Privacy Policy
Effective date: 26 August 2026 · Last updated: 26 August 2026
This Privacy Policy explains how Latis Creative ("FrameUpload", "we", "us", "our") collects, uses, and shares information when you use FrameUpload — a service that lets a Frame.io workspace owner ("Account Holder") generate links so that collaborators without a Frame.io seat ("Uploaders") can deliver files directly into a Frame.io folder.
By connecting a Frame.io account, generating an upload link, or submitting files through an upload link, you agree to the collection and use of information as described here. If you do not agree, do not use FrameUpload.
1. Who this policy applies to
FrameUpload is used by three kinds of people, and we collect different information depending on which role you're in:
- Account Holders — the person or business who connects a Frame.io account to FrameUpload via Adobe/Frame.io OAuth and manages upload links from the dashboard.
- Team Members — people invited into an Account Holder's Frame.io workspace who generate upload links themselves (available on qualifying plans).
- Uploaders — freelancers or collaborators who receive an upload link and send files through it. Uploaders do not need a Frame.io account.
2. Information we collect
2.1 From Account Holders and Team Members
When you connect a Frame.io account or are resolved as a workspace member, we receive the following from Frame.io/Adobe via OAuth:
- Name and email address
- Frame.io account ID, workspace ID, and user ID
- Workspace plan tier (e.g. Free vs. Teams), used to determine which features are available
- Team membership and folder names relevant to links you generate
We also set a session cookie when you log into the dashboard, used solely to keep you signed in.
2.2 From Uploaders
To use an upload link, we ask for:
- Email address (required) — used to attribute the delivery to you and to send a confirmation once your files arrive.
- The files you choose to upload — filenames, file types, and sizes are recorded for delivery notifications. The file contents themselves are streamed directly from your browser to Frame.io's storage via a short-lived, single-use presigned URL — file bytes never pass through or get stored on FrameUpload's own servers.
2.3 Collected automatically
- IP address, request timestamps, and basic technical logs (browser type, device info) generated by using the site
- The upload-link token used to identify which project/folder an upload belongs to
We do not use third-party advertising trackers or sell data to ad networks.
3. How we use information
- To route uploaded files to the correct Frame.io folder on the Account Holder's behalf
- To send delivery-confirmation emails to Uploaders and delivery-notification emails to Account Holders
- To authenticate dashboard sessions and enforce link expiry, file-type, and file-size restrictions configured by the Account Holder
- To notify an Account Holder when a Team Member attempts an action gated behind a paid plan
- To detect abuse, prevent fraud, and keep the service secure
- To maintain, troubleshoot, and improve FrameUpload
4. How we share information
We share information only as needed to operate the service:
| Recipient | Purpose |
|---|---|
| Adobe / Frame.io | To create assets, obtain upload URLs, and deliver files into the Account Holder's Frame.io account |
| Resend (email delivery) | To send delivery-confirmation and notification emails |
| Supabase | To store tenant, session, upload-link, and delivery-log records in our database |
| Railway | To host the application |
We do not sell personal information. We may disclose information if required by law, to enforce our Terms, or to protect the rights, property, or safety of FrameUpload, our users, or others.
5. Data retention
We retain Account Holder, Team Member, and upload-link records for as long as the connection is active, plus a reasonable period afterward for support and legal purposes. Delivery logs (filenames, sizes, timestamps, and Uploader email) are retained to provide delivery history in the dashboard.
Uploaded file content lives in the Account Holder's own Frame.io account and is governed by Frame.io's Privacy Policy and the Account Holder's own retention practices — not by FrameUpload.
6. Security
- Adobe/Frame.io credentials are stored server-side only and are never sent to the browser
- Upload URLs are single-use, short-TTL presigned URLs issued directly by Frame.io
- Filenames are sanitized before being passed to Frame.io
- All traffic is encrypted in transit via HTTPS
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, or to object to or restrict certain processing. To exercise these rights, contact us at contact@frameupload.site.
Because uploaded file content is stored in the Account Holder's own Frame.io account, requests to delete file content should also be directed to the relevant Account Holder or to Frame.io directly.
8. International data transfers
FrameUpload and the third parties listed in Section 4 may process information in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
9. Children's privacy
FrameUpload is not directed at children under 16, and we do not knowingly collect personal information from them.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of FrameUpload after changes take effect constitutes acceptance of the revised policy.
11. Contact us
Questions about this Privacy Policy or how your information is handled can be sent to contact@frameupload.site.