Privacy Policy

The data controller is Marwen Gallala, entrepreneur individuel (micro-entreprise), 139 rue de la Rose Blanche, 78955 Carrières-sous-Poissy, France (SIRET 841 665 052 00038). Contact for privacy questions and requests: support@payframe.studio.

• Account data: email address, display name, plan status and dates.
• Your content: paywall projects you save, and images or videos you upload to the studio.
• Billing data: handled by Stripe. We keep only your Stripe customer id, plan and renewal dates — never your card number.
• Support emails: messages you send to support@payframe.studio.
• Technical data: logs needed to run and secure the service (sign-in events, errors). Anti-abuse counters store only a one-way hash of your IP address or email, kept for about an hour.

• To provide the service you signed up for — contract.
• To take payments and keep accounting records — contract and legal obligation.
• To answer support requests — contract and legitimate interest.
• To prevent abuse and keep the service secure — legitimate interest.
• Aggregated, cookieless traffic statistics — legitimate interest.

We do not sell your data and we do not use it for advertising.

• Supabase — authentication, database and file storage for your projects and uploads (EU, Ireland).
• Stripe — payments, subscriptions and invoices.
• Resend — sending sign-in codes by email (EU, Ireland).
• Vercel — hosting the website and cookieless Web Analytics (USA).
• Hostinger — our support mailbox.

When a provider processes data outside the EU (for example Vercel or Stripe in the USA), the transfer is covered by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

We keep account data, projects and uploads while your account is active. When you delete your account from Profile, we delete your account, profile, projects and uploaded files (backups are overwritten within a short period). Billing records are kept by Stripe and by us for as long as accounting law requires (up to 10 years in France). Support emails are kept for up to 3 years after our last exchange.

Under the GDPR you can access, correct, delete or export your personal data, restrict or object to certain processing, and give instructions about your data after death. Use in-app account deletion, or email support@payframe.studio; we answer within one month. You may also lodge a complaint with the CNIL (www.cnil.fr) or your local supervisory authority.

We use only essential cookies (sign-in session) and browser local storage for drafts and preferences. Analytics are cookieless. Details are in our Cookie Policy.

Data is encrypted in transit (HTTPS). Each account can only read its own projects and files (row-level security and private storage). Payment details never reach our servers. No system is 100% secure: keep your email account protected, as it is how you sign in.

Payframe is not directed at children under 16. We do not knowingly collect their personal data.

We may update this Policy. The “Last updated” date on this page changes when we do; for material changes we will notify account holders by email.