Privacy policy

Fineframe is made and sold by Cheng Chang, New Taipei, Taiwan.

Contact: [email protected].

fineframe.app sets no cookies and runs no analytics or tracking. It is hosted on Cloudflare Pages: like any web host, Cloudflare receives the technical details every request carries, such as your IP address and browser, to serve the page.

When you sign in, the site keeps your session in your browser’s local storage, not in a cookie, until you sign out.

The download links lead to GitHub, and the example video plays from GitHub, under GitHub’s privacy statement.

Your Fineframe account holds your email address and either a hash of your password or, when you sign in with Google, the name, email address and picture Google shares. It also holds when you signed up and last signed in, and its sign-in records note the IP address each sign-in came from. Once paid plans open, it also holds your subscription’s status, plan and renewal date, which Paddle sends us.

The account is held by Supabase, our account provider, in Tokyo, under Supabase’s privacy policy. The app signs in to it only to check that you may use Fineframe; it sends us no usage data, footage or keys.

Fineframe is sold through Paddle.com, the Merchant of Record for every order. When you subscribe, Paddle collects your payment and billing details to take the payment, charge the right tax and send the invoice, under its own privacy notice. We never see your card details.

Your footage, its analysis, your edits, projects and brand kits stay on your computer, where the analysis and rendering run. No video file is uploaded, and no audio leaves your computer unless you use cloud speech.

Your API keys are kept in a file only your user can read, in the app’s folder. Each key is sent only to its own service.

The app sends Anthropic, with your Anthropic API key:

• To plan an edit: each file’s transcript with its name, length, frame size, shot changes, pauses, loudness peaks and audio events; the people’s names you list; what you tell Claude you want; and for music you offer, each track’s file name, length, tempo, the loudness of its sections and its licence name.
• To find the moments for several shorts: the same of every file except the names, and what you ask of the shorts.
• To write the motion graphics: the edit’s words with their timing, and where the captions and faces are in the picture; for a graphic that fails its checks, a picture of it as drawn.
• To check the cuts: for every cut, a picture of eight frames and the waveform of the two seconds around it, with the words on either side.
• For callouts on a screen recording: one frame for each callout planned, with the line said over it.
• For transcript correction, if you turn it on: the transcript, the video’s title (by default the file name) and your names and terms.
• To check your key: a request for the planning model’s details, which costs nothing.

Only with cloud speech, which you choose, or which the app offers when your computer has too little memory for the local speech model: the speech, as audio in chunks of at most 30 seconds, for the model’s provider to transcribe. Checking your OpenRouter key reads the key’s own details.

A rich edit, the default, sends nothing of your video for its B-roll, but fetches from the web:

• Web pages the speaker names: the app opens each page Claude picks from the transcript in a headless Chrome, with a fresh profile each time, and captures it, so that site sees a visit from your computer. It never fills a form, logs in or accepts a consent banner.
• Stock footage: the search words Claude writes go to Pexels or Pixabay with your own key, and the clip it picks downloads from there.

The app fetches the video from the site the link names, with yt-dlp, which it downloads from GitHub and keeps current. Nothing of yours is sent; the site sees the request from your computer.

The app downloads its components from their publishers: Python and the analysis’s packages, the speech and analysis models from Hugging Face, FFmpeg from GitHub, Chrome Headless Shell from Google and icons from npm. These requests carry nothing of your videos.

The only personal data we hold is your account. To see it or have it deleted, write to [email protected] from the account’s email address. For the data Anthropic, OpenRouter, Pexels or Pixabay hold, ask them. Questions about this policy: [email protected].

We post any new version of this policy here with its date.