We collect only what the service needs to work:

• Your email address — for your account, email verification, and password resets.
• Your password — stored only as a salted scrypt hash. We never store or have access to your plaintext password.
• Agreement timestamps — when you accepted the Terms of Service.
• Credit balance and ledger — your current balance and a record of grants, purchases, and refunds.
• Prompts and generation parameters — the text and settings you submit to generate images and video.
• Generated media you choose to save — items you save to your gallery.
• Uploaded source images — images you upload to drive image-to-video generations.
• Rate-limit counters — short-lived counters derived from your IP address, used to prevent abuse.
• A session cookie — see Cookies below.

framegens sets only the essential avgen_session cookie, a signed JWT that keeps you logged in — no analytics cookies and no advertising trackers. The signup bot check (Cloudflare Turnstile) may set its own cookies.

We use your data to run the service: to authenticate you, verify your email, process generations, meter and refund credits, store the media you save, prevent abuse, and send you the transactional emails the service depends on (verification and password reset). We do not send marketing email.

We rely on a small set of infrastructure providers to operate framegens. Each processes data only to provide its service to us:

• Vercel — hosting and storage of your saved media.
• Upstash — our database (accounts, credits, gallery index).
• Postmark — transactional email only (verification and password reset). No marketing email.
• Our AI model provider — the third-party model API that runs generations. Your prompts and any source images are sent to it to fulfill your request.
• fal.ai — automated safety screening. Generated images and the source images you upload for image-to-video are sent to it to be classified so we can block prohibited content.
• Stripe — payment processing (once payments are live). Card data is handled by Stripe and never touches our servers.
• Cloudflare Turnstile — a bot check on signup.

We do not sell your personal data. We do not run ads. We do not build advertising or behavioral profiles of you.

We keep your account data for as long as your account is active. Media you save to your gallery is kept until you delete it or your account is terminated; deleting an item removes it from our storage. Generations you do not save, and uploaded source images left unused, are periodically deleted. Rate-limit counters are short-lived and expire automatically.

You can delete saved media from your gallery at any time. To delete your entire account and associated data, email us at support@framegens.com.

Passwords are stored only as salted scrypt hashes, and your session cookie is a signed JWT. No system is perfectly secure, but we take reasonable measures to protect your data.

framegens is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time and will announce changes by email or on the site, the same way we announce changes to our Terms. This policy is governed by the laws of the State of Illinois, USA. Questions? Reach us at support@framegens.com.