registered with the Commercial Court in Zagreb, Croatia.
Email: [email protected]
For billing, payment or transaction-related refunds, contact FastSpring Buyer Support.
Data Processing Addendum (GDPR Article 28)
This Data Processing Addendum (“DPA”) forms part of the fylm.ai Terms and Conditions and applies where a business customer uses the Service to process Personal Data for which the customer acts as a controller or as a processor authorised by another controller under the GDPR.
This DPA is accepted together with the Terms and Conditions through the account registration or acceptance process, unless a separate written data processing agreement has been concluded between the parties.
1. Parties and Roles
Customer: The business customer using the Service.
Service Provider: G.T. GradeVision AI d.o.o., Novi Goljak 7/C, 10000 Zagreb, Croatia, OIB: 99767742988, trading as fylm.ai.
Where the Customer determines the purposes and means of processing Personal Data contained in uploaded Content, the Customer acts as Controller and the Company acts as Processor.
Where the Customer acts as a processor for another controller, the Company acts as a sub-processor, provided the Customer has obtained any necessary authorisation.
The Customer is responsible for determining the applicable lawful basis for processing Personal Data in its Content.
The Company processes such Personal Data only to provide the requested Service and in accordance with this DPA.
This DPA does not apply to processing for which the Company acts independently as Controller, including Account administration, security, billing-related service records and direct customer communications.
2. Subject Matter, Nature, Purpose and Duration
The subject matter of processing is the storage, retrieval, transmission, synchronisation, sharing, thumbnail generation, deletion and related management of Personal Data contained in customer Content and project files.
The purpose is to provide the cloud storage, project management, collaboration and related functionality selected by the Customer.
Image editing, colour grading and AI-assisted image editing are performed locally on the user’s Device.
Where cloud storage is used, Content is stored using Amazon Web Services (AWS), including Amazon S3, in an AWS region located in Germany.
The Service may generate thumbnails on its servers as necessary to provide preview and project management functionality.
Processing continues for the duration of the Customer’s use of the Service and any subsequent period necessary for deletion, backup expiration or legally required retention.
3. Categories of Data Subjects and Personal Data
Data subjects may include:
The Customer’s employees, team members and collaborators.
The Customer’s clients.
Individuals appearing in uploaded photographs or videos.
Other identifiable individuals whose Personal Data is included in uploaded Content.
Personal Data may include:
Images, videos and other visual representations.
Names, identifiers and associated metadata.
Project comments, annotations and collaboration information.
Other ordinary Personal Data included in customer Content.
The Service is not designed or authorised for processing special categories of Personal Data under Article 9 GDPR or personal data relating to criminal convictions and offences under Article 10 GDPR.
Customers must not knowingly upload such restricted data, including sensitive medical imagery, unless a separate written agreement expressly authorises the processing and establishes the necessary safeguards.
The Customer determines the categories and content of Personal Data uploaded through the Service.
4. Documented Instructions
The Company shall process Personal Data on behalf of the Customer only on documented instructions, including instructions given through use of the Service, Account settings, sharing permissions and applicable agreements.
The Company shall not process such Personal Data for unrelated purposes.
If the Company is required to process Personal Data under EU or Member State law, it shall inform the Customer before processing unless prohibited by applicable law.
The Company shall inform the Customer without undue delay if, in its opinion, an instruction infringes applicable data protection law.
5. Confidentiality and Access
The Company shall ensure that persons authorised to process Personal Data are subject to appropriate confidentiality obligations.
Access to private customer Content is restricted to authorised personnel and is not performed as part of routine manual inspection of customer files.
Authorised personnel may access private Content only where legally required, in accordance with applicable law and internal access-control procedures.
6. Security Measures
The Company shall implement appropriate technical and organisational measures in accordance with Article 32 GDPR.
These measures include:
Encryption of Personal Data during transmission using HTTPS/TLS.
Encryption of customer Content stored in Amazon S3.
Multi-factor authentication for privileged administrative and AWS access.
Access restrictions limiting access to authorised personnel.
Appropriate technical controls to protect the confidentiality and integrity of stored Content.
Security monitoring and incident-response procedures.
Backup and recovery measures.
Periodic review of security controls.
The Company shall maintain appropriate procedures for detecting, investigating and responding to security incidents.
The Customer remains responsible for protecting its own Account credentials and managing user access permissions.
7. Sub-processors
The Customer specifically authorises the following sub-processor:
Amazon Web Services (AWS)
Purpose: Cloud infrastructure, storage, backups and related processing necessary to provide the Service.
Primary customer Content storage location: Germany.
The Company shall not engage an additional or replacement sub-processor to process customer Content without obtaining the Customer’s prior specific written authorisation.
Such authorisation may be obtained electronically through a documented acceptance process.
The Company shall provide sufficient information for the Customer to evaluate the proposed sub-processor before granting authorisation.
Failure to respond to a request for specific authorisation shall not constitute approval.
The Company shall ensure that authorised sub-processors are subject to contractual data protection obligations providing the protections required by Article 28 GDPR.
The Company remains responsible to the Customer for the performance of its sub-processors’ data protection obligations.
8. Assistance with Data Subject Rights
Taking into account the nature of processing and the information available, the Company shall provide reasonable assistance to the Customer in responding to requests from individuals exercising their GDPR rights.
Such assistance may include accessing, exporting, correcting or deleting Personal Data stored through the Service.
The Customer remains responsible for determining how to respond to requests relating to Personal Data for which it acts as Controller.
9. Personal Data Breaches
The Company shall notify the Customer without undue delay after becoming aware of a Personal Data breach affecting Personal Data processed on the Customer’s behalf.
The Company shall provide reasonably available information concerning the nature of the breach, its likely consequences and measures taken or proposed to address it.
The Company shall provide reasonable assistance to the Customer in fulfilling applicable obligations under Articles 33 and 34 GDPR.
10. Compliance Assistance
Taking into account the nature of processing and information available, the Company shall reasonably assist the Customer in complying with applicable obligations under Articles 32 to 36 GDPR.
This includes, where applicable, assistance with security requirements, data protection impact assessments and prior consultation with supervisory authorities.
11. International Transfers
The Company shall process and store customer Content in the configured AWS infrastructure in Germany.
Any transfer of Personal Data outside the European Economic Area, including remote access constituting an international transfer, shall take place only on documented instructions or where required by applicable EU or Member State law, and in compliance with Chapter V GDPR.
Where applicable, appropriate safeguards shall be implemented, including adequacy decisions or Standard Contractual Clauses.
12. Deletion and Return of Data
Customers may delete their Content through the functionality provided by the Service.
Deletion from active storage is performed promptly following the applicable deletion request.
Deleted Content may remain in backup systems for up to 30 days before being permanently removed through the normal backup expiration process.
During that period, backup copies shall remain subject to appropriate security and access restrictions and shall not be used for unrelated processing.
Upon termination of the relevant Service, the Company shall, at the Customer’s choice, return or delete Personal Data processed on the Customer’s behalf and delete remaining copies, subject to the backup expiration period and any retention required by applicable EU or Member State law.
The Company may retain information for which it acts independently as Controller where continued retention is lawful.
13. Audits and Demonstration of Compliance
The Company shall make available information reasonably necessary to demonstrate compliance with its obligations under Article 28 GDPR.
Where appropriate, existing security documentation, audit reports and other relevant information may be used to demonstrate compliance.
The Company shall allow for and contribute to audits, including inspections, conducted by the Customer or an independent auditor mandated by the Customer, as required by Article 28 GDPR.
Audits shall be coordinated with reasonable advance notice where practicable, confidentiality protections and safeguards for the security and information of other customers, without restricting mandatory statutory audit rights.
14. Customer Responsibilities
The Customer is responsible for:
Having an appropriate lawful basis for processing Personal Data included in Content.
Obtaining necessary rights, permissions and authorisations for uploaded Content.
Providing required privacy notices to individuals.
Obtaining consent where legally necessary.
Ensuring restricted categories of Personal Data are not uploaded in violation of this DPA.
Configuring Account and collaboration permissions appropriately.
Determining appropriate retention periods.
Ensuring instructions to the Company comply with applicable law.
Nothing in this section excludes the Company’s own obligations under applicable data protection law.
15. Liability and Governing Law
Each party remains responsible for its obligations under applicable data protection law.
Nothing in this DPA excludes or restricts liability that cannot lawfully be excluded under the GDPR or other applicable law.
This DPA is governed by the laws of the Republic of Croatia, without prejudice to mandatory EU data protection law.
If this DPA conflicts with the general Terms concerning Personal Data processed on behalf of a business customer, this DPA shall prevail for that processing.
Where a separate written data processing agreement is concluded with an Enterprise or other business customer, that agreement shall prevail to the extent it expressly replaces or modifies this DPA.
16. Contact
For questions concerning this DPA, contact:
G.T. GradeVision AI d.o.o.
Novi Goljak 7/C
10000 Zagreb, Croatia
OIB: 99767742988
Email: [email protected]