What we collect, and why.
Not much, as it turns out. Here’s what this website gathers, what we do with it, and how to ask us to change or delete it.
Effective September 30, 2026
Who we are
Framepoint (“Framepoint”, “we”, “us”) designs and builds AI-assisted business systems. We’re based in Weston, Connecticut, USA. This policy covers personal information we collect through framepoint.ai and when you write to us. For this information, Framepoint is the “controller”: we decide what’s collected and why.
What we collect
What you send us
When you email us or use the contact page, we receive what you write: usually your name, email address, company, and a description of the process you’d like help with. The contact page sends your note through our web host, Netlify, which stores it, checks it for spam and passes it to us by email. Nothing you type there leaves your browser until you press send.
Visit statistics, only with your consent
If you click “Yes, that’s fine” on the cookie card, we use Google Analytics 4 to count visits. It records things like the pages you view, how you arrived, how long you stayed, your device and browser type, and your rough location (city or country). Google says Analytics 4 doesn’t log or store IP addresses. We’ve switched off Google signals and ad personalisation, so this data isn’t tied to your Google account or used for ads. If you say no, Google Analytics never loads.
What any website receives
When your browser loads a page, the services that deliver it see your IP address and basic browser details. That includes our web host, Netlify, Google Fonts (for our typefaces) and jsDelivr (for the library that draws the sketches). These services don’t set cookies on this site. Our host may keep short-term server logs to keep the site running and secure.
We don’t ask for, and please don’t send us, sensitive information such as health, financial or government ID details.
How we use it
- To read and reply to your message, and to talk with you about possible work.
- To understand which pages are useful and improve the site (only with your consent).
- To keep the site secure and working.
- To meet legal, tax and accounting duties, and to protect our rights if there’s a dispute.
We don’t sell personal information. We don’t “share” it for cross-context behavioural advertising, run targeted ads, or make decisions about you by automated means that have legal or similarly significant effects.
Legal bases (EU and UK visitors)
If you’re in the European Economic Area, the UK or Switzerland, we rely on these legal bases:
- Consent for analytics cookies. You can withdraw it any time with “Cookie settings” in the footer.
- Steps before a contract when you ask us about working together.
- Legitimate interests in replying to messages, running a secure website and improving it.
- Legal obligation where the law requires us to keep records.
International transfers
We’re in the United States and so are most of our service providers. If you write to us from elsewhere, your information comes to the US. Where the law requires it, we rely on safeguards such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long we keep it
- Messages that don’t lead to work: up to 24 months after our last exchange, then deleted.
- Client records: as long as the engagement lasts, and afterwards for as long as tax and legal rules require.
- Analytics data: 14 months in Google Analytics, then deleted automatically.
- Your cookie choice: 6 months, then we ask again.
Your rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you and get a copy;
- correct it if it’s wrong;
- delete it;
- receive it in a portable format;
- object to or restrict how we use it;
- withdraw consent, without affecting what happened before;
- opt out of sale, sharing for targeted ads, and profiling. We don’t do any of these, but the right stands.
This includes rights under the GDPR and UK GDPR, and under US state laws such as those in California, Connecticut, Colorado and Virginia. We won’t treat you differently for using them.
How to ask
Email contact@framepoint.ai and tell us what you’d like. We may need to confirm it’s you before we act, usually by replying to the email address we have on file. You can also ask someone to make a request for you, with your written permission. We’ll answer within the time the law gives us, usually 30 days and never more than 45.
If we turn down your request, you can appeal by replying with “appeal” in the subject line, and someone who wasn’t involved in the first decision will review it. If you’re still not satisfied, you can complain to your local data protection authority or your state attorney general.
Global Privacy Control
If your browser sends a Global Privacy Control signal, we treat it as a request to opt out. Analytics stays off unless you switch it on yourself.
Data in client systems
When we build or run a system for a client, we may handle personal information that belongs to that client’s customers or staff. We do that only on the client’s instructions and under a written agreement with them. The client decides how that information is used, and their privacy notice applies. If your information is in one of our clients’ systems, please contact that client first. We’ll help them respond.
Children
This site is for businesses and isn’t aimed at children. We don’t knowingly collect information from anyone under 16. If you think a child has sent us information, tell us and we’ll delete it.
Security
We use reasonable safeguards, such as encrypted connections, access controls and limiting who can see messages. No system is perfectly secure, so please don’t email us anything you’d be harmed by losing.
Changes to this policy
If we change how we handle personal information, we’ll update this page and the date at the top. If a change is significant, we’ll make it obvious on the site.
Contact
Questions, requests or worries: contact@framepoint.ai. A person reads every note.
Framepoint, Weston, Connecticut, USA.