Skip to main content

Privacy Policy

Last updated: 2026-05-14

TODO(legal): lawyer review required before launch. This page is a starting template generated from plans/PLAN_prod_hardening.md §5.7.

What we collect

  • Account data — email address, name, and authentication credentials, managed by Clerk.
  • Billing data — your purchases, managed by Stripe. We do NOT store credit card numbers — Stripe does.
  • Uploaded videos — the source files you upload for reframing. Retained for 48 hours after upload, then deleted.
  • Processed outputs — the reframed videos we produce. Retained for 7 days, then deleted. Re-process from the source if you need them again.
  • Job metadata — timestamps, ratios, settings — retained for 30 days for support and debugging.

Third-party services we use

  • Clerk (auth) — receives your email + password hash + session metadata.
  • Stripe (billing) — receives payment details.
  • Cloudflare R2 (storage) — encrypted backups of uploaded and processed video.
  • Luma (outpaint AI) — when you enable AI-assisted background extension, the relevant frame ranges are sent to Luma. Luma's privacy policy applies to that processing.
  • Resend (email) — receives the email address + template body for transactional emails (receipts, job-complete notifications, etc.).
  • Sentry (error tracking) — receives stack traces when something crashes. We scrub auth tokens, cookies, and request bodies from sensitive routes before sending.

What we DO NOT do

  • Sell your data to third parties.
  • Use your uploaded videos to train AI models.
  • Track you across other sites or run third-party analytics.

Your rights

You can delete your account at any time from /me/delete (or by emailing support@reframr.app). Deletion removes your profile, all source videos, all output videos, and job history older than 30 days. Payment records are retained for 7 years for tax/legal compliance. Any unspent credits at the time of deletion are forfeit.

Contact

Questions about this policy or your data: privacy@reframr.app.