Privacy Policy
1. Who we are
Framewright ("we", "us") provides a software service that generates short-form video content for brands. Contact: support@framewright.co. Operator: Quillara Holding Limited, Hong Kong SAR.
2. Information we collect
- Account data — your name, email, and workspace details, handled by our authentication provider (Clerk).
- Brand configuration — the website URL, colors, products, voice description, audience notes, and banned phrases you provide to generate content.
- Your website's public content — when you point Framewright at your own site, we fetch its publicly available pages (stylesheets, product catalog) solely to configure your brand. We only fetch sites you direct us to.
- TikTok connection data — if you choose to connect a TikTok account, we store the authorization tokens TikTok issues (encrypted at rest) and your TikTok display name and avatar, solely to show you which account is connected and to upload the videos you explicitly send. We never receive or store your TikTok password, and disconnecting in Settings deletes the tokens.
- Usage data — generations, renders, credits used, and technical logs needed to run and bill the service.
- Payment data — processed entirely by Stripe. We never see or store card numbers; we store only your Stripe customer and subscription identifiers.
3. How we use it
To generate your content, render your videos, upload videos you explicitly send to your connected TikTok account, meter your plan, bill you, keep the service secure, and respond to support requests. We do not sell personal data, and we do not use your brand configuration to train AI models.
4. Service providers (subprocessors)
Your data is processed by the infrastructure we run on. By category: an authentication provider, a payment processor, a database and file storage provider (EU region), application and API hosting providers, an AI text-generation provider, a video-rendering provider, and a voice-synthesis provider. If you connect a TikTok account, TikTok also receives the videos you explicitly send. Each receives only what its function requires, and each is bound by a data-processing agreement. A current list of our named subprocessors is available on request at support@framewright.co; we will give notice of material changes to it.
5. Retention & deletion
Your content and configuration are retained while your account is active. On account deletion, we remove your brand data, generated content, rendered files, and any stored TikTok tokens within 30 days, except records we must keep for tax and accounting law.
6. Your rights
You may request access to, correction of, or deletion of your personal data at any time by emailing support@framewright.co. Depending on your location, you may have additional rights under GDPR, UK GDPR, CCPA, or the Hong Kong PDPO, including data portability and the right to lodge a complaint with a supervisory authority.
7. Security
API credentials and social-platform tokens are encrypted at rest. Access to production systems is restricted, and traffic is encrypted in transit. No system is perfectly secure; we will notify affected users of any breach as required by law.
8. Changes
We will post any changes to this policy here and update the date above. Material changes will be announced by email.