Privacy Policy
Short version: we collect your email so you can sign in, we store the scripts and images you make so you can come back to them, and we hand your script to an AI provider to do the work. Nothing is sold, and nothing trains a model.
Last updated 12 September 2026
Who controls your data
Cutframe is operated by Elio Hyziu, a sole trader based in Albania, who is the data controller for everything described here. To ask what we hold about you, or to have it deleted, email support@cutframe.app.
What we collect
Your email address. It's the only account identifier — there are no passwords, you sign in with a link.
The scripts you paste, and what we make from them. Your script, the prompts written from it, and the generated images are stored so your projects are there when you return.
Credit and payment records. What you bought and what you spent. Card details never touch our servers — Gumroad handles payment entirely and shares with us only the email you paid with, what you bought and what it cost.
Basic technical logs. IP addresses and request logs from our host, kept briefly for security and debugging.
There are no advertising trackers or third-party analytics scripts on this site.
Why we collect it
To run the service: sign you in, generate your images, keep track of your credits, and show you your projects. To fix problems when something breaks. To meet accounting obligations on payments.
If you're in the UK or EU: the legal basis is performance of a contract for the account and generation data, legitimate interests for security logs, and legal obligation for payment records.
Who else sees it
Running Cutframe means using other companies' infrastructure. Each one gets only what it needs:
| Service | What it sees |
|---|---|
| SupabaseAccount, database and image storage | Email address, scripts, prompts, generated images |
| VercelWebsite hosting | Request logs, IP address |
| fal.aiImage generation | The prompts written from your script |
| Google (Gemini API)Turning scripts into prompts | Your script text |
| StripePayments | Email address, payment details (handled entirely by Stripe) |
| ResendSign-in emails | Email address |
Your script is sent to Google's Gemini API to be turned into prompts, and those prompts are sent to fal.ai to generate images. Both are processed under their own terms. We don't sell your data to anyone, and we don't use your scripts or images to train models.
Some of these providers operate in the United States, so your data may be transferred outside your country.
How long we keep it
Projects, prompts and images stay until you delete them or ask us to close your account. Payment records are kept as long as accounting rules require. Technical logs are short-lived.
Your choices
You can delete any project from inside the app, which removes its script, prompts and images.
Email support@cutframe.app to get a copy of your data, correct it, or have your account and everything in it deleted. We'll action it within 30 days. If you're in the UK or EU you also have the right to complain to your data protection authority.
Security
Images are stored in a private bucket and only ever served through short-lived signed links. Database access is restricted so accounts can only read their own rows. Nobody can be perfectly secure, but if something goes wrong that affects you, we'll tell you.
Children
Cutframe isn't for anyone under 18, and we don't knowingly collect data from children. If you believe a child has an account, email us and we'll remove it.
Changes
If this policy changes materially we'll update the date at the top and, for anything significant, email you. Questions go to support@cutframe.app.