Privacy Policy

What information Framivio handles and who can access it.

1. Data handled by the service

The service handles account email addresses, authentication credentials through Supabase Auth, public usernames and profile information, uploaded photos and videos, titles and tags, family invitations and permissions, buyer requests and proposals, reports, and agreement records. Purchasing also involves order, license, payment-reference, and download-authorization records. Do not include unnecessary personal information in filenames, descriptions, or support reports.

2. Purpose and visibility

Information is used to provide accounts, display chosen public profiles and listings, operate private collections, validate permissions, prevent abuse, and respond to reports. Your account email is not included in your public creator-profile response. Public listings and profiles can be copied or indexed by others. Family originals are stored privately and accessed through authorization checks and temporary links. Necessary authorized operators and infrastructure providers may process private data to run and secure the service; it is not end-to-end encrypted.

3. Service providers and external content

Framivio uses Supabase for authentication, database and media storage, and Vercel for hosting. Public marketplace uploads have a separate safety-review disclosure. An OpenAI moderation integration runs on a Render background worker; listing text and reduced images or sampled video frames are sent to OpenAI for safety screening. Private family-vault media is excluded from that external AI pipeline. Designated moderators may review submitted marketplace originals in a restricted review view. Some demonstration photographs are loaded from external image hosts, which receive ordinary web-request information such as IP address. If you choose Google sign-in, Google supplies the account details you authorize. Stripe handles payment processing and creator bank onboarding. Resend handles configured transactional email delivery. Provider regions, international-transfer safeguards, and a complete subprocessor inventory remain subject to verification and professional review.

4. Cookies and local storage

Authentication uses essential session cookies. The disconnected demonstration may store saved listings, cart selections, requests, and draft metadata in your browser. Security and hosting providers may process request logs for service operation. This implementation does not add advertising trackers or optional analytics. Review the Cookies & Storage Notice for details; optional tracking must not be added under this agreement without the required notice and controls.

5. Safety and agreement records

Username moderation stores limited rejection outcomes, rule identifiers, and pattern flags; decision records do not contain the raw attempted username or IP address. Rate limiting uses a keyed hash of the trusted client IP for username checks. Review appeals contain the name and explanation you deliberately submit. Agreement records include your account identifier, document version, server-recorded time, and acceptance source. Checking the agreement box is not consent to marketing or a blanket waiver of privacy rights.

6. Retention and deletion

Current username-decision cleanup removes records older than 30 days when checks or administrative cleanup run. Closed username appeals are eligible for cleanup after 90 days; open appeals remain until reviewed. This is an opportunistic cleanup process, not a guaranteed daily purge. General account, original-media, backup, agreement-record, and transaction retention periods are not yet finalized. Account deletion and data export are not self-service. Contact framiviosupport@gmail.com for a request; the detailed retention schedule remains to be finalized; no immediate or universal deletion promise is made.

7. Rights and children’s privacy

Depending on your location, you may have rights concerning access, correction, deletion, portability, objections, and complaints. Identity must be verified before releasing private information. Family collections can include children’s memories uploaded by authorized adults, but the service is not intended for independent child account use. Public sales of identifiable children’s images are prohibited in this initial version. Age eligibility, parental-consent requirements, and applicable local privacy rights must be professionally reviewed.

8. Privacy contact

Send privacy requests to framiviosupport@gmail.com. The service operates under the name Framivio Productions. Business mailing details and jurisdiction-specific legal bases remain to be finalized with professional advice.