Privacy Policy
Effective date: May 20, 2026
1. Overview
FrameFlux ("we", "us", or "our") operates the FrameFlux Studio web application located at frameflux.app (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have regarding your information.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Account Information
When you create an account or sign in, we receive certain information from your identity provider (Google). This includes your name, email address, profile photo URL, and a unique identifier (UID) used to identify your account internally.
2.2 Project and Content Data
The Service lets you create and save projects — including clips, scenes, text overlays, shapes, audio tracks, and media assets (images, video, fonts, icons). This content is stored in your account on our behalf using Google Firebase Firestore and Firebase Storage.
Project metadata (title, canvas dimensions, timestamps, type) and associated brand kit preferences are also stored as part of your account.
2.3 Subscription and Billing Data
If you subscribe to a paid plan, we work with Stripe, Inc. to process payments. We store a Stripe customer ID and subscription status in your account record to manage feature access. We do not store your full payment card details — those are handled exclusively by Stripe and subject to their Privacy Policy.
2.4 Usage and Analytics Data
We use Firebase Analytics (provided by Google) to understand how the Service is used. This may include pages visited, features used, session duration, and device or browser type. This data is collected in aggregate and is used solely to improve the product.
2.5 Session Cookies
We use a session cookie (frameflux_session) to maintain your authenticated session. This cookie is necessary for the Service to function and is deleted when you sign out.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Authenticate your identity and manage your account
- Process subscription payments and manage feature access tiers
- Store and retrieve your projects and brand assets
- Understand how the Service is used and improve product quality
- Respond to customer support inquiries
- Comply with legal obligations
We do not sell your personal information to third parties. We do not use your content (projects, assets, brand kit) for advertising or marketing purposes.
4. Third-Party Services
We rely on the following third-party service providers to operate the Service:
Google Firebase
Firebase provides authentication, database (Firestore), file storage, and analytics infrastructure for the Service. Data is processed under Google's terms. Firebase Privacy and Security.
Stripe
Stripe processes all payment transactions. When you enter payment details, they are submitted directly to Stripe and never touch our servers. Learn more at stripe.com/privacy.
5. Data Retention
We retain your account data, projects, and assets for as long as your account is active. If you delete your account, we will delete or anonymize your personal data and associated content within a reasonable time, subject to any legal obligations to retain certain records.
Individual projects can be deleted at any time from within the application, which removes them from Firestore and Firebase Storage.
6. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request corrections to inaccurate or incomplete data.
- Deletion: Request deletion of your account and associated data.
- Portability: Request a copy of your data in a portable format.
- Opt-out of analytics: You can disable Firebase Analytics by using browser privacy settings or extensions that block Google Analytics.
To exercise any of these rights, contact us at privacy@frameflux.app.
7. Data Security
We take reasonable technical and organizational measures to protect your information, including encrypted data transmission (HTTPS), server-side session tokens, and role-based access to production systems.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.
8. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For material changes, we may provide additional notice (such as a notification in the application). Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
FrameFlux
privacy@frameflux.app