Privacy policy

Terms of service

Applies from 2026-11-01.

These terms apply between Irsta Bild AB (“we”) and you who create an account in Framkalla as a photographer or print lab (“you”). Creating an account means you accept them, including the data processing agreement at the end.

1. The service

Framkalla is a web service for photographers and print labs: storing and sharing photos in galleries, clients’ selections, ordering prints and photobooks from labs, and selling to clients. It is meant for businesses and for people over 18 using it in their work.

2. Your account

Give correct details and keep them up to date. Keep your password to yourself; you are responsible for what is done with your account. Tell us at once if you think someone else has used it.

3. Plans and payment

Photographers can use the service free up to the storage the free plan includes. Bigger plans cost what the site shows when you choose them and are paid monthly in advance, by card or by invoice by arrangement. A plan renews each month until you end it; it then runs to the end of the month already paid, without refund for that month. If we change a plan’s price, we tell you by email at least 30 days before it applies to you. If payments stop, the account goes back to the free plan. Nothing is deleted then: galleries, sales and orders go on, but new uploads are refused while the photos take more space than the plan includes.

4. Your content

You keep all rights to the photos and texts you upload. You give us the right to store, copy, resize and show them only as needed to provide the service to you and the people you share with. You are responsible for having the rights to what you upload and, where the law requires it, the consent of the people in the photos (for children: their guardians’).

5. Acceptable use

You may not use the service for anything illegal, for material that infringes others’ rights, that sexualises children or that is meant to harass, nor to spread malware or spam, nor in ways that overload or try to get around the service’s protections. We may remove such material and suspend accounts that break these rules, and report crimes to the police.

6. Orders and sales

When a photographer orders prints or photobooks, the agreement for that order is between the photographer and the lab, on the lab’s prices and terms. When a photographer sells photos or prints to clients through the service, the photographer is the seller, and payment goes to the photographer’s Stripe account. We provide the service that makes this possible, but are not a party to those agreements.

7. Availability and backups

We work to keep the service available and the data safe: every photo is stored in several copies and the database is backed up every night. We cannot promise that the service is never interrupted, and we may pause it for maintenance. Keep your own copies of your original files.

8. Liability

Our liability towards you is limited to what you have paid us in the last 12 months, and we are not liable for indirect loss such as lost profit or lost business. These limits do not apply to damage we cause intentionally or through gross negligence, or where the law does not allow them.

9. Ending

You can stop using the service and ask us to close your account at any time. We can close an account with 30 days’ notice, or at once if the terms are seriously broken. When an account is closed, its content is deleted within 30 days; download what you want to keep before then. Invoices and orders are kept for as long as the Bookkeeping Act requires.

10. Changes to the terms

We tell you by email at least 30 days before changes in substance apply. If you don’t accept them, you can close your account before then.

11. Law and disputes

Swedish law applies. Disputes are settled by Swedish courts.

12. Data processing agreement

This agreement is part of the terms and meets the requirements of the GDPR, article 28. You are the controller and we are your processor for the personal data you put in the service.

1. What is processed: photos (which may show people, including children), names, email addresses, phone numbers, delivery and billing addresses, selections, comments and orders of your clients, their guests and the people in your photos, and the data of your own staff.
2. Why and how: only to provide the service: storing, copying, resizing, showing, searching, sending and deleting, as you direct through the service. The terms and your use of the service are your instructions; we follow no others unless the law requires it, and then tell you if allowed.
3. For how long: while your account exists, and then until the data has been deleted as section 9 and our privacy policy describe (deleted items and backups: 30 days).
4. Confidentiality: only people who need it for their work have access to the data, and they are bound to confidentiality.
5. Security: we take the technical and organisational measures article 32 requires, among them encrypted connections, hashed passwords, signed short-lived links to photos, limited and logged staff access, and backups.
6. Sub-processors: you approve the sub-processors below. We tell you by email at least 30 days before adding or replacing one; if you object, you may end the agreement before the change. We bind every sub-processor to the same obligations as these.

   Amazon Web Services EMEA SARL	Storing photos and files; backups	Stockholm, Sweden
   Amazon Web Services EMEA SARL	Sending email	London, United Kingdom
   Hetzner Online GmbH	Servers that run the service and its database	Helsinki, Finland
   Stripe Payments Europe Ltd	Card payments	Ireland (and the US under the EU–US Data Privacy Framework)

7. Transfers outside the EU/EEA only happen as the GDPR’s chapter V allows (an adequacy decision, the EU–US Data Privacy Framework or standard contractual clauses).
8. Help with your obligations: we help you answer requests from the people whose data it is (most you can do yourself in the service, such as deleting galleries, clients and comments), and with security, impact assessments and consultations with the authority, as far as can be expected.
9. Personal data breaches: we tell you without undue delay, and within 48 hours of learning of it, with what we know, so that you can report it within 72 hours.
10. When it ends: you can download your data before your account closes; afterwards we delete it as point 3 says, unless the law requires us to keep it.
11. Audits: we give you the information needed to show that this agreement is followed, and allow reasonable audits, at your cost, with reasonable notice.

Who we are

Irsta Bild AB
Org. no. 556309-4902
Hägersborgsvägen 10, 723 55 Västerås, Sweden
info@monsym.se