Privacy Policy

Techiebutler ("we", "us", or "our") operates FreeFrame at freeframe.io. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our collaborative media review platform.

1. Information We Collect

We collect information in the following ways:

• Account information: When you register, we collect your email address and, if you choose Google OAuth, your name and profile picture from your Google account.
• Media files: Videos, images, and audio files you upload for review, along with associated metadata such as file names, sizes, and formats.
• Comments and annotations: Timestamped comments, drawing annotations, and approval decisions you create during media review.
• Usage data: Browser type, IP address, pages visited, and feature usage to help us improve the service.
• Device information: Operating system, screen resolution, and browser version for compatibility and debugging purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the FreeFrame platform.
• Authenticate your identity and manage your account.
• Process and deliver media files for collaborative review.
• Send transactional emails such as magic login codes, workspace invitations, and review notifications.
• Monitor service health, detect abuse, and ensure platform security.
• Respond to support requests and communicate service updates.

3. Data Storage & Security

Your media files are stored in S3-compatible object storage (such as AWS S3, Cloudflare R2, or Backblaze B2, depending on the deployment). All files are stored with unique, non-guessable keys and are only accessible via time-limited presigned URLs.

Application data (account details, comments, project metadata) is stored in a PostgreSQL database. All data is encrypted in transit using TLS/HTTPS. We follow industry-standard security practices including JWT-based authentication, bcrypt password hashing, and strict access controls.

We implement organizational and technical measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

4. Third-Party Services

We use the following third-party services:

• Google OAuth: If you choose to sign in with Google, we receive your email, name, and profile picture from Google. Google's privacy policy applies to information they process.
• Amazon Web Services (AWS SES): We use AWS Simple Email Service to send transactional emails. Your email address is shared with AWS for this purpose.
• Cloud infrastructure providers: We use cloud providers (such as AWS, Cloudflare, or similar) for hosting, storage, and content delivery. These providers process data on our behalf under strict contractual obligations.

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

5. Cookies

FreeFrame uses cookies strictly for functional purposes:

• Authentication cookies: We store JWT access and refresh tokens in cookies to keep you signed in across sessions and subdomains.
• Theme preference: We store your light/dark mode preference in local storage.

We do not use advertising cookies, tracking pixels, or analytics cookies that identify individual users.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data and account.
• Portability: Request your data in a structured, commonly used, machine-readable format.
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Objection: Object to the processing of your data for certain purposes.

To exercise any of these rights, contact us at privacy@freeframe.io for privacy-specific inquiries, or support@techiebutler.com for general support. We will respond within 30 days.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Media files and associated comments are retained for the lifetime of the project they belong to. When a project or organization is deleted, all associated media and data are permanently removed from our storage within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of FreeFrame after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: