Privacy Policy
Last updated: 2026-05-14
TODO(legal): lawyer review required before launch. This page is a starting template generated from
plans/PLAN_prod_hardening.md §5.7.What we collect
- Account data — email address, name, and authentication credentials, managed by Clerk.
- Billing data — your purchases, managed by Stripe. We do NOT store credit card numbers — Stripe does.
- Uploaded videos — the source files you upload for reframing. Retained for 48 hours after upload, then deleted.
- Processed outputs — the reframed videos we produce. Retained for 7 days, then deleted. Re-process from the source if you need them again.
- Job metadata — timestamps, ratios, settings — retained for 30 days for support and debugging.
Third-party services we use
- Clerk (auth) — receives your email + password hash + session metadata.
- Stripe (billing) — receives payment details.
- Cloudflare R2 (storage) — encrypted backups of uploaded and processed video.
- Luma (outpaint AI) — when you enable AI-assisted background extension, the relevant frame ranges are sent to Luma. Luma's privacy policy applies to that processing.
- Resend (email) — receives the email address + template body for transactional emails (receipts, job-complete notifications, etc.).
- Sentry (error tracking) — receives stack traces when something crashes. We scrub auth tokens, cookies, and request bodies from sensitive routes before sending.
What we DO NOT do
- Sell your data to third parties.
- Use your uploaded videos to train AI models.
- Track you across other sites or run third-party analytics.
Your rights
You can delete your account at any time from /me/delete (or by emailing support@reframr.app). Deletion removes your profile, all source videos, all output videos, and job history older than 30 days. Payment records are retained for 7 years for tax/legal compliance. Any unspent credits at the time of deletion are forfeit.
Contact
Questions about this policy or your data: privacy@reframr.app.