Privacy Policy
Last updated: March 11, 2026
AfterFrame is committed to protecting your personal data. This privacy policy explains what data we collect, why, and how we use it, in compliance with the General Data Protection Regulation (GDPR).
Data controller
Cyprien Zouaoui, sole proprietor operating as AfterFrame.
For any request related to your personal data: privacy@afterframe.app
Data we collect
Account information
Email address, name (optional), and authentication data when you create an account.
Usage data
Gallery delivery records, workflow progress, template customizations, and settings you configure within AfterFrame.
Gallery tracking data
When you use tracked delivery links, we collect view events (timestamp, approximate location via IP, and user agent) to let you know when your client opens the gallery.
Google Business data
If you connect your Google Business Profile, we store your Place ID, business name, rating, and review count. We do not access your Google account.
Legal basis for processing
- Contract: processing your data is necessary to provide the AfterFrame service.
- Legitimate interest: analytics and service improvement.
- Consent: optional notifications (email alerts, weekly digest).
Data retention
Your data is retained as long as your account is active. You may request deletion at any time. Upon deletion, your data is permanently erased within 30 days.
Data sharing
We do not sell your data. We use the following third-party processors:
- Railway — hosting infrastructure
- Resend — transactional email delivery
- Google Places API — business profile lookup (only when you connect reviews)
Your rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Data portability
- Object to processing
- Restrict processing
To exercise these rights, contact us at: privacy@afterframe.app
You may also file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés).
Cookies
AfterFrame uses only essential cookies required for authentication and session management. We do not use advertising or analytics cookies.