Privacy Policy

Effective May 13, 2026

This Privacy Policy explains how framesail (“framesail,” “we,” “us”) collects, uses, and shares information when you use our website and services (the “Service”). By using the Service, you agree to the practices described here.

Information we collect

We collect the following categories of information:

  • Account information. When you sign up, we collect your email address and authentication identifiers (e.g. your Google account ID if you sign in with Google).
  • Content you create. Scripts, prompts, uploaded images and audio, generated images, videos, and voiceovers, project metadata, and any other content you produce in the Service.
  • Billing information. If you purchase a paid plan or credits, our payment processor (Stripe) collects your payment details. We receive the subscription status, plan, and a customer identifier — we do not store your card number.
  • Usage and device data. Pages viewed, features used, approximate location derived from IP address, browser type, operating system, and error reports. We use this to operate, improve, and debug the Service.
  • Cookies and similar technologies. Used for authentication, session persistence, and analytics.

How we use information

  • Provide, maintain, and improve the Service.
  • Generate videos, images, voiceovers, and other content you request, using AI models from third-party providers.
  • Process payments and manage subscriptions.
  • Communicate with you about your account, security, and product updates.
  • Detect, investigate, and prevent fraud, abuse, and violations of our terms.
  • Comply with legal obligations.

Sub-processors and third-party services

We use the following service providers to operate the Service. Your information may be transmitted to and stored or processed by these providers under their respective terms:

  • Supabase — authentication and database hosting.
  • Backblaze B2 — object storage for your uploaded and generated media.
  • Stripe — payment processing and subscription management.
  • Google — sign-in with Google (OAuth).
  • AI model providers — including Google (Gemini), OpenAI, Anthropic, fal.ai, ElevenLabs, and MiniMax. Prompts, scripts, and reference media you submit are sent to the provider corresponding to the job being run, in order to generate the requested output. Outputs are returned to us and stored against your account.
  • PostHog — product analytics and error tracking.
  • Hosting and infrastructure — including Netlify and similar providers used to host the Service.

We do not sell your personal information. We do not share your content with third parties for advertising or model-training purposes outside of the providers required to fulfill the generation jobs you initiate.

Data retention

We retain your account and content for as long as your account is active. If you delete a project or asset, it is removed from your dashboard immediately; backups and provider caches may retain copies for a limited period before being purged. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required by law (for example, billing records). Please send an email to [email protected] to delete your account.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at [email protected]. You can also delete most account data directly from your account settings.

Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS) and access controls on our systems. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.

Children

The Service is not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.

International users

The Service is operated from the United States and our providers may process data in other countries. By using the Service, you consent to the transfer of your information to jurisdictions that may have different data protection rules than your own.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you by email or in-app notice.

Contact

Questions or requests about this policy? Email [email protected].