My Gallery
Legal

Privacy Policy

We built DeFrame to help you connect with art — not to collect more about you than we need. Here is exactly what we gather, why, and how you can control it.

Last updated: March 5, 2026

This Privacy Policy describes how DeFrame Art ("DeFrame," "we," "us," or "our") collects, uses, and shares information when you use our website at deframeart.com and our mobile application (collectively, the "Service"). By using the Service, you agree to the practices described here.

1. Information We Collect

Information you provide directly:

  • Account registration — your name and email address when you create an account.
  • Password — stored as a one-way cryptographic hash; we cannot read it.
  • Taste preferences — art styles you enjoy and an optional location (city name or ZIP code) used to suggest nearby museums and galleries.
  • Saved content — artworks, articles, and other content you save to your collections.
  • Questions to DeFrame AI — text you type into the "Ask DeFrame" feature.
  • Newsletter subscription — your email and name if you subscribe to our newsletter.

Information collected automatically:

  • Session data — a session token stored in a secure, HTTP-only cookie used to keep you signed in.
  • Browser storage — dark-mode preference and recently viewed content are stored in your browser's localStorage. AI conversation history for the current session is stored in sessionStorage. This data stays on your device.
  • Standard server logs — IP address, browser type, and pages visited, retained briefly for security and debugging purposes.

Location information:

If you provide a city name or ZIP code in your taste preferences, we resolve it to approximate geographic coordinates (latitude and longitude) using the public Zippopotam.us geocoding service in order to calculate distances to nearby venues. We cache these coordinates in your account so we don't need to re-resolve them on every visit. We do not collect GPS location from your device.

2. How We Use Your Information

  • To create and maintain your account.
  • To personalize your experience — surfacing art recommendations, nearby museums, and galleries based on your stated preferences.
  • To answer your questions via the DeFrame AI feature.
  • To send transactional emails: email verification, password reset links, and (if subscribed) our newsletter.
  • To improve the Service through aggregated, anonymized usage analysis.
  • To detect and prevent fraudulent or abusive activity.

We do not sell your personal information. We do not use your information for third-party advertising.

3. Third-Party Services

We share information with the following service providers solely to operate the Service:

  • OpenAI — when you use "Ask DeFrame AI," your question text and a small amount of page context are sent to OpenAI's API to generate a response. OpenAI's use of this data is governed by OpenAI's Privacy Policy. We do not send your name, email, or account details to OpenAI.
  • Resend — we use Resend to deliver transactional emails (verification, password reset, newsletter). Your email address is shared with Resend for this purpose only. See Resend's Privacy Policy.
  • Render.com — our infrastructure provider. Application data, including your account information, is hosted on Render's servers. See Render's Privacy Policy.
  • Zippopotam.us — a public geocoding API used to convert ZIP codes and city names into coordinates. Only your location input (ZIP or city) is sent; no account identifiers are included.
  • Google Fonts — fonts are loaded from Google's servers. Your browser may send its IP address to Google when loading fonts. See Google's Privacy Policy.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal information and saved content are removed from our systems. Server logs are retained for up to 30 days. Email delivery logs are retained by Resend per their policy.

5. Cookies and Local Storage

We use one session cookie to authenticate you while you are signed in. This cookie is essential for the Service to function and is deleted when your session expires or you sign out.

We use localStorage to remember your dark-mode preference and recently viewed content. We use sessionStorage to maintain your AI conversation within a single browser tab. These are not used for tracking or advertising, and you can clear them at any time through your browser settings.

We do not use third-party tracking cookies or advertising pixels.

6. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us at hello@deframeart.com and we will delete it promptly.

7. Your Rights and Choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information — you can update your name, email, and preferences from within the app.
  • Delete your account and associated data by contacting us.
  • Opt out of our newsletter at any time via the unsubscribe link in any email we send.
  • Withdraw location — you can remove or change your location preference at any time in your taste profile settings.

To exercise any of these rights, email us at hello@deframeart.com. We will respond within 30 days.

8. Data Security

We use industry-standard practices to protect your data: passwords are hashed before storage, communication is encrypted over HTTPS, and session tokens are stored in secure cookies. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we may notify you by email. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out: