Privacy Policy
This policy describes how YOUR_REAL_NAME_OR_BUSINESS_NAME handles information when you use FrameFlow and distinguishes local browser processing from temporary server processing.
Effective and last updated: 2 September 2026
Information processed
For an Instagram request, FrameFlow processes the URL you submit, the temporary source video returned for that URL, generated frames, selected settings, job identifiers, and technical request information needed to operate and secure the service.
IP address, request time, browser and network metadata, rate-limit events, error details, and security logs may be processed by FrameFlow and its infrastructure providers.
For the local video tool, file contents and generated images remain in browser memory. FrameFlow stores only the selected theme preference in browser local storage.
Local browser processing
Selecting a local video creates a temporary object URL available to the current page. Compatible timestamps are decoded by the browser and drawn to a canvas for PNG, JPEG, or WebP export.
The local file is not submitted to the Instagram extraction API. Loading the website still requires ordinary network requests for the application, fonts, analytics, security, consent, or advertising resources that are enabled.
Purposes
Provide the requested download and frame-extraction service. Prevent abuse, control operating costs, diagnose failures, and protect the service. Meet legal obligations and respond to valid rights, security, or copyright requests.
Serve and measure advertising only after advertising is enabled and subject to required consent choices. Analyse aggregate route usage to understand whether pages load and which workflows people use.
Retention
Temporary Instagram videos, frames, and ZIP files are normally scheduled for deletion within 30 minutes. Failed-job files are removed as soon as practical.
Generated local frames remain in page memory only for the current session and are released when replaced or when the page closes.
Operational and security logs are retained only for a documented period needed for security, abuse prevention, legal requirements, and incident response. Certain applicable Indian cybersecurity requirements may require qualifying logs to be retained longer than media files.
Analytics
FrameFlow may use privacy-conscious site analytics to count page visits, routes, device categories, and referral sources. Product and server logs may record whether a job completed, its duration, output size, and a non-sensitive failure reason.
Analytics must not intentionally record submitted Instagram URLs, local filenames, job access tokens, generated media, passwords, cookies, or private-account credentials.
Advertising and cookies
FrameFlow does not load Google advertising scripts while advertising is disabled. A publisher-account verification tag or ads.txt seller declaration does not itself display advertising.
If advertising is enabled, Google and approved advertising partners may use cookies or similar storage to provide, measure, limit, or personalise ads. Required regional consent will be collected through a Google-certified consent management platform before advertising is activated.
You can revisit advertising and privacy choices through the consent interface where available. Advertising is excluded from converter inputs, active processing, results, download controls, legal pages, and error pages.
Sharing and subprocessors
Information may be processed by hosting, content-delivery, security, monitoring, analytics, and advertising providers strictly for their services. FrameFlow does not sell submitted video URLs or generated frames.
Advertising providers may define certain advertising disclosures as a “sale” or “sharing” under some regional laws; applicable opt-out choices will be provided when advertising is enabled.
Your choices and rights
For access, deletion, correction, objection, consent withdrawal, or other applicable privacy rights, contact hello@frameflows.in. We may need information sufficient to locate and verify the relevant record. Because job media is temporary, it may already have been deleted before a request arrives.
Children
FrameFlow is not directed to children under 13. Users who cannot legally accept the Terms should use the service only with a parent or guardian. Advertising age-treatment settings will be configured according to applicable requirements.
Security and international processing
FrameFlow uses access tokens, restricted origins, temporary storage, transport encryption in production, resource limits, and other safeguards. No internet service can guarantee absolute security.
Infrastructure and advertising providers may process information in countries other than yours, subject to their contractual and legal safeguards.
Contact
YOUR_REAL_NAME_OR_BUSINESS_NAME operates the FrameFlow service. Privacy questions and applicable rights requests may be sent to hello@frameflows.in.