Privacy

FrameDiff stores the minimum account and project information needed to provide the hosted product.

Information we process

When you sign in, we receive your email address and basic profile information from Google through Supabase Auth. We store project metadata, repository connections, sync history, and files you intentionally upload.

Your repositories and media

GitHub access is limited to repositories you select when installing the FrameDiff GitHub App. Repository contents and uploaded media remain private to your workspace. We do not sell personal information or use private project content for advertising.

MCP operational diagnostics

When an MCP tool reaches FrameDiff, we retain bounded, redacted tool arguments for operational support for 14 days and metadata for 90 days. We do not collect your full host chat, credentials, or source files. Diagnostic content is encrypted and available only through scoped support access. Workspace owners can choose metadata-only diagnostics in account settings. FrameDiff does not use this information for training.

Service providers

FrameDiff currently relies on Supabase for authentication, database, and object storage; Amazon Web Services for application hosting and render processing; Google for optional sign-in; and GitHub for repository sync. Those providers process data under their own terms.

Retention and control

You can revoke Google access from your Google Account and remove the GitHub App from GitHub at any time. To request deletion of your FrameDiff account and hosted data, email v@vikasreddy.io.

Security and changes

We use authenticated, encrypted connections and scoped access controls. No internet service can promise absolute security. Material updates to this policy will be posted on this page.