Privacy policy
This policy covers frameroost.com, the FrameRoost app at app.frameroost.com, and the photographers’ sites we host
(at *.frameroost.photos and their own domains). “We” means FrameRoost. Questions or requests:
hello@frameroost.com.
The short version
Section titled “The short version”- We collect what we need to run your site and the beta, and nothing more.
- We don’t sell your information, show ads, or use advertising or analytics trackers.
- Your photos and videos are yours. We store and show them only to run your site.
- You can ask us to see, correct or delete your information at any time.
What we collect
Section titled “What we collect”When you ask to join the beta: your name, email address, and anything you tell us about your photography. We use it to decide on and send your invite, and to contact you about the beta.
When you create an account: your name, email address and password. Passwords are stored only as a secure one-way hash, never in readable form.
Your site: the photos, videos, captions, tags, settings, logo and other content you upload or enter, and the details of the people you invite to your team.
Photo metadata: your original photos keep the metadata embedded by your camera or phone, which can include camera settings, the date taken and — if your device recorded it — location. Originals are stored privately and are never shown or made downloadable to visitors. The display copies and thumbnails visitors see have all of that metadata removed, location included. We read the date taken to sort your photos.
Payments: if you choose a paid plan, payment is handled by Stripe. We receive your plan, billing status and a customer reference from Stripe; we never see or store your full card number.
Messages: email you send us, feedback you send from your admin, and messages visitors send through your site’s contact form (which are delivered to you).
Technical information: our servers log requests, including IP addresses and browser details, to keep the service secure and working. These logs are deleted after about 7 days. We use IP addresses briefly to limit repeated signup attempts.
Visitors to photographers’ sites
Section titled “Visitors to photographers’ sites”If you’re visiting a site hosted on FrameRoost, we don’t track you across sites or build a profile of you. Anything you send through a site’s contact form goes to that site’s owner, who handles it under their own practices.
Cookies and similar storage
Section titled “Cookies and similar storage”FrameRoost doesn’t use advertising or analytics cookies. When you sign in, your browser keeps a sign-in token in its local storage. Our signup and beta forms use Cloudflare Turnstile to block bots, and Cloudflare may set cookies needed for security. Fonts on frameroost.com are served by us, not by a third-party font service.
Who helps us run FrameRoost
Section titled “Who helps us run FrameRoost”We use a small number of service providers, who process information only to provide their service to us:
| Provider | What they do for us |
|---|---|
| Microsoft Azure | Runs the FrameRoost app and its database (United States) |
| Cloudflare | Stores photos and videos, serves our sites and domains, and blocks bots |
| Postmark (ActiveCampaign) | Sends account and notification emails |
| Stripe | Processes payments for paid plans |
We may also disclose information if the law requires it, or to protect FrameRoost, our users or the public from harm.
How long we keep it
Section titled “How long we keep it”- Your account and site: for as long as you have them. When you ask us to delete your site, we delete its photos, videos and settings, and your account unless you’re on another site’s team.
- Signups that are never confirmed: deleted after 7 days.
- Beta requests: for as long as the beta runs, unless you ask us to delete yours sooner.
- Server logs: about 7 days.
- Billing records: as long as tax and accounting rules require.
Your choices and rights
Section titled “Your choices and rights”You can see and change most of your information in your site’s admin. To get a copy of your information, correct it, or delete your account and site, email hello@frameroost.com from your account’s address. Depending on where you live, you may have further rights under laws such as the GDPR or California’s privacy laws; we’ll honor them.
Security
Section titled “Security”Sites and the app are served only over encrypted (https) connections, passwords are hashed, and access to our systems is limited to the people who run FrameRoost. No system is perfectly secure, but we work to protect your information and will tell you promptly if a breach affects it.
Children
Section titled “Children”FrameRoost isn’t meant for children under 13, and we don’t knowingly collect information from them.
Changes
Section titled “Changes”If we change this policy, we’ll update the date at the bottom of this page, and email account holders about any significant change before it takes effect.