Privacy Policy

This Privacy Policy explains how FrameFix, operated by Cliffy Media LLC ("FrameFix," "we," "us," or "our"), collects, uses, and protects information when you use our video review platform at framefix.io (the "Service"). By using the Service, you agree to the practices described here.

1. Information We Collect

Account information

When you create an account, we collect your name, email address, and password (stored in hashed form). If you sign in with Google, we receive your name, email address, and profile image from your Google account.

Content you upload

We store the videos, images, comments, annotations, and related files you upload or create to provide the review workflow. This content is stored on our infrastructure providers (see Section 4).

Usage and technical data

We collect standard technical information such as IP address, browser type, and activity logs to operate, secure, and improve the Service.

Payment information

Subscription billing is handled by Stripe. We do not store your full card details; Stripe processes and stores payment data under its own privacy terms.

2. Google User Data & Google Drive Access

FrameFix offers an optional integration that lets you sync finalized video revisions to your own Google Drive. This integration is entirely optional and only active if you choose to connect your Google account for Drive access.

What we access

When you connect Google Drive, we request the drive.file scope. This is a narrow, non-invasive permission that allows FrameFix to create and manage only the files it uploads to your Drive. FrameFix cannot see, read, or access any other files, folders, or content already in your Google Drive.

How we use it

We use this access solely to upload your finalized video revisions from FrameFix into a folder in your Google Drive that you designate, when you trigger a sync manually or enable automatic syncing.

What we store

To keep the connection active, we securely store an OAuth refresh token associated with your account and the identifier of the destination folder you select. We do not store the contents of your Drive.

Limited Use disclosure

FrameFix's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it, and we do not transfer or use it for any purpose other than providing and improving the Drive sync feature you enabled, except as required for security, legal compliance, or with your explicit consent.

Revoking access

You can disconnect Google Drive at any time from your FrameFix settings, which removes our stored token. You may also revoke FrameFix's access directly from your Google Account at myaccount.google.com/permissions.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To process your uploads and enable review, commenting, and revision workflows
• To sync files to your Google Drive when you enable that feature
• To process subscription payments
• To communicate with you about your account, including notifications you have enabled
• To secure the Service and prevent abuse
• To comply with legal obligations

4. How We Store & Protect Data

Uploaded content is stored using Amazon Web Services (AWS S3 and related services). Access credentials and OAuth tokens are stored securely and are not exposed to other users. We use industry-standard measures to protect data in transit and at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Third Parties We Share Data With

We share data only with service providers necessary to operate the Service:

• Amazon Web Services — file storage and processing
• Stripe — payment processing
• Google — optional Drive sync and optional Google Sign-In
• Pusher — real-time notifications and messaging

We do not sell your personal information or your content to anyone.

6. Data Retention

We retain your account information and content for as long as your account is active. If you delete content or close your account, we remove the associated data from active systems within a reasonable period, subject to backups and legal requirements. Disconnecting Google Drive removes our stored Google tokens.

7. Your Rights

You may access, update, or delete your account information, disconnect integrations, and request deletion of your data by contacting us. Depending on your location, you may have additional rights under applicable privacy laws.

8. Children

The Service is not directed to individuals under 18, and we do not knowingly collect data from them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notifying you.

10. Contact Us

For any questions about this Privacy Policy or your data, contact us at support@framefix.io.