Privacy Policy
Framehub is a trade name of Seedr B.V., registered in the Netherlands with the Chamber of Commerce (KVK) under number 76334244.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. We take your privacy seriously and aim to be transparent about our practices.
This policy applies to all users of the Framehub platform at app.framehub.com, including Account Owners, Team Members, and Reviewers.
1. Who We Are
Framehub is operated by Seedr B.V., a company registered in the Netherlands. For the purposes of the General Data Protection Regulation (GDPR), Seedr B.V. is the data controller for personal data collected through the Service.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
2. What Data We Collect
We collect personal data in the following categories:
2.1 Account data
When you register for an account, we collect:
- Your name
- Your email address
- Your password (stored in encrypted form)
- Your chosen data storage region (US or EU)
- Your subscription plan and billing history
2.2 Payment data
When you subscribe to a paid plan, payment is processed by Stripe. We do not store your full payment card details. Stripe provides us with limited billing information such as the last four digits of your card, card type, and billing address for invoicing purposes. When you complete a purchase, Stripe may also collect your company name and VAT number for tax calculation purposes.
2.3 Usage data
When you use the Service, we automatically collect:
- Log data (IP address, browser type, pages visited, timestamps)
- Device information (operating system, browser version)
- Feature usage data (uploads, transfers, review activity)
This data is used to operate, maintain, and improve the Service.
2.4 Content metadata
When you upload videos or send file transfers, we store metadata associated with that content, such as file names, file sizes, upload timestamps, and comment data. We do not analyse the content of your files.
2.5 Reviewer data
Reviewers may optionally provide an email address to receive notifications about content shared with them. This email address is stored solely for the purpose of sending those notifications and is not used for any other purpose.
2.6 Communication data
If you contact us by email or via our support system, we store your name, email address, and the contents of your message in order to respond to your enquiry.
3. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Providing and operating the Service | Performance of contract |
| Processing payments and managing subscriptions | Performance of contract |
| Sending transactional emails (notifications, transfer reminders, expiry alerts) | Performance of contract |
| Sending account-related communications (security alerts, service updates) | Legitimate interest |
| Improving and developing the Service | Legitimate interest |
| Complying with legal obligations (e.g. tax records) | Legal obligation |
| Responding to support enquiries | Legitimate interest |
We do not use your data for advertising purposes. We do not sell your data to third parties.
4. Cookies
We use only functional cookies that are strictly necessary to operate the Service. These cookies enable core functionality such as authentication and session management. They do not track you across other websites and are not used for advertising or analytics purposes.
Because we use only strictly necessary cookies, we do not display a cookie consent banner.
If we introduce analytics or other non-essential cookies in the future, we will update this policy and implement an appropriate consent mechanism.
5. Sub-processors
To provide the Service, we share data with the following third-party service providers (sub-processors):
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | United States |
| Cloudflare | Application hosting and delivery | Global CDN (no personal data stored) |
| Cloudflare R2 | File transfer storage | US (default) or EU (Frankfurt) |
| Bunny.net | Video storage and streaming | US (default) or EU (Frankfurt) |
| Supabase | Database | EU (Frankfurt) |
| Mailersend | Transactional email | United States |
| HelpScout | Customer support | United States |
All sub-processors are contractually bound to process your data only as necessary to provide their services and in accordance with applicable data protection law.
Your account data and metadata are always stored in the EU via Supabase, regardless of your chosen storage region. If you selected EU storage at registration, your uploaded videos and transfer files are additionally stored on European servers only.
6. Data Storage and Security
Your data is stored in the region you selected at registration:
- United States (default): Uploaded videos and transfer files are stored on servers in New York.
- European Union: Uploaded videos and transfer files are stored on servers in Frankfurt, Germany.
Regardless of your chosen region, your account data and metadata are always stored in the EU (Frankfurt) via Supabase.
This storage selection is permanent and cannot be changed after account creation.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include:
- Encrypted data transmission (HTTPS)
- Encrypted storage
- Access controls limiting who within our organisation can access your data
7. Data Retention
We retain your personal data for the following periods:
| Data type | Retention period |
|---|---|
| Account data | 90 days after account closure |
| Uploaded content (videos, transfers) | 30 days after account closure |
| Financial records (invoices, payment history) | 7 years (statutory requirement) |
| Reviewer email addresses | Deleted when the associated review link expires or is deleted |
| Support correspondence | 2 years after resolution |
When a retention period expires, we permanently delete the relevant data from our systems and those of our sub-processors.
8. Your Rights
Under the GDPR, you have the following rights in relation to your personal data:
- Right of access — You may request a copy of the personal data we hold about you.
- Right to rectification — You may ask us to correct inaccurate or incomplete data.
- Right to erasure — You may ask us to delete your personal data, subject to any legal obligations we have to retain it (such as financial records).
- Right to restriction — You may ask us to restrict the processing of your data in certain circumstances.
- Right to data portability — You may request your data in a structured, machine-readable format.
- Right to object — You may object to processing based on legitimate interests.
- Right to withdraw consent — Where processing is based on consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
9. International Data Transfers
Some of our sub-processors are based outside the European Economic Area (EEA), including Stripe, Mailersend, and HelpScout, which are based in the United States. Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we rely on an adequacy decision.
10. Children
The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email at least 14 days before the changes take effect. The current version is always available at framehub.com/privacy.
12. Contact
For any questions, requests, or concerns about this Privacy Policy or your personal data, please contact:
Framehub (Seedr B.V.)
KVK: 76334244
[email protected]