Your work is yours.

Who is responsible for your data?

Deepform Oy (“Deepform”, “we”, “us”) is the controller of the personal data described in this policy. You can contact us at hello@deepform.fi.

What we collect

We collect only what is needed to operate Frame:

• Account data, including your email address, user ID and sign-in session.
• Workspace data, including workspace membership, roles and invitations.
• Project content, including images, masks, text instructions, generated images and videos, project names and related settings.
• Service records, including generation status, credits used, and limited technical information needed to secure, operate and improve the service.

Frame does not use advertising or cross-site tracking cookies. It uses essential cookies to keep you signed in and protect the service.

Why we use it

We use this data to provide Frame, authenticate users, save and share workspace projects, create requested renders, administer credits, prevent misuse, support customers and meet our legal obligations.

Our legal bases are performance of our agreement with you or your organisation, our legitimate interests in running a secure and reliable service, and legal obligations where applicable.

How project imagery is processed

When you request an image or video generation, the necessary project image, edit information and instruction are sent to Black Forest Labs (BFL) to process that request. BFL processes this material to provide the generation service. Our account is configured so submitted data is not used by BFL to train or develop its models.

Image generations use BFL’s EU endpoint. Video generation may be processed outside the EU because BFL does not currently provide an EU video endpoint. Do not submit material unless you have the authority to use it and are comfortable with this processing.

If you use Frame’s instruction-assistance feature, the text instruction and mode information may be sent to Anthropic to help interpret it. Images are not sent to Anthropic for that feature. We may also use specialist service providers for secure hosting, authentication, storage and email delivery.

Who can access it

Your project material is available to members of the workspace that contains it. Deepform personnel access personal data only when needed to operate, secure or support the service. Our processors are bound to handle data only for the services they provide to us.

How long we keep it

We keep account and workspace data while the account or workspace remains active. You can delete projects and project versions in Frame; this removes their associated stored files and records from the active service. We may retain limited information where necessary for security, accounting, dispute resolution or legal compliance.

Your rights

Depending on applicable law, you may ask to access, correct, delete, restrict or receive a copy of your personal data, or object to certain processing. You may also lodge a complaint with your local data protection authority. To make a request, email hello@deepform.fi.

Changes to this policy

We may update this policy as Frame changes or the law requires. The current version will always be available at this address, with its update date shown above.