Privacy policy

Last updated 15 October 2026

We collect as little as we can, use it only to run Framebank, and never sell it or train AI on it.

Louie Warren runs Framebank from the United Kingdom and is the controller of your data under UK GDPR, registered with the Information Commissioner's Office under number ZC275146. Contact: [email protected].

Your images are never used to train AI.

Not by us, and not by anyone we work with. We don't sell or license your images or data, and we never will.

What we store

  • Account: your email, when you joined, how you sign in (Google or email code), and whether you've been approved.
  • Profile: the name and photo you choose, your privacy settings, and whether AI labels are on.
  • Boards: the boards you own or are on, who they're shared with, and each person's access.
  • Images: the files you upload, smaller previews we make of them, and their details: size, colours, shot type, tags, file name, the date it was taken, and the web address it came from if you added it from a website. Originals are kept exactly as you uploaded them, so any data inside the file (such as camera or location details) stays in it, and people with download access get that file. Strip it before uploading if you'd rather not share it.
  • Connected browsers and apps: for each browser you connect the extension in, and each Resolve script, Premiere panel or Lightroom plugin you download or sign in, its name, when it was connected and when it was last used. We keep only a scrambled (hashed) copy of its sign-in token. When an app signs in with a code, the code and a scrambled copy of the app's secret are kept for up to 10 minutes, until it finishes signing in.
  • Plan: which plan you're on, whether it's active, when it renews or ends, and Paddle's reference for your subscription and customer record. If you verify as a student, the university email you verified and when that runs out. Your card details, billing address and receipts are held by Paddle, not us.
  • Invitations: if someone invites you to a board, we store your email address, who invited you and the access they gave, and send you one email about it. If you never sign in, you can ask us to delete it.
  • Comments on images: what you write and when. Everyone on that image's board sees them with your name and photo.
  • Ideas board: ideas and comments you post, and which ideas you voted for. Ideas and comments are shown to every Framebank member with your name and photo. Who voted for what isn't shown to anyone, only the totals.
  • Security records: a log of sign-ins, uploads, edits, sharing changes and removals, kept for 180 days to protect accounts and investigate abuse. Short-lived counters per IP address to stop people hammering the sign-in.

Why (our lawful basis)

  • To provide Framebank to you: storing your boards and showing them to the people you choose (contract).
  • To let a board's owner invite you by email, and tell you about it (legitimate interests: you'd expect to hear about an invite from someone you work with).
  • To email you when someone comments on an image you added, at most once an hour per image (legitimate interests; turn it off in Profile).
  • To keep it secure and stop abuse: sign-in checks, rate limits, the security log (legitimate interests).
  • To run paid plans: knowing which plan you're on and checking student eligibility (contract).
  • To meet legal obligations, such as answering a valid copyright complaint or court order.

No advertising, no analytics, no tracking pixels, and no profiling.

Artificial intelligence

  • We never use your images, or anything about them, to train AI models, and we don't let anyone else do so.
  • AI labels are on by default, and you can turn them off. A small preview of each image you add (never the original file) is sent to Anthropic's Claude to suggest a shot type and a few descriptive tags, which is what lets you filter boards by shot and search by what's in a frame. You can also ask for labels on images you can edit, and we may label images added before this was switched on. Anthropic processes it only to answer and doesn't use it to train its models. Turn it off in your Profile any time and nothing more of yours is sent.
  • Labels are suggestions: they're marked as auto-detected and you can change them.

The "Save to Framebank" browser extension

  • It does nothing until you right-click an image and choose a board. Then it downloads that one image, works out its size and colours on your computer, and uploads it to your board with the address and title of the page it was on. To confirm, it shows a small message in the corner of that page.
  • It doesn't read the pages you visit, track your browsing, or collect anything else. It stores only its sign-in (a token you can disconnect any time from your Profile), your list of boards, the last board you saved to, and whether you want system notifications.
  • It only ever talks to Framebank, and the sites the images you choose come from.

The DaVinci Resolve script

  • It does nothing until you run it. Then it exports the one frame under the playhead, works out its colours on your computer, and uploads it to the board you picked in Profile with the project and timeline names, the clip name, the timecode, and the scene, shot, take, camera and lens details if your footage has them (for Sony clips, read from the clip and the XML file beside it).
  • It doesn't send your footage, project files or anything else, and it only talks to Framebank. It deletes its temporary copies of the frame once it's sent.
  • Its key is written into the script file. Disconnect it any time from your Profile.

The Premiere Pro panel

  • It sends nothing until you click in it. While it's open, it checks every so often for images you've sent it from the website. Sending a frame exports that one frame of your sequence, works out its colours on your computer, and uploads it with the project, sequence and clip names, the timecode, and the camera settings Sony cameras record in the clip and the XML file beside it, if there are any.
  • It doesn't send your footage, project files or anything else, and it only talks to Framebank. References you import are saved to a Framebank folder in your Movies (or Videos) folder.
  • The copy from your Profile has its key written into it. The copy from the Adobe Creative Cloud Marketplace signs in with a code you approve on framebank.io, and keeps its key in Premiere's secure storage (your computer's keychain). Sign out in the panel, or disconnect it any time from your Profile.

The Lightroom Classic plugin

  • It only sends photos you publish to Framebank: a JPEG Lightroom makes, its title or file name, the date it was taken, and its camera, lens and exposure settings. It works out the colours on your computer.
  • Removing a photo from a Framebank collection in Lightroom removes it from the board. "Get Framebank labels" reads the shot type and tags of photos you select and adds them as keywords in your catalogue. "Get from Framebank" downloads the images you sent to Lightroom from the website into a Framebank folder in your Pictures folder and adds them to your catalogue.
  • It only talks to Framebank. Its key is written into the plugin; disconnect it any time from your Profile.

Who can see your things

  • A board and its images: only the people on it, at the access its owner chose.
  • Your name and photo: people on boards you're on, and every member if you post on the ideas board. Your email: only if you turn that on in Profile (and a board's owner, who invited you by it).
  • Framebank isn't indexed by search engines, and images can't be opened without signing in.

Services we use

These process data for us, only to run Framebank:

  • Cloudflare: hosting, the database and image storage, and its bot check on the email sign-in form.
  • Google: only if you choose "Continue with Google", to confirm your email. Our pages also load fonts from Google Fonts, which sees your IP address.
  • Resend: to send emails: sign-in codes, invitations and comment notifications.
  • Anthropic: unless you turn AI labels off, to suggest shot types and tags from a small preview of your images.

Paddle (Paddle.com Market Ltd) is our reseller and merchant of record for paid plans. If you buy one, Paddle takes the payment, works out tax and sends receipts, as an independent controller under its own privacy policy. We give Paddle your email, so it can link the purchase to your account; Paddle tells us your plan and its status.

Some of these process data outside the UK, under the UK's approved safeguards for international transfers.

Cookies

One cookie keeps you signed in (30 days), and a short-lived one protects a Google sign-in while it's happening. Both are essential, so there's no banner. If you open the checkout to buy a plan, Paddle's checkout uses its own essential cookies to take the payment. Your browser also remembers display choices like zoom and dark mode on your device. That never reaches us.

How long we keep it

  • Your account and boards: until you delete them.
  • Removed images and deleted boards: gone for good 30 days later (the undo window).
  • Connected browsers and apps: until you disconnect them or delete your account.
  • Security log: 180 days. Sign-in and student codes: 10 minutes. Sign-in sessions: 30 days, or until you sign out.
  • Your plan: until you delete your account, which also cancels any paid plan straight away. Paddle keeps payment and tax records for as long as the law requires.
  • When you delete your account, your profile and sessions go straight away, boards you own follow the 30-day rule, and images you added to other people's boards stay there without your name. Your votes on the ideas board are removed; ideas and comments you posted (on the ideas board and on images) stay, without your name (delete them first if you'd rather they went).

Children

Framebank is only for people aged 18 and over, and isn't designed for or aimed at children. If you think someone under 18 has an account, email [email protected] and we'll close it and delete their data.

Your rights

You can see, download, correct and delete your data yourself from your Profile. You also have the right to object, to restrict how we use it, and to ask us anything about it: email [email protected] and we'll reply within a month. If you're unhappy with our answer, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy in a way that matters, we'll tell you before it takes effect.

Terms of use · Back to Framebank