Privacy Policy

Frameshift Labs Inc. ("Frameshift Labs," "we," "our," or "us") is committed to protecting the privacy and security of the personal information entrusted to us by our customers, website visitors, and trial users. This Privacy Policy describes how we collect, use, share, and safeguard your information when you visit our website at www.frameshiftlabs.com, use our remote access and support products, or interact with us in any other capacity.

By accessing our website or using our services, you acknowledge that you have read and understood the practices described in this Privacy Policy. If you do not agree with our practices, please discontinue use of our website and services.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, request a free trial, fill out a contact form, or subscribe to our newsletter, we collect information that you voluntarily provide, which may include:

• Full name and job title
• Company or organization name
• Business email address
• Phone number (when optionally provided)
• Billing and payment information (processed via a PCI-compliant payment processor; we do not store full credit card numbers)
• Support ticket contents and communications with our team

1.2 Information Collected Automatically

When you visit our website or use our products, certain information is collected automatically through cookies, web beacons, and similar technologies:

• IP address and approximate geographic location
• Browser type, operating system, and device identifiers
• Pages visited, time spent on each page, and referring URLs
• Session metadata, including connection timestamps and session duration (for remote access sessions)
• Performance and diagnostic data necessary to maintain service quality

1.3 Information from Third Parties

We may receive information about you from business partners, identity verification providers, or publicly available sources to supplement the data we collect directly. This is used to improve account security, prevent fraud, and personalize your experience.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To provide, maintain, and improve our remote access, remote support, screen sharing, and device management products.
• Account management: To create and manage your account, process trial signups, and handle billing.
• Communication: To respond to inquiries, provide technical support, and send service-related notices (such as maintenance alerts and security updates).
• Marketing: To send newsletters, product announcements, and promotional materials when you have opted in. You may unsubscribe at any time using the link in any marketing email.
• Analytics and improvement: To understand usage patterns, diagnose technical issues, and improve our products and website.
• Legal compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
• Security: To detect, prevent, and address fraud, abuse, and security incidents.

3. How We Share Your Information

We do not sell your personal information. We may share your data in the following limited circumstances:

• Service providers: We share information with trusted vendors who perform services on our behalf, such as payment processing, email delivery, cloud hosting, and analytics. These providers are contractually bound to use your data solely for the purposes we specify.
• Legal obligations: We may disclose information when required by law, subpoena, court order, or regulatory request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will notify you of any such change in ownership.
• With your consent: We may share information for any purpose you explicitly approve.

4. Data Retention

We retain personal information for as long as your account is active or as needed to provide our services. If you close your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law (for example, financial records required for tax compliance). Session logs are retained for 12 months by default, though enterprise customers may configure custom retention periods.

5. Data Security

We implement industry-standard technical and organizational measures to protect your data, including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls and multi-factor authentication for internal systems
• SOC 2 Type II certification with annual third-party audits
• Regular penetration testing and vulnerability assessments

While we take extensive precautions, no method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at security@frameshiftlabs.com.

6. Cookies and Tracking

Our website uses cookies and similar technologies to improve your browsing experience, analyze site traffic, and personalize content. You can manage cookie preferences through your browser settings. Disabling certain cookies may limit the functionality of our website. We use the following categories of cookies:

• Strictly necessary cookies: Required for the website to function (e.g., session authentication).
• Analytics cookies: Help us understand how visitors interact with our site.
• Marketing cookies: Used to deliver relevant advertisements and measure campaign performance.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access and review the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data (subject to legal retention requirements)
• Object to or restrict certain processing activities
• Request a portable copy of your data in a machine-readable format
• Withdraw consent for marketing communications at any time

To exercise any of these rights, contact us at privacy@frameshiftlabs.com. We will respond within 30 days.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information:

• Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, and the business purposes for which it is used.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions (such as information needed to complete a transaction or comply with a legal obligation).
• Right to correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing: Frameshift Labs does not sell personal information. We do not share personal information for cross-context behavioral advertising purposes.
• Right to non-discrimination: We will not deny you services, charge different prices, or provide a different quality of service because you exercised your CCPA rights.
• Right to limit use of sensitive personal information: If we collect sensitive personal information as defined under CPRA, you have the right to limit its use to what is necessary to provide our services.

To submit a CCPA request, email us at privacy@frameshiftlabs.com or call us at +1 (206) 397-8421. We may need to verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf.

In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address), commercial information (transaction records), internet activity (browsing data, session logs), and professional information (job title, company name). This information was collected for the business purposes described in Section 2 above.

9. International Data Transfers

Frameshift Labs is headquartered in Seattle, Washington, United States. If you access our services from outside the United States, your information may be transferred to and processed in the United States. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected data from a child under 16, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may also send an email notification to active account holders. We encourage you to review this page periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@frameshiftlabs.com
• Phone: +1 (206) 397-8421
• Mail: Frameshift Labs Inc., 999 Third Avenue, Suite 2800, Seattle, WA 98104