Your data and privacy

What Frame does and doesn’t do

• Frame doesn’t sell, rent or trade your personal information, and doesn’t run ads.
• Sensitive fields are encrypted in the database, and session tokens are stored only as hashes.
• The agent never saves passwords, codes, keys or ID numbers to its memory.
• Optional analytics stay off unless you turn them on, and Frame respects Global Privacy Control.

Data retention

In Settings → Privacy and data → Data retention, choose how long Frame keeps each kind of data: 30 days, 90 days, 12 months, or until you delete it. A daily clean-up removes anything older than the period you picked.

• Scan results: breach matches, broker listings and leak tests (12 months by default).
• Conversations with Frame: messages and tool results (30 days by default).
• Exposure reports: monthly snapshots and shared links (kept until you delete them by default).
• Memories: what the agent remembers about you (kept until you delete them by default). You can also turn memory off, or edit and forget items, in Settings → Frame.

Export your data

Settings → Privacy and data → Export my data gives you a JSON file with everything Frame stores about you. It’s ready in seconds, and the download link expires after 24 hours. Frame may ask you to confirm it’s you first.

Delete your account

• Schedule deletion (recommended): your account locks now and is deleted in 7 days. Scans and alerts pause, and one click restores everything. No reminder email is sent.
• Delete now: everything is erased immediately and can’t be recovered. Type DELETE to confirm.

Either way, active removal requests stop and any paid plan is cancelled. Copies in Frame’s backups expire within 35 days. Export your data first if you want a copy.

Other privacy requests

For anything else, like a correction or a question about what Frame holds, use the contact form or email privacy@frameprivacy.com. To confirm it’s you, Frame asks you to reply from your account’s address or sign in. It never asks for government ID. The full details are in the privacy policy.