Privacy Policy

Last updated: February 17, 2026

1. Information We Collect

When you use FrameFlow, we may collect:

• Account information: Email address and name when you sign up.
• Usage data: Pages visited, features used, and scroll-video exports created.
• Uploaded content: Videos you upload for processing. These are temporarily stored during processing and deleted after export.
• Payment information: Processed securely through Stripe. We do not store credit card numbers.

2. How We Use Your Information

• To provide and improve the FrameFlow service.
• To process your video exports and deliver results.
• To communicate service updates and respond to support requests.
• To monitor and prevent abuse of the platform.

3. Third-Party Services

We use the following third-party services:

• Stripe: Payment processing.
• Supabase: Authentication and data storage.
• AI Providers (Runway, Replicate, Luma, Kling, Minimax, Pika, Stability AI, Google Veo, Hailuo, Genmo, ElevenLabs): Video and audio generation when you use BYOK (Bring Your Own Key). Your API keys are encrypted at rest with AES-256-GCM.
• Plausible Analytics: Privacy-focused, cookieless website analytics. No personal data is collected.

4. Data Retention

• Uploaded videos are deleted within 24 hours of processing.
• Export files are retained based on your plan (Free: 7 days, Paid: indefinitely while subscribed).
• Generated audio files (narration, sound effects) follow the same retention as exports.
• Account data is retained until you delete your account.

5. Data Deletion

When you delete your account or when files expire, all associated data is permanently removed from our storage infrastructure. Deleted files are unlinked and overwritten during routine storage compaction. API keys are securely wiped from the database immediately upon deletion.

6. Cookies

FrameFlow uses only essential cookies for authentication and session management. We do not use tracking cookies. Our analytics provider (Plausible) does not use cookies.

7. Your Rights

You have the right to:

• Access your personal data.
• Request correction or deletion of your data.
• Export your data at any time.
• Delete your account, which removes all associated data.

8. Security

We use industry-standard security measures including HTTPS encryption, encrypted API key storage (AES-256-GCM), rate limiting, and input validation.

9. Contact

For privacy-related questions, email privacy@frameflow.sh.