1. Introduction
FRAME is operated by EasyOps Frameworks, New Delhi, India. This Policy describes information used to provide and protect FRAME.
2. Information we collect
We may collect account/profile information, authentication information, workspace/client information, shoot details, invoices, receipts, expenses, subscription/billing information, and technical/session, diagnostic, or preference information.
- Account/profile: name, email, studio name and account state.
- Workspace: client contacts, shoots, invoices, receipts, expenses and notes entered by you.
- Billing: subscription status and transaction-related information received through Paddle and verified webhooks.
- Technical: session and preference storage, error/diagnostic information, and security-related information needed to operate and protect the service.
3. How we use information
We use information to create and operate accounts, provide workspace features, process subscriptions, secure the service, respond to support requests, prevent abuse, comply with obligations, and improve reliability.
4. Legal bases where applicable
The lawful basis for processing depends on the information, purpose, and applicable law. Where required, FRAME may rely on performance of a contract, compliance with legal obligations, legitimate interests such as operating and securing the service, consent where it is required or requested, or another lawful basis available under applicable law. This description does not replace jurisdiction-specific rights or requirements.
5. Information about other people
If you enter client or third-party information, you are responsible for ensuring you have the rights, permissions, and legal basis needed to do so.
6. Customer data and processing roles
The roles of FRAME and a customer can depend on the processing context and applicable law. For example, FRAME processes account/service information for its own operations while a customer controls much of the workspace information it enters.
7. Service providers
FRAME uses Supabase for core authentication/database services, Paddle as Merchant of Record for paid subscription checkout and billing, and Google Fonts for interface typography delivery. Google sign-in may be available where enabled; if you choose it, FRAME uses the authentication/profile information provided through that configured sign-in flow as necessary to create or authenticate your account. Google sign-in is separate from Google Fonts. We do not state that unconfirmed providers process your information.
8. Cookies and functional storage
FRAME uses functional browser storage for authentication/session handling, theme preference, sidebar/interface preference, and related security or service operation. This can include local storage for service session and theme state, session storage for short-lived legal-consent or account-deletion interface state, and a sidebar-state cookie for interface preference. FRAME does not currently describe advertising or marketing cookies.
Paddle Checkout may use technologies governed by Paddle's own notices and transaction terms. FRAME does not describe those technologies as FRAME-owned cookies.
9. Security and administrative access
FRAME uses authenticated access, authorization controls, database security features, and restricted administration. Authorized FRAME administrators may access account and workspace information when reasonably necessary for customer support, troubleshooting, security, fraud or abuse investigations, service operation, legal or regulatory requirements, or protecting FRAME, customers, or third parties. No absolute security guarantee is made.
10. International processing and retention
Information may be processed where FRAME or its service providers operate. Different categories of information may have different retention periods. We retain information for as long as reasonably necessary to provide the service, maintain account and security records, meet legal, accounting, or tax obligations, maintain necessary business records, resolve disputes, prevent fraud or abuse, enforce agreements, support legitimate operational purposes, and support normal backup or infrastructure lifecycles. Provider-controlled billing and transaction records may be retained according to the provider’s applicable obligations and policies.
11. Deletion, export and rights
You can request account deletion from Settings; the request deactivates your account and permanent deletion is not guaranteed within a fixed timeframe. While you have appropriate account access, you can download a self-scoped JSON workspace export of profile, studios, clients, shoots, invoices, receipts, and expenses. This workspace export is not a complete copy of every piece of information FRAME or its providers may hold, and it does not include authentication credentials, card credentials, internal FRAME subscription billing records, or Paddle internal records. Privacy requests beyond the workspace export can be made through support. Depending on applicable law, you may have privacy rights such as access, correction, deletion, restriction, objection, or portability.
12. Children, changes and contact
FRAME is not intended for people under 18. We may update this Policy as FRAME evolves. For privacy questions, access, correction, deletion, or other applicable data-subject requests, contact easyops.support@gmail.com.