Privacy Policy

Your privacy matters. Here's how we protect your data.

Last updated: February 23, 2026

TL;DR - The Essentials

  • We collect only what we need to provide our AI-powered service
  • We never sell your personal data to third parties
  • You control what appears on your public website
  • You can access, download, or delete your data anytime
  • We use industry-standard encryption and security

What Information We Collect

Information You Provide

  • Account Information: Name, email address, password
  • Profile Information: Professional background, work history, education, skills, career goals
  • Photos: Profile photos and headshots you upload
  • Payment Information: Processed securely through Stripe (we don't store credit card numbers)
  • Website Content: Text, images, and other content you create

Automatically Collected

  • Usage Data: Pages viewed, features used, time spent
  • Device Info: IP address, browser type, operating system
  • Cookies: For authentication, analytics, and referral tracking

How We Use Your Information

Provide Our Service

Generate AI-powered resumes, LinkedIn profiles, headshots, and websites

Process Payments

Handle purchases and subscriptions via Stripe

Improve Experience

Analyze usage patterns to enhance features

Communicate

Send important updates and respond to support requests

Marketing

Send promotional emails (you can opt out anytime)

Prevent Fraud

Detect and prevent fraudulent activity or abuse

AI-Powered Content Generation

ReFrame uses artificial intelligence (Anthropic Claude and Replicate) to generate professional content. Your questionnaire responses and photos are sent to these AI services to create your personalized materials. We use these services in accordance with their privacy policies and data processing agreements.

How We Share Your Information

We do not sell your personal information.

Service Providers We Use

Stripe:Payment processing
Anthropic:AI content generation
Replicate:AI headshot generation
Vercel & Supabase:Hosting and infrastructure

Legal Requirements

We may disclose your information if required by law, court order, or government request.

Your Published Website

You control what appears publicly

If you publish a personal website through ReFrame, the content you choose to publish will be publicly accessible at your custom subdomain or domain.

You can unpublish your site or update content anytime through your dashboard.

Data Security

Encryption in transit (HTTPS/TLS)
Encryption at rest for sensitive data
Secure authentication via Supabase
Regular security updates
Limited employee access
Continuous monitoring

However, no system is 100% secure. We cannot guarantee absolute security but we continuously work to protect your data.

Your Rights & Choices

Access & Download

Access and download your data anytime from your dashboard

Update Information

Correct your personal information through account settings

Delete Account

Delete your account and data at any time (removed within 30 days)

Opt-Out of Marketing

Unsubscribe from promotional emails using the link in any email

GDPR Rights (EU)

Data portability, restriction of processing, right to object

CCPA Rights (California)

Right to know, delete, and opt-out (we don't sell your data)

Questions About Privacy?

We're here to help. Contact us anytime.

privacy@reframed.pro