Information we collect

We collect only what we need to operate your site and our platform:

• Account & owner details — your name and email, used to sign in and contact you.
• Business / legal identity — legal name, business type, phone, business email, and address, used for invoicing, notices, and to set up payouts. We never collect or store your SSN, EIN, bank account, or government-ID numbers — our payments provider (Stripe) collects and holds those directly.
• Content & its metadata — the photos and text you upload, including technical metadata embedded in your images (such as camera details and, where present, GPS location).
• Usage & analytics — limited information about visitors to your site (a visitor identifier cookie, IP address, approximate country, referrer, device/browser, and pages viewed) so you can see your traffic.
• Consent records — the version of our Terms and this Policy you accepted, with the date and IP address, as evidence of agreement.

How we use it

We use this information to:

• Provide, operate, secure, and improve the platform and your site.
• Set up and process payments and payouts (via Stripe) and send invoices.
• Communicate with you about your account, security, and service changes.
• Show you analytics about your site's traffic.
• Comply with our legal obligations and enforce our Terms.

How we share it

We do not sell your personal information. We share it only with the service providers (sub-processors) that help us run the platform, under contracts that limit them to that purpose:

• Stripe — payments, payouts, and the identity verification required by financial regulation.
• Cloudflare R2 / Bunny.net — storage and delivery of your images.
• Our email provider — to send transactional email (invites, password resets, notices).
• Our hosting and database providers — to run the application.
• Legal/safety — where required by law, or to protect the rights, safety, and property of you, us, or others.

Cookies & analytics

We set a long-lived visitor cookie to count unique visitors and a session cookie to keep you signed in. We use the resulting analytics only to provide traffic insights; we do not use third-party advertising trackers.

Retention

We keep your account and business information for as long as your account is active and as needed to provide the service, meet legal and tax obligations, and resolve disputes. Raw analytics events are pruned on a rolling window and kept only in aggregate after that. When you delete your account, we remove your content and personal data, except records we are required to retain (such as consent and transaction records).

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can exercise these rights by contacting us, and we will respond within the timeframes the applicable law requires. You will not be discriminated against for exercising them.

California residents

If you are a California resident, the California Consumer Privacy Act (as amended) gives you the right to know what personal information we collect about you and how we use and share it (this Policy is that disclosure), to access it, to correct it, to delete it, and to receive it in a portable format. We do not sell your personal information and we do not share it for cross-context behavioral advertising, so there is no need for a "Do Not Sell or Share" opt-out; we also do not use or disclose sensitive personal information for purposes requiring a right to limit. We do not knowingly collect personal information from consumers under 16. To exercise any of these rights, contact us using the details below; we will verify your request and respond within the statutory period, and we will never discriminate against you for exercising your rights. You may designate an authorized agent to act for you.

Security

We protect your information with measures appropriate to its sensitivity, including encryption in transit and access controls. No system is perfectly secure, but we work to safeguard your data and will notify you of a breach affecting your personal data where the law requires.

Children

The platform is intended for businesses and is not directed to children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this Policy from time to time; material changes will be published as a new version with a new date. Continued use after an update means you accept the revised Policy.

Contact

To exercise your rights or ask about this Policy, contact us at support@framelogic.studio.