This policy explains what FrameLab collects when you buy, trial, or run FrameLab, why it is collected, and what you can ask us to do with it. The data controller is [LEGAL ENTITY NAME], [REGISTERED ADDRESS].
What we collect
The table below is generated from what the application actually stores, so it is the honest starting point for the reviewed version of this page.
| Data | Why |
|---|---|
| Name and email address | To create your account, send your license key, and sign you in — sign-in is a single-use link sent to your address, so we hold no password. |
| Device fingerprint, device name, platform, architecture, app version | To enforce the activation limit your license is sold with, and to tell you when an installed copy is out of date. |
| Activation and last-seen timestamps | To show you which of your devices are using a license, so you can deactivate one you no longer have. |
| IP address and browser user agent | Kept with your web session for security and abuse prevention. |
| Order records and Stripe identifiers | To prove what you bought and to support refunds and disputes. |
| Account activity log | To record administrative actions taken on an account, including any support access. |
We never see your card details. Payments are handled entirely by Stripe; our records hold only Stripe's identifiers for the transaction.
Who we share it with
- Stripe — payment processing. [LINK TO STRIPE'S PRIVACY POLICY]
- [EMAIL PROVIDER] — sending license keys and sign-in links.
- [HOSTING PROVIDER] — running the service and storing its database.
We do not sell personal data, and we do not share it for advertising. [CONFIRM AND EXPAND.]
How long we keep it
[RETENTION PERIODS. Purchase records generally have to be kept for tax purposes — state the period for your jurisdiction. Say what happens to device activation records and session data, and what deleting an account does.]
Your rights
[RIGHTS OF ACCESS, CORRECTION, DELETION, PORTABILITY AND OBJECTION, AND HOW TO EXERCISE THEM. If you have UK/EU customers this section is the one that actually has to be right — including your lawful basis for each purpose and, if applicable, your supervisory authority and any transfers outside the UK/EEA.]
Cookies
[WHAT THE SESSION COOKIE DOES AND WHETHER ANYTHING ELSE IS SET. Strictly necessary cookies do not need consent; anything analytic does.]
Changes
[HOW YOU WILL NOTIFY PEOPLE OF CHANGES TO THIS POLICY.]