1. Data Controller

The controller of your personal data is the operator of Framer Exporter. To exercise your rights or for privacy-related questions, contact: privacidade@seudominio.com.

2. Data We Collect

2.1 Authentication data

When you sign in with Google: name, email, and profile picture. We use this to identify your account, process exports, and send transactional communications (e.g. receipts).

2.2 Payment data

Payment processing is handled by Stripe. We do not store credit card numbers. Stripe may collect payment data in accordance with its privacy policy.

2.3 Usage data

We collect access logs (IP, time, actions on the service), exported site slugs, and export metadata to operate the service, prevent fraud, and improve quality.

2.4 Exported sites

Exported files are stored on our servers for the retention period of your plan (as described on the pricing page). After that period, files are deleted.

3. Purposes of Processing

Provide and operate the export service
Process payments and send receipts
Identify your account and manage subscriptions
Prevent fraud and misuse
Comply with legal obligations
Improve the service (aggregate, non-identifiable analysis)

4. Legal Basis (GDPR/LGPD)

For EU/EEA and Brazil residents: we process your data on the basis of (a) contract performance (providing the service); (b) consent, where applicable; (c) legitimate interest (security, improvements); (d) compliance with legal obligations.

5. Sharing with Third Parties

We share data only with providers necessary for the service:

Stripe (USA) – payments. Adequacy: DPA and standard contractual clauses where applicable.
Google (USA) – OAuth authentication. Adequacy: DPA and transfers in accordance with GDPR.
Resend (USA) – transactional email. Adequacy: DPA where applicable.
Vercel/Hosting provider – infrastructure.

We do not sell or share your personal data for third-party marketing.

6. Data Retention

Account data: while your account exists + 30 days after deletion. Exports: according to plan period (e.g. 7 days for one-time export). Logs: up to 12 months. Payment data: as required by law (typically 5–7 years for tax purposes).

7. Your Rights

7.1 General rights (GDPR, LGPD)

Access – obtain a copy of your data
Rectification – correct inaccurate data
Erasure – request deletion ("right to be forgotten")
Portability – receive data in a structured format
Restriction – limit processing under certain conditions
Objection – object to processing based on legitimate interest
Withdraw consent – when processing is based on consent

To exercise: email privacidade@seudominio.com. Response within 30 days. In the EU, you may complain to your country's data protection authority. In Brazil, to the ANPD.

7.2 CCPA/CPRA rights (California)

If you reside in California: right to know what data we collect, right to deletion, right to correction, right to opt out of sale/sharing (we do not sell data), right to non-discrimination. To exercise: privacidade@seudominio.com or via the "Do Not Sell or Share My Personal Information" link in the footer (if applicable).

8. Security

We implement technical and organizational measures to protect your data: encryption in transit (TLS), secure storage, restricted access, monitoring. No system is 100% secure; in the event of a breach that poses a risk, we will notify authorities and affected individuals as required by law.

9. International Transfers

Your data may be processed on servers outside your country. For EU/EEA transfers: we use standard contractual clauses, adequacy decisions, or other safeguards under the GDPR. For Brazil: transfers in accordance with the LGPD and ANPD regulations.

10. Minors

The service is not intended for users under 16 (or 13 in the USA). We do not knowingly collect data from minors. If we learn that we have collected data from a minor, we will delete it promptly.

11. Cookies and Similar Technologies

We use essential cookies for session and authentication. Third-party cookies: Stripe (payment), Google (login). We do not use tracking cookies for advertising. You can manage cookies in your browser settings.

12. Changes

We may update this policy. Material changes will be communicated by email or notice on the service. The "Last updated" date indicates the last revision. Continued use after changes constitutes acceptance.

13. Contact

Privacy questions: privacidade@seudominio.com. To exercise your rights: same email.