Privacy Notice

1. Who we are

Emberframe ("we", "us") is the data controller for personal data processed in connection with Emberframe (the "Service"). You can reach us at support@emberframe.app.

2. Photos stay in your browser

Emberframe is built so that the photos you select, the slideshow you assemble, and the rendered video file are processed entirely in your browser. We do not upload, store, or otherwise receive copies of your photos or your finished videos.

3. What we collect

• Technical / device data: IP address, browser, operating system, referrer, and similar diagnostic information automatically logged when you visit the site. Legal basis: legitimate interests (security and operating the Service).
• Purchase data: when you buy a download, our payment processor (Paddle) collects the email address, billing details, and payment method needed to complete the purchase. We receive a record of the purchase (transaction ID, product, amount, country, status). Legal basis: performance of contract and legal obligations (tax / accounting).
• Support communications: if you email us, we keep the message and our reply. Legal basis: legitimate interests (responding to you).
• Analytics: we may use privacy-friendly analytics to understand aggregate usage. Legal basis: legitimate interests (improving the Service).

4. Who we share data with

• Paddle — our Merchant of Record. Paddle handles payment processing, tax compliance, invoicing, and subscription management on our behalf. See Paddle's Privacy Policy.
• Hosting and infrastructure providers needed to serve the Service.
• Professional advisers (legal, accounting) where reasonably necessary.
• Authorities where required by law.

We do not sell your personal data.

5. International transfers

Some of our service providers may be located outside your country, including in the United States. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

Technical logs are retained for a short period for security and debugging. Purchase records are retained for as long as required for tax and accounting purposes (typically 6–10 years depending on jurisdiction). Support emails are kept for as long as needed to provide service and resolve issues. Data is deleted or anonymised when no longer needed.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. EEA / UK residents also have the right to lodge a complaint with a supervisory authority. To exercise any of these rights, email us at support@emberframe.app. We will respond within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit and access controls. No system is perfectly secure; we cannot guarantee absolute security.

9. Cookies

We use only essential cookies needed to operate the Service. If we add analytics or marketing cookies in the future, we will update this notice and request consent where required.

10. Children

The Service is not directed to children under 13 (or the relevant age in your jurisdiction). We do not knowingly collect personal data from children.

11. Changes

We may update this Notice from time to time. Material changes will be reflected by updating the "Last updated" date above.