Privacy policy

Last updated: 20 October 2026

Who is responsible and how to contact us

FrameAmour is provided by Hummus Collective, LLC, a Delaware limited liability company in the United States. We are responsible for the personal information we use to operate the service as described in this notice.

Registered office: 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA. Email hello@frameamour.com for privacy questions, rights requests or complaints.

This notice covers visitors, owners, guests and people appearing in uploaded media. Gallery owners choose whom to invite and what to share. Their decisions and participants' use of downloaded material can affect your privacy independently of our operation of FrameAmour.

Information we collect

Owner accounts: name, email, a securely stored password credential or sign in authentication records, verification status, account settings and session records. Technical session records can include IP address, browser information and timestamps.

Galleries and participation: gallery and album titles, covers, wedding dates, settings, invitations, missing moment requests, guest session identifiers, a chosen name or anonymous display label, upload activity, moderation and removal requests. An anonymous display label does not make media or technical records anonymous.

Photos, videos and voice messages: uploaded files, their names, types, sizes, upload timestamps and available capture dates. Originals may contain camera metadata and images of identifiable people. We create thumbnails, display images and video preview frames and inspect audio duration to operate the gallery. Microphone recording starts only when you choose to record; you can listen before sending. Your device or browser may ask for microphone permission.

Payments and support: purchase and refund amounts, currency, status, Stripe references, and information you send to us. Stripe collects payment credentials through its checkout. FrameAmour's application database does not store full card numbers or card security codes.

Technical and usage information: request and error records, IP addresses, browser information and the limited analytics described below.

How and why we use information

We use information to operate and secure accounts and galleries, admit invited guests, process and display uploads, provide downloads, send transactional messages including expiry reminders, manage payments and refunds, respond to requests, moderate misuse, maintain the service and meet legal obligations.

Where applicable law requires a legal basis, we rely on contract performance for services requested by an owner, legal obligations for required records, and legitimate interests where permitted for proportionate security, support and service improvement. We assess the rights and interests of people appearing in uploaded media and handle removal requests. Where consent is legally required for a use, it must be obtained separately; accepting terms is not blanket privacy consent.

We do not use wedding media in public advertising without separate permission, sell wedding media or configure the FrameAmour analytics integration to deliver targeted advertising.

Who can see gallery content

Owners and authorised participants can see media according to the gallery's settings and moderation choices. A valid invitation link or QR code may give access to anyone who receives it, including through forwarding. Resetting a link cannot recover downloaded copies. Previously issued temporary media URLs may remain usable for their short validity period after access changes.

Authorised personnel and providers may access information when necessary to operate the service, resolve support or security problems, assess removal requests or comply with law. Private storage does not mean only the couple can technically access or decrypt the media.

We may disclose information where law requires or permits it to address a lawful request, protect people or the service, or complete a business transfer with the applicable protections.

Service providers

Render hosts the application, database and media processing. Its systems process account, gallery and technical records. Media processing workers temporarily handle uploads to make display copies; bulk gallery downloads can pass through the application.

Cloudflare R2 stores originals and generated media in private storage. Authorised uploads and downloads use temporary signed links. Cloudflare also processes the technical request information needed to deliver them.

Stripe processes payments and refunds and handles payment information for its fraud prevention, accounting and legal responsibilities. Its own privacy notice applies to its processing.

Resend delivers transactional email, including account access messages and expiry reminders. It receives recipients' email addresses, message content and delivery information. Google Workspace handles our support mailbox. Messages addressed to hello@frameamour.com arrive in our Hummus Collective inbox, and replies may use the FrameAmour alias.

PostHog Cloud EU processes limited analytics as described below. Our analytics integration excludes wedding media.

Analytics, cookies and choices

When enabled, PostHog operates on marketing and owner account or dashboard pages. Its browser software does not load on guest gallery pages. It is configured without analytics cookies or analytics identifiers in browser storage. Technical request information, including IP address and browser information, supports an identifier that changes daily.

We record page visits and selected customer journey events, such as a purchase or a click on a purchase button. Automatic capture of arbitrary interactions, session recording and heatmaps are disabled. Our application filters event data to exclude names, email addresses, gallery titles, invitation secrets and wedding media. A short lived page identifier may link a visit to the checkout reached from that page.

Signed in owner events may be associated with an internal account identifier. This is pseudonymous information and is not a guarantee of anonymity. Limited first guest and first guest upload milestones can be recorded by our server and identify the gallery rather than creating a guest person profile. Purchase events can include an identifier, amount, currency and live or test payment mode.

Our analytics controls respect supported browser Do Not Track and Global Privacy Control signals. You can enable those browser signals or contact us about objection or other applicable privacy rights. Cookieless operation does not remove privacy obligations.

For convenience, the guest welcome screen remembers the name you enter for that gallery in your browser's local storage. Choosing anonymous participation removes that saved name. You can also clear it through your browser's site storage settings.

To resume a large interrupted upload, your browser can retain a file fingerprint, upload identifier, completed part checksums and storage ETags on your device. Resume information can be used for up to 23 hours after the upload starts. We remove it after completion or an explicit cancellation, and clear expired progress during a later upload. We do not store file contents or signed download or upload URLs in this resume information. You can clear it through your browser's site storage settings; private browsing or blocked storage may prevent resuming.

Necessary cookies support owner authentication and guest sessions. Guest session cookies can last up to 180 days and owner sessions up to 7 days, subject to earlier removal or invalidation. A cookie's lifetime does not determine gallery retention or permission to access expired content. Blocking necessary cookies can prevent account or gallery functions from working.

International processing

FrameAmour operates from Dubai through a United States company and uses international providers. The application's infrastructure configuration uses Render's Frankfurt region and PostHog's EU cloud service. Providers and their subprocessors may process information in other countries. A Cloudflare storage location preference is not a promise that all information stays exclusively in one country.

International processing remains subject to applicable transfer restrictions and safeguards. Contact us for information about the safeguards relevant to a particular transfer. This notice is not a request for blanket consent to transfers or sensitive information processing.

How long we keep information

Paid gallery content: until 12 months after the recorded wedding date, plus additional years expressly purchased during the final 30 days before expiry. A wedding date is required before preview uploads and must meet the original 18 month booking deadline. Before a date is entered, the purchase has a provisional deadline shown in the dashboard; entering the wedding date determines the actual postwedding expiry. The owner dashboard shows the expiry date. We send expiry reminders approximately 30 days, 7 days and 1 day beforehand. Access closes at expiry, and active media and associated content records are erased within 30 calendar days after expiry unless deleted earlier.

Refunded galleries: access closes when the refund is processed. Active media and associated content records are erased within 30 calendar days after closure. Limited payment and refund records can remain where needed for legal obligations and disputes.

Recovery and backups: independent recovery of gallery media and the deletion schedule for any recovery copies have not yet been verified. New purchases remain paused while we complete these checks. Do not rely on FrameAmour as your only copy of important media. Separately retained transaction, security or legal records follow their own necessary retention purposes. Contact us for the retention information applying to an existing account or gallery.

Owner accounts and guest records: owner details remain while the account is active and necessary to deliver the requested service. On a valid closure or erasure request, we remove information no longer needed within the applicable legal time limit, normally within 30 calendar days. Guest sessions and moderation records follow the gallery unless an earlier erasure duty applies. Deleting a gallery does not automatically close an owner account.

Technical logs, support and analytics: retained only for the purposes for which they are needed. We assess duration by the issue being investigated, service improvement needs, security risks, applicable provider settings and any legal or dispute obligation. Contact us for information about the retention applying to a specific record. FrameAmour does not offer a free trial.

Required records: limited accounting, tax, transaction, complaint and dispute records may need to be retained after a gallery is erased. The period depends on the applicable tax reporting, limitation and preservation requirements. We retain the relevant records for that purpose, restrict their use and do not preserve an entire gallery on that basis.

Your rights and choices

You may use gallery controls to manage content or request removal. You can also email hello@frameamour.com for access, correction, deletion or other rights available under applicable law, including restriction, portability, objection and withdrawal of consent. You may contact us without an account, including if you only appear in uploaded media.

Provide enough information to locate the account, gallery or item. We may request proportionate verification to protect other people's information. We respond within the applicable legal time limit and explain any lawful reason for limiting a request. A request to delete a gallery cannot remove copies already downloaded by others.

You can complain to us or to a privacy regulator with jurisdiction over your situation. For example, UK residents may contact the Information Commissioner's Office, and EU residents may contact the supervisory authority in their country of residence, work or the alleged infringement. Other local rights and complaint routes remain available where applicable.

Children and security

Direct use of FrameAmour, including owner accounts, purchases and guest participation, is for people aged 18 or over. Adults uploading images of children must have the permissions required by law. If you believe a child is using the service independently or media has been shared without the required permission, contact us so we can investigate and take appropriate action.

We use access controls, private storage and temporary signed URLs to protect information. No service can guarantee absolute security. Protect your account and invitation links, and contact us about suspected unauthorised access. We handle security incidents and required notifications under applicable law.

Changes to this notice

We update this notice when practices change and identify the effective date. Material changes are communicated where required, and any consent legally required for a new use must be obtained separately.