Privacy Policy

This Privacy Policy explains how Framy ("we", "us", "our") handles personal information when you visit https://framy.video, use the editor, upload media, export a mockup, buy export credits, or contact us. It applies together with our Terms of Use and Refund Policy.

1. Who we are

Framy is a browser editor that places screen recordings and images inside device frames and exports mockup videos and images. The service is operated from Poland under the Framy brand. For privacy requests, email hello@framy.video or use our contact form.

If European data-protection law applies, we are the controller of the personal information described here, except for payment card data, which is collected and processed by our payment provider as described below.

2. Information we collect

Depending on how you use Framy, we process:

• Session identifier. A random ID in an httpOnly cookie named framy_sid, plus related browser storage, so your projects, uploads, exports, and purchased credits stay tied to this browser. It is not used for cross-site advertising.
• Email address. The address you enter at checkout or for an export, and the address you send with a contact message. We store the buyer email on the session and on the export job so we can deliver the file, match a payment to credits, and handle refunds or support.
• Purchase records. Pack size, price, order or receipt reference, payment status, and the credits added to your session. Our payment provider processes the card or wallet payment. We do not receive or store your full card number or card security code.
• Files and project data. Videos, images, and other media you upload, plus editor state such as device, layout, text, and background.
• Exports. The MP4, PNG, or other file we render from your project, and technical details of the job (resolution, status, timestamps).
• Messages. The email and text you submit through the contact form or send to our support inbox.
• Technical and security data. IP address, user agent, language, request time, and similar logs from our website, API, and hosting, used for security, rate limits, and troubleshooting.
• Analytics, if you allow it. Usage events from PostHog, Google Analytics, and Microsoft Clarity, which can include pages viewed, approximate location derived from IP, device type, and, for Clarity and PostHog, session replay or error traces. You can decline this in the cookie banner. Feature flags may still be evaluated so the product can ship safely.

You do not create a password account. Access is session-based. If you clear cookies or switch browsers, that session and its credits are no longer available from the new browser unless we can match a later purchase or support request to the same email.

3. How we use information

• Run the editor, store your project, and render the export you request
• Sell one-time export-credit bundles, add credits after payment, and spend them on high-quality exports
• Send download access and answer support, refund, and legal requests
• Keep one session from reading another session's files
• Limit abuse, fraud, and automated scraping, including free-export rate limits
• Measure and improve the product when analytics is allowed
• Keep records we need for tax, accounting, and disputes

We do not sell personal information, and we do not use it for third-party advertising.

4. Legal bases

Where the GDPR or UK GDPR applies, we rely on:

• Contract — to provide the editor, deliver exports, and perform a purchase you start
• Legitimate interests — security, fraud prevention, product reliability, and understanding aggregate use, balanced against your rights
• Consent — for optional analytics cookies and similar tracking, which you can refuse or withdraw in Cookie settings
• Legal obligation — tax, accounting, and lawful requests from authorities

5. Payments

Checkout uses Stripe Managed Payments. Stripe (including Link) is the merchant of record, collects payment, and remits applicable sales tax / VAT. The price shown is tax-inclusive. The name on your card statement may show Stripe, Link, or a related descriptor. Stripe's privacy notice applies to the payment data they process. We receive the information we need to grant credits and support the order, such as email, amount, pack size, and a transaction reference. Stripe may also contact you about the payment, receipts, or payment disputes as merchant of record.

6. Cookies and similar storage

On the production site we use:

• Strictly necessary. framy_sid and related session or local storage for the editor, checkout, credits, landing-preview handoff, and your cookie choice. The product does not work without these.
• Analytics, optional. PostHog, Google Analytics (gtag.js), and Microsoft Clarity. If you decline analytics, we stop that storage and event capture. Necessary session and checkout cookies continue.

You can reopen the choice from Cookie settings in the editor. We do not use third-party advertising cookies.

7. Who we share information with

• Infrastructure providers that host the website, API, database, and private file storage
• The payment provider that processes the purchase
• Analytics providers named above, only when analytics is allowed
• Professional advisers or authorities when the law, a court, or the protection of rights and security requires it

Uploaded media and exports stay in private storage. Other customers cannot open them through the product.

8. International transfers

We operate from Poland. Hosting, payment, and analytics providers may process data in other countries, including outside the European Economic Area. Where the law requires it, we use an appropriate transfer tool, such as the European Commission's standard contractual clauses, or we rely on an adequacy decision.

9. How long we keep it

We keep personal information only as long as we need it for the purposes above, then delete or anonymize it, unless a longer period is required by law.

• Project files and exports: while the session is active and for a limited period afterward, then deleted as storage is cleaned up
• Purchase and credit records: for as long as the credits can still be used and for the period we must keep accounting and refund records
• Contact messages: until the request is resolved and for a short support archive after that
• Security logs: for a limited period needed to investigate abuse

10. Your rights

If the GDPR or a similar law applies, you can ask to access, correct, delete, or restrict your personal information, object to certain processing, and receive a portable copy. Where we rely on consent, you can withdraw it at any time. You can also complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office (UODO).

Email hello@framy.video or use the contact form. We may need the buyer email or session details to find the right record. Because there is no password account, deleting browser storage starts a new session and does not by itself delete copies already stored on our servers — ask us if you want those removed.

11. Children

Framy is not directed at children under 16. We do not knowingly collect personal information from them. Purchases are only for people who are 18 or older, or the age of majority where they live. Contact us if you believe a child has provided data and we will delete it.

12. Security

We use HTTPS, private object storage, session checks on files and downloads, and rate limits. No method of transmission or storage is completely secure.

13. Changes

We may update this policy. The date at the top is the latest version. If a change materially affects how we use personal information, we will post the new policy on this page before it applies.

14. Contact

Privacy questions or requests: hello@framy.video or the contact form.