Privacy Policy

1. Overview

At ChatFrame ("we", "us", or "our"), we take your privacy seriously. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our platform, APIs, automated task runners, and web services.

By using ChatFrame, you consent to the data collection and usage practices described in this policy.

2. Information We Collect

We collect information necessary to provide, secure, and improve our services:

• Account Information: When you sign in via Google OAuth, we receive your basic profile details, including your email address, full name, and avatar image URL.
• Chat & Automation Content: We store conversations, prompt inputs, tool-call outputs, automation definitions, schedules, and execution logs to render your workspace history and fulfill scheduled runs.
• Billing Information: Payment transactions are handled directly through Stripe. We do not store credit card numbers or financial credentials on our servers; we store only payment provider identifiers, subscription tier status, and credit quota records.
• Cookies and Local Storage: We use essential session cookies for authentication (chatframe_session), theme and display preferences (chatframe.theme), and cookie consent records.
• Analytics: We use Umami Analytics, a privacy-respecting analytics solution, to analyze aggregated website traffic without tracking you across third-party websites or collecting personally identifiable advertising profiles.

3. How We Use Your Information

We utilize collected information strictly for legitimate operational purposes:

• Providing, maintaining, and updating the conversational workspace and background runner.
• Executing scheduled automations, webhooks, and tool integrations (e.g. Decodo web scrapers, Tavily search).
• Processing payments, calculating computational credit quotas, and managing subscriptions.
• Preventing fraudulent activity, abuse, unauthorized access, and violations of our Terms of Service.
• Responding to user inquiries, technical support tickets, and operational feedback.

4. Third-Party Service Providers

We engage trusted third-party providers to support core operational capabilities:

• Authentication: Google OAuth for secure sign-in.
• Payments: Stripe for PCI-DSS compliant checkout and subscription billing.
• AI Model Inference: Enterprise LLM providers (including xAI / Grok and OpenAI) to generate chat responses and automate agent tasks.
• Web Scraping & Search: Decodo and Tavily APIs to fetch real-time search engine results and social media trends requested by user prompts.
• Analytics: Self-hosted Umami Analytics for non-invasive site metrics.

We do not sell, rent, or trade your personal data to third-party advertisers or data brokers.

5. Data Retention and Security

We store your conversation records and automation tasks for as long as your account is active. You can delete conversations and automations individually at any time from your dashboard.

We implement industry-standard security measures, including HTTPS encryption in transit, strict session validation, and least-privilege database access, to protect your personal data from unauthorized disclosure, alteration, or destruction.

6. Your Rights and Choices

Depending on your geographic location, you may have legal rights under data protection laws (such as GDPR or CCPA), including:

• The right to access and obtain a copy of your personal data.
• The right to rectify inaccurate or incomplete information.
• The right to request the deletion of your account and associated data.
• The right to withdraw consent for non-essential cookies and analytics at any time.

To exercise any of these rights, please contact us at [email protected].

7. Changes to This Policy

We may revise this Privacy Policy from time to time. When we make material modifications, we will update the "Last updated" date at the top of this document. We encourage you to review this page periodically.

8. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or our data practices, please email us at [email protected].