framegens

privacy policy

Home

Effective August 19, 2026

This Privacy Policy explains what framegens (“framegens,” “we,” “us”) collects when you use the AI image and video generation service at framegens.com, why we collect it, and who processes it on our behalf. The service is operated from the United States and directed to users in the United States, and your data is processed and stored there. Your use of the service is also governed by our Terms of Service.

01Data we collect

We collect only what the service needs to work:

  • Your email address — for your account, email verification, and password resets.
  • Your password — stored only as a salted scrypt hash. We never store or have access to your plaintext password.
  • Agreement timestamps — when you accepted the Terms of Service.
  • Credit balance and ledger — your current balance and a record of grants, purchases, and refunds.
  • Prompts and generation parameters — the text and settings you submit to generate images and video.
  • Generated media you choose to save — items you save to your gallery.
  • Uploaded source images — images you upload to drive image-to-video generations.
  • Rate-limit counters — short-lived counters derived from your IP address, used to prevent abuse.
  • A session cookie — see Cookies below.

02Cookies

framegens sets only the essential avgen_session cookie, a signed JWT that keeps you logged in — no analytics cookies and no advertising trackers. The signup bot check (Cloudflare Turnstile) may set its own cookies.

03How we use your data

We use your data to run the service: to authenticate you, verify your email, process generations, meter and refund credits, store the media you save, prevent abuse, and send you the transactional emails the service depends on (verification and password reset). We do not send marketing email.

04Who processes your data

We rely on a small set of infrastructure providers to operate framegens. Each processes data only to provide its service to us:

  • Vercel — hosting and storage of your saved media.
  • Upstash — our database (accounts, credits, gallery index).
  • Postmark — transactional email only (verification and password reset). No marketing email.
  • RunComfy, Replicate, and xAI — the model providers that run generations. Your prompts and any source images or video you provide are sent to whichever provider runs the model you select, so it can fulfill your request. For xAI models we additionally pass an opaque internal account identifier for abuse-prevention attribution, and xAI temporarily stores the media it generates for you (auto-expiring within 30 days) to power the video-extension feature.
  • fal.ai — automated safety screening. Generated images and the source images you provide for image-to-video or image editing are sent to it to be classified so we can block prohibited content.
  • OpenAI — prompt enhancement and prompt screening. When you choose to enhance a prompt, its text is sent to OpenAI to generate an improved prompt. Separately, the text prompts you submit to generate are automatically sent to OpenAI’s moderation service to be classified so we can block prohibited requests before generation.
  • Stripe — payment processing (once payments are live). Card data is handled by Stripe and never touches our servers.
  • Cloudflare Turnstile — a bot check on signup.

05What we don’t do

We do not sell your personal data. We do not run ads. We do not build advertising or behavioral profiles of you.

06Data retention

We keep your account data for as long as your account is active. Every generation is saved to your gallery automatically: generations you mark as favorites are kept until you delete them or your account is terminated, while generations you do not favorite are automatically deleted 90 days after they are created. Uploaded source images left unused are also periodically deleted. Deleting an item removes it from our storage. Rate-limit counters are short-lived and expire automatically.

07Your choices and account deletion

You can delete saved media from your gallery at any time. To delete your entire account and associated data, email us at support@framegens.com.

08Security

Passwords are stored only as salted scrypt hashes, and your session cookie is a signed JWT. No system is perfectly secure, but we take reasonable measures to protect your data.

09Children

framegens is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has provided us data, contact us and we will delete it.

10Changes and contact

We may update this Privacy Policy from time to time and will announce changes by email or on the site, the same way we announce changes to our Terms. This policy is governed by the laws of the State of Illinois, USA. Questions? Reach us at support@framegens.com.

See also our Terms of Service.