Privacy policy

To use the editor you sign in with an email address and a password, or with Google. We keep:

• your email address, and the name Google gives us if you sign in with Google;
• your Google account's ID, so the same Google account always reaches the same Frameotter account (we ask Google only for your email, name and that ID: nothing else in your Google account);
• your password, stored only as a one-way hash (Argon2id), never the password itself;
• your plan, your AI allowance and a record of each AI request you make (which model, how much it used and cost), so we can show your usage and bill correctly;
• when you last used the web or desktop app, and which version and system it was.

Sign-in sessions last 30 days. We don't store your IP address with your account; we use it only briefly, in memory, to slow down repeated wrong passwords and other abuse.

Your video files stay on your device. Editing, previewing and exporting happen in your browser or the desktop app.

When you ask for clip analysis or use the AI assistant, we send what that needs and no more: audio from the clip (in short pieces) and small still frames, plus your messages to the assistant and a description of your edit. These go to our servers and to the AI providers listed below, and the audio and frames are deleted from our storage within 24 hours.

Project sync (on unless you turn it off in the app) keeps a copy of your project file on our servers so you can open it on another device. A project file is your edit and the analysis notes, not your video. We keep its last five versions, and keep a deleted project for 30 days in case you want it back.

This setting is on unless you turn it off (in the app's account window). While it is on we keep:

• full records of your conversations with the assistant, including what it saw and did, so we can find out where it goes wrong;
• crash reports: the error, the app's last few log lines (never your project's content), the app version and your browser or system.

If you turn it off, we stop keeping these and delete what we kept within 30 days. Feedback you send us yourself is kept whatever the setting is.

We use these companies to run Frameotter. Each gets only what its part needs:

• Amazon Web Services: hosting, storage and sending our emails, in the United States;
• Anthropic: the AI assistant (your messages, the edit's description and the frames it looks at);
• DeepInfra: speech-to-text and frame analysis for clip analysis (the audio and frames);
• Stripe: payments. Your card details go to Stripe, not to us; we keep only your plan and Stripe's IDs for your subscription;
• Google: only if you choose to sign in with Google.

We don't sell personal information or share it for advertising. We may disclose it if the law requires us to, or to protect people's safety or our rights.

We email you only about your account: confirming your address, resetting your password, sign-in links, and the desktop download link if you ask for it on the site. If you ask to be told when Frameotter is ready for your system, we keep your email and system for that one message.

We may also email creators about Frameotter at business addresses they publish on their channels. If we've written to you and you'd like us to stop, or to forget your address, reply or write to privacy@frameotter.com.

The website and the editor set no cookies and load no third-party scripts. They use your browser's own storage to keep you signed in and to remember your settings. To see which pages work, we count a few anonymous events a day (a download button clicked, the desktop app opened for the first time), with no account or address attached.

• your account and its records: until you ask us to delete the account;
• audio and frames sent for analysis: up to 24 hours;
• deleted synced projects: 30 days;
• assistant records and crash reports: while Help improve Frameotter is on, and 30 days after you turn it off;
• server logs: 30 days; database backups: 14 days.

You can turn off project sync and Help improve Frameotter in the app at any time. To get a copy of your data, correct it, or have your account and everything in it deleted, write to privacy@frameotter.com from the address on the account; we'll do it within 30 days (backups clear within 14 days after that). Depending on where you live, you may have further rights under local law, and you can complain to your local data protection authority.

Everything travels encrypted (HTTPS), and our storage is encrypted at rest and not public. Passwords and sign-in tokens are stored only as hashes. No system is perfectly secure; if something goes wrong that affects you, we'll tell you.

Frameotter isn't for children under 13, and we don't knowingly collect their data. If you think a child has given us data, write to privacy@frameotter.com and we'll delete it.

If we change this policy we'll update the date above, and tell you in the app or by email if the change matters. Questions: privacy@frameotter.com.