Privacy Policy - FrameVerk

1. Information We Collect

1.1. Information You Provide

We may collect the following information when you interact with our Service:

Account information: name, email address, password (hashed).
Project data: drawings, 3D models, project names, layouts, notes.
Support messages: any information you send through email or contact forms.

1.2. Automatically Collected Information

When you use FrameVerk, we automatically collect:

Technical data: IP address, device type, browser type, operating system.
Usage data: pages visited, time spent, clicks, app interactions.
Logs and diagnostic data: crash reports, performance metrics.

These are collected through Google Analytics, server logs, and third-party services.

1.3. Cookies & Tracking

We use cookies and similar technologies to:

maintain your login session
analyze traffic
improve user experience

You may disable cookies in your browser, but some features may stop functioning.

2. How We Use Your Information

We use your personal data for:

Providing the Service (saving projects, loading data, app functionality)
Improving performance, features, and user experience
Customer support
Security and fraud prevention
Analytics and usage insights
Sending important updates (account, billing, critical app notices)

We do not sell your data for advertising or share it with unrelated third parties.

3. Legal Basis (GDPR)

For users in the EU/EEA (including Romania), processing of your data is based on:

Contract (using the app requires storing your projects)
Legitimate interest (analytics, security)
Consent (cookies)
Legal obligations (if required by law)

4. How We Store and Protect Data

We store your data using modern cloud infrastructure such as:

Vercel
Supabase (PostgreSQL, storage)
Cloudflare

We use:

SSL encryption
hashed passwords
restricted database access
role-based security (RLS)

We take reasonable measures to protect your data, but no online system is 100% secure.

5. How Long We Keep Your Data

We retain personal and project data only as long as necessary for:

providing the Service
complying with legal obligations
resolving issues

You may request deletion at any time (see Section 8).

6. Third-Party Services

We use third-party services to operate FrameVerk, including but not limited to:

Supabase (database & auth)
Vercel (hosting)
Cloudflare (DNS, security)
Google Analytics (traffic & behavior insights)
Stripe (payments — if/when implemented)

Each provider has its own privacy policy.

7. Children's Privacy

FrameVerk is not intended for users under 16 years old.

We do not knowingly collect data from children.

8. Your Rights (GDPR)

If you live in the EU/EEA, you have the right to:

access your data
correct your data
delete your data ("right to be forgotten")
restrict processing
object to processing
obtain a copy of your data (portability)

To exercise your rights, contact us at:

📧 support@frameverk.com

9. Data Transfers

We may store or process data outside the EU.

In such cases, we rely on:

Standard Contractual Clauses (SCC)
GDPR-compliant providers
Equivalent security protections

10. Changes to This Privacy Policy

We may update this policy occasionally.

If changes are significant, we will notify you via email or an in-app banner.

11. Contact Us

If you have questions regarding this Privacy Policy, you may contact us at:

FrameVerk