FrameFusion This Privacy Policy applies to the FrameFusion Studios website, hosted studio, and desktop application. It does not cover third-party websites or services that we link to, including our payment provider’s checkout and payment pages.
1. Who is responsible for your data
FrameFusion Studios (“FrameFusion”, “we”, “us”) is the controller of the personal data described in this policy. We are based in Pakistan. You can contact us at aliawaan@framefusionstudios.com.
Creem acts as the merchant of record for payments and handles payment data under its own privacy notice. It is an independent controller of the payment information it collects.
2. What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Account data | Email address, password hash, account ID, plan, signup date, session records. | You, when you register or sign in. |
| Creative content | Videos and links you save, notes, ideas, scripts, collections, persona settings, chat messages, and exports. | You, or the sources you connect or paste into the studio. |
| Usage data | Feature usage, quota counts, request metadata, timestamps, error and security logs, approximate region derived from IP. | Your use of the Service and our servers. |
| Billing data | Plan, subscription status, payment-provider customer and subscription IDs, tax country, receipts. We do not receive full card numbers. | our payment provider and your checkout session. |
| Support data | Messages you send to support and any files or details you choose to include. | You. |
We do not intentionally collect special-category data such as health, biometric, religious, or political information. Please do not upload it to the studio or include it in AI prompts.
Research data. Video metadata and public comments are read from the official YouTube Data API and shown with attribution. We do not store another creator’s transcript: if you paste one, it is reduced to a derived summary and the source text is discarded. Cached provider data is deleted within 30 days, and Instagram and TikTok are not supported because no licensed data route exists for them.
Your transcript text. A transcript you paste is processed to produce a workflow summary. The text itself is not written to our database, is not returned to you, and is not used to train any model.
3. How we use your information
- Create and secure your account, sign you in, and keep your workspace separate from other users.
- Provide the studio: research, analysis, drafts, collections, persona mentors, automations, and exports.
- Apply Free and Pro limits and confirm entitlements after a purchase.
- Process payments through our payment provider, issue receipts, and manage subscriptions, cancellations, and refunds.
- Respond to support requests and investigate problems or abuse.
- Protect the Service through rate limits, fraud prevention, security monitoring, and backups.
- Improve features using aggregated or de-identified usage information, without using your private creative content to advertise to you.
- Comply with legal obligations and enforce our Terms of Service.
4. Legal bases for processing
Where data-protection law requires a legal basis, we rely on:
- Contract: to provide the Service, manage your account, and process subscriptions.
- Legitimate interests: to secure, maintain, and improve the Service, prevent abuse, and communicate service information.
- Legal obligation: to keep records, respond to lawful requests, and meet tax or accounting requirements.
- Consent: where we ask for it, such as optional communications. You can withdraw consent at any time.
5. Cookies, local storage, and the desktop app
We use a small number of essential cookies and local-storage entries to keep you signed in, protect forms against cross-site requests, remember interface preferences, and maintain security. We do not use advertising cookies or sell cookie data.
The desktop app stores its session in an isolated Electron profile on your device. It loads the hosted studio, so the same account and privacy practices apply. Clearing the app’s data signs you out and removes local preferences.
Our payment provider may set cookies and similar technologies on its checkout pages to process payments, prevent fraud, and measure checkout performance. Please review the payment provider’s privacy notice for details.
6. Who we share information with
We share only what is needed to run the Service:
- Payment provider — payment processing, tax, receipts, subscription management, and refunds.
- Hosting and infrastructure providers — servers, storage, backups, security, and email delivery.
- AI model providers — the prompts and content needed to generate the response you request. We do not send your password or payment data to AI providers.
- Analytics and diagnostics providers — limited technical data to keep the Service reliable and secure.
- Professional advisers and authorities — where required by law, to protect rights, or in connection with a reorganisation.
We do not sell your personal data. We may publish aggregated statistics that cannot reasonably identify you.
7. International transfers
Our providers may process data in countries other than yours. Where required, we use appropriate safeguards such as standard contractual clauses or rely on lawful transfer mechanisms. The protections in this policy travel with your data.
8. How long we keep information
- Account and workspace data: while your account is active. After deletion, we remove active data within 30 days, unless we must retain it for legal or security reasons.
- Backups: encrypted backups may persist for up to 90 days before rotating out.
- Billing and tax records: for the period required by applicable law and the payment provider’s record-keeping obligations.
- Security logs: normally up to 12 months, or longer when investigating abuse.
- Support messages: up to 24 months after the request is resolved.
9. Security
We use HTTPS, hashed passwords, isolated per-account workspaces, access controls, rate limits, and backups. No internet service can promise perfect security. Please use a strong, unique password and contact us immediately if you suspect unauthorised access.
10. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to receive a portable copy, or to withdraw consent. You can also ask us not to send optional communications.
To make a request, use the Help Center in your account from the address associated with your account. We may need to verify your identity. You can also complain to your local data-protection authority; in the EU/EEA, that is your national supervisory authority.
You can delete your account from the studio or by contacting us. Some records may be retained where the law requires it.
11. Children
The Service is intended for adults. It is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided data, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the Service or the law changes. We will post the new version here and update the date above. If a change materially affects how we use your data, we will provide reasonable notice. Continued use after the effective date means the updated policy applies.
13. Contact
Privacy questions, access requests, or concerns:
- Use the Help Center inside your FrameFusion studio account.
- Mark privacy requests for the privacy team.
- Operator: Abdul Ali, Flat 306, Sara Block, Shama Apartments, Lahore 54000, Pakistan
- Contact: aliawaan@framefusionstudios.com