Privacy Policy

1. Overview

FrameForge Studio ("FrameForge", "we", "us", or "our") is operated by Voxdigits Communications LLC. This Privacy Policy explains the information we collect when you use our mobile application and website (the "Service"), how we use and protect it, the third parties who may process it, and the choices and rights you have. By using FrameForge, you agree to the practices described here.

2. Information we collect

We collect information in the following categories:

• Account information (collected): your email address and name when you register or are invited. This is linked to your identity and used to operate your account.
• Content you create (collected): the prompts, reference images, and generated videos and images stored in your Library. This is linked to your identity and used to deliver the Service.
• Usage data (linked to identity): the features you use, render counts, generation settings, and activity history, used to provide and improve the Service.
• Device and technical data (linked to identity): device type, operating system and version, browser, app version, language, approximate region (country-level) for language detection, and log information, used for security, debugging, and analytics.
• Transaction data (linked to identity): records of credit purchases, subscription plans, and payment confirmations. We do not store full card numbers — payment card data is handled by our payment processor.
• Optional analytics and diagnostics (not linked to identity by default): aggregated, non-identifying metrics about performance, crashes, and feature usage.

3. Data types summary (Data Safety)

For the transparency required by app marketplaces, the table below summarizes the data FrameForge may collect, whether it is linked to you, and whether it is used for tracking.

• Email address and name — linked to identity, not used for tracking.
• User-generated content (prompts, images, videos) — linked to identity, not used for tracking.
• Usage and activity data — linked to identity, not used for tracking.
• Device, OS, and crash data — linked to identity, not used for tracking.
• Approximate region (country) for language — linked to identity, not used for tracking.
• Purchase history — linked to identity, not used for tracking.
• The website displays ads served by Google AdSense (the mobile apps do not); we do not sell your data or participate in data broker sharing.

4. How we use your information

• To provide rendering and Library features — generating, storing, and displaying your content.
• To operate your account, verify identity, and send service, security, and account notifications.
• To process payments, issue credits, and maintain subscription records.
• To improve generation quality, performance, stability, and usability of the studio.
• To detect, prevent, and respond to fraud, abuse, and security issues.
• To comply with legal obligations and enforce our Terms.

5. Your content and ownership

Prompts, reference images, and generated assets you create are associated with your account. We do not claim ownership of your generated content. We process it solely to deliver the Service and store it as part of your Library. Removing an asset record from your Library does not prove that its stored files, provider copies, or backups were erased. You can request account deletion from Settings; verification and storage limitations may prevent completion (Section 8).

5a. The iOS app is a local-only companion

In the FrameForge iOS app, all paid and AI features are disabled, and nothing you import is uploaded:

• No cloud uploads: reference images, portraits (face photos), audio, video, and other AI inputs cannot be uploaded from the iOS app at all.
• Local-only editing: photos and videos you import into the editor stay on your device as temporary in-memory references used for trimming and merging, and are never sent to a server. Merged results also stay on your device.
• Read-only cloud library: you can browse owner-authorized existing assets. Cloud Save to library, metadata changes, uploads, paid generation, and re-rendering are disabled. Local editing and local merged downloads remain available; temporary results are not cloud library records.
• Account deletion remains available in the iOS app (see Section 8).

6. Sharing and third parties

We do not sell your personal information or user content. We share data only with service providers that help us operate the studio, under agreements that restrict their use of it, and where required by law. These providers may process data on our behalf and may be located in regions outside your country (see Section 9).

• AI generation and model providers (web and Android, not the restricted iOS app): BytePlus / ModelArk (Volcengine) for video, image, and talking-avatar generation; OpenAI for the assistant, speech synthesis, and optional image engine; Google for certain video engines; SuperCool for agent-driven video; and HeyGen for the callable photo-avatar and Composer avatar-scene flows. These providers receive the prompts, scripts, portraits, reference media, and audio needed by the selected flow.
• Portraits and reference images can contain face data. On web and Android the HeyGen photo-avatar flow (generateHeygenVideo / getHeygenStatus), Composer avatar scenes, and the external avatar API remain callable; the legacy flow is not disabled merely because the main Avatar Studio uses BytePlus. HeyGen and BytePlus may process face imagery and supplied audio to animate and lip-sync the requested subject. Only upload a face or voice you are authorized to use. Portrait upload is disabled on iOS.
• Existing web/Android generation-input uploads and some fallback media copies use public, unauthenticated addresses so providers can fetch them. Removing an app record does not revoke a public URL. New external-bucket outputs require server-verified ownership and short-lived read links; this does not retroactively privatize or erase old public copies.
• Cloud storage and hosting — to store your account data, content, and uploaded files.
• Payments — to process purchases and subscriptions. Card details are handled by the processor and are not stored by us.
• Communications — to deliver transactional emails and support responses.
• Analytics and crash reporting — to measure performance and fix issues.

We may also disclose information to comply with law, respond to legal process, protect our rights, or with your consent.

7. Third-party SDKs and services

Our app and website include third-party SDKs and APIs that may collect limited device and usage data necessary to provide their functions. These providers are governed by their own privacy policies.

• Stripe — payment processing. Payments SDK may collect device and transaction identifiers. See stripe.com/legal/privacy.
• Generation providers (website and Android app only): BytePlus / ModelArk (Volcengine), HeyGen, OpenAI, Google, and SuperCool. Their policies and applicable service agreements govern their processing; we do not infer a deletion deadline or training exclusion from a provider name.
• Google sign-in — to authenticate accounts via Google, subject to Google's privacy policy.
• Facebook — optional social sharing and publishing of your generated content. We do not share your account data with Facebook beyond what is needed for that action.
• Google AdSense — the website (not the mobile apps) displays advertising, which may involve Google’s advertising cookies as described in its policy. The iOS and Android apps do not display ads.
• Crash and analytics services — may collect anonymous device, OS, and session diagnostics to improve stability.

7a. Official generation-provider privacy policies

Verified official policy links: BytePlus / ModelArk, HeyGen, OpenAI, Google, and SuperCool. Provider policies may distinguish consumer services from API processing under business agreements. We make no invented retention or erasure guarantees.

8. Account deletion and retention

We retain your account and Library content for as long as your account is active. When you delete an asset, we remove it from your Library. You may request deletion of your full account at any time from Settings → Delete account (also available in the iOS app). Account deletion is processed with an explicit status trail — requested, pending, complete, or failed — and you can retry a request at any time. We do not report a deletion as complete when something we intended to remove could not be removed.

• Deletion is a request, not immediate erasure. The User account is not deleted and completion is not returned while any managed-platform file, provider-hosted copy, failed external removal, incomplete owner query/pagination, or unverifiable storage ownership remains.
• External objects are removed only when a server-managed ownership ledger proves they belong to the requesting account. A media URL pasted into an editable record is never ownership evidence. Legacy assets without trusted evidence remain blocked; we do not automatically invent or backfill an owner.
• Managed-platform media currently has no supported removal mechanism implemented in this app. Provider copies require provider-side erasure confirmation. These are pending/failed blockers, not successful erasure with a disclaimer. Your account and source records are retained while those blockers are present; public copies may remain reachable at their existing addresses.
• Failed storage removals or inventory checks retain records and actionable pending/failed status for retry. A failed record-removal phase can be partial and never permits deleting the User while records or unverifiable inventory remain. Minimal deletion-request and removed-object audit evidence are retained for verification. Backups, legally required records, and third-party retention are not promised to be immediately erased.
• We do not promise a specific erasure deadline for backups: routine backups may retain deleted data during their normal expiry cycle, subject to legal retention requirements.

9. International data transfers

Your information may be processed and stored in countries other than your own, including the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect data transferred across borders.

10. Children's privacy

FrameForge is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

11. Security

We use industry-standard measures to protect your data, including encrypted transit, access controls, and monitoring. No system is perfectly secure, but we treat the protection of your work as a core requirement. We will notify affected users where we are legally required to in the event of a data breach.

12. Your privacy rights

Depending on where you live, you may have the right to access, correct, export, delete, or restrict the processing of your personal data. You can exercise many of these rights directly in the app:

• Access and export the prompts and assets in your Library.
• Correct your account information in Settings.
• Delete specific assets from your Library at any time.
• Request account deletion from Settings → Delete account and review pending/failed blockers; completion is subject to the verified-erasure requirements in Section 8.
• Object to or restrict certain processing of your data by contacting us.
• Withdraw consent to optional analytics where applicable.

California residents may have additional rights under the CCPA, and EEA/UK residents under the GDPR. We do not sell personal information, and we do not process data for automated decision-making that produces legal or similarly significant effects.

13. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in, remember preferences, and detect your language. We do not use cookies for cross-app advertising tracking. See our Cookie Policy for details and controls.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date and, for material changes, notify you in the app or by email. Continued use after changes take effect means you accept the updated policy.

15. Contact

Questions about this policy or your data? Reach us via our Support center or email privacy@voxdigits.com. We will respond to verified requests within the time required by applicable law.