Privacy Policy

1. Information we collect

• Account information: your name and email, managed through our authentication provider (Clerk).
• Content you provide: video you upload or import, transcripts, prompts, and the edits/outputs you create.
• Payment information: processed by our payment processor (Stripe). We do not store your full card number.
• Usage information: how you interact with the Service (features used, log/device data) for analytics and reliability. Our analytics is first-party and cookieless — see Section 7.
• Connected accounts: if you connect Instagram, the information listed in Section 4.

2. How we use information

We use information to: provide and operate the Service; improve and develop our products and features; process payments; communicate with you; maintain security and prevent abuse; and comply with the law.

3. How we share information

We share information only:

• with service providers (“subprocessors”) who help us operate the Service, under contract and only as needed (see the list below);
• to comply with law or valid legal requests, or to protect rights, safety, and the Service; and
• in connection with a merger, acquisition, or sale of assets (with notice).

We never sell your personal information. We never sell Instagram data, and we never use it for advertising (see Section 4).

Subprocessors: Clerk (authentication), Stripe (payments), Amazon Web Services (hosting & storage, United States), Anthropic and DeepSeek (AI processing), ElevenLabs (audio processing), Mailjet (email).

4. Instagram accounts you connect

You can connect an Instagram professional account (Business or Creator) to Frame Controller. You connect it with Instagram’s own sign-in screen. You never give us your Instagram password. If an agency uses Frame Controller to manage your content, the agency posts and reads results for your account only after you connect it.

What we read. When you connect, we receive the following information from Instagram:

• your Instagram account ID (profile ID) and username;
• the posts on your account from the last 2 years and the Reels that we publish for you, with their captions, media types, publish times, and links;
• insights for those posts, for example views, reach, likes, comments, shares, saves, and watch time; and
• account insights, for example reach, views, accounts engaged, follower count, and the age groups of your followers and engaged audience.

What we post. We publish Reels to your account, including trial reels that Instagram shows to non-followers only. We publish only videos that you or your agency approved in Frame Controller. We do not post anything else, and we do not change your profile.

Why. We use this information only to publish your approved videos, to show you and your agency how each post performed, and to plan your next videos. Your agency sees the results for your account only.

Where we store it. We store your Instagram data in the United States with our hosting provider, Amazon Web Services. We encrypt your Instagram access token before we store it.

How long we keep it. We keep the following data for these periods:

• Access token: until you disconnect, until Instagram ends the access, or until 60 days pass with no activity on the connection, whichever is first.
• Instagram posts and insights: while the account stays connected, so we can show the history in Analytics.
• Links to the posts we published: while your Frame Controller account is active.
• Your Instagram data: deleted within 30 days after you disconnect, after Meta sends us your deletion request, or after you ask us to delete it. If the connection ends in another way, we delete the data 30 days after it ends, unless you connect the account again before then.

How to disconnect. You can disconnect at any time in one of two ways:

• In Frame Controller, open “Your business”, go to the “Instagram” section, and click “Disconnect”.
• In Instagram, go to Settings, then “Apps and websites”, and remove Frame Controller.

When you disconnect, we stop posting and stop reading your insights at once.

How to delete your data. Follow the steps on our data deletion page, or email support@framecontroller.com from the email address on your account. We confirm the deletion by email.

What we never do. We never sell your Instagram data. We never use it for advertising or ad targeting. We never share it with other clients, with data brokers, or with any party that is not a subprocessor in Section 3.

Meta Platform Terms. We use Instagram data in line with the Meta Platform Terms and the Meta Developer Policies. Instagram is a product of Meta Platforms, Inc. Meta’s own privacy policy covers the data that Instagram itself holds.

5. Data retention

We keep your information while your account is active. After you delete your account or it’s terminated, we delete or de-identify your personal data and content within 30 days, except where we must retain it for legal, security, or accounting reasons.

6. Your choices & rights

You can access or update your account information in the Service, or request access, correction, export, or deletion of your personal data by contacting support@framecontroller.com. Depending on where you live, you may have additional rights (for example, under California’s CCPA or the EU/UK GDPR); we honor rights that apply to you. We will not discriminate against you for exercising your rights.

To disconnect Instagram or delete your Instagram data, see Section 4 and our data deletion page.

7. Cookies & analytics

We use only essential cookies needed to run the Service (for example, to keep you signed in). Our product analytics is cookieless and tied to your account, so we do not set non-essential tracking or advertising cookies and do not track you across other sites.

8. Security

We use reasonable technical and organizational measures to protect your information (including encryption in transit and at rest with our hosting provider). No method is perfectly secure, so we can’t guarantee absolute security.

9. Children

The Service isn’t directed to children under 13, and we don’t knowingly collect their personal information. If you believe a child has given us information, contact support@framecontroller.com and we’ll delete it.

10. International users

We operate and store data in the United States. If you use the Service from elsewhere, you understand your information is processed in the U.S.

11. Changes

We may update this Policy. If we make material changes, we’ll provide reasonable notice. The “Last updated” date shows the current version.

12. Contact

Questions or requests: support@framecontroller.com.