FrameShare Privacy Policy

Last Updated: October 2025

FrameShare ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services (collectively, the "Platform"). By using FrameShare, you agree to the terms of this Privacy Policy.

1. Scope and Eligibility

FrameShare is intended for users aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you are a therapist, educator, or researcher using FrameShare with clients or students, you are responsible for obtaining all necessary consent.

2. Information We Collect

We collect information that you voluntarily provide, such as your name, email address, professional credentials, and session data. We also automatically collect limited technical data, such as browser type, device information, and usage statistics, to improve our Platform performance and security.

3. How We Use Your Information

FrameShare uses personal data solely to provide and improve its services. Specifically, we use your information to:

  • Facilitate secure art therapy and related sessions.
  • Maintain session records and summaries for your account.
  • Improve Platform performance and user experience.

FrameShare does not use user data for advertising, marketing, or AI model training. We do not sell or rent personal data to third parties.

4. Artwork and Data Privacy

All artwork and related session data created or uploaded through FrameShare are treated as confidential. We will never share artwork publicly without explicit, informed consent from the user or, where applicable, the client. Users may choose to share artwork voluntarily within the Platform or externally, but FrameShare will not disclose content without authorization.

5. Data Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information and artwork data. However, no system is entirely secure, and users assume responsibility for maintaining the confidentiality of their account credentials.

6. Legal Basis for Processing (GDPR and HIPAA)

For users located in jurisdictions such as the European Union, FrameShare processes personal data under the following legal bases:

  • To perform our contractual obligations to provide the Platform.
  • To comply with legal and regulatory requirements.
  • To serve legitimate interests in maintaining and improving our services.

For U.S. users subject to HIPAA, FrameShare implements safeguards and data handling practices consistent with HIPAA principles, but therapists are responsible for ensuring compliance in their individual clinical use.

7. Disclosures and Third-Party Services

We may share information with trusted service providers who help us operate the Platform (e.g., cloud hosting or analytics), but only to the extent necessary to perform their functions and under strict confidentiality agreements.

8. International Data Transfers

FrameShare may transfer data to jurisdictions outside your home country where data protection laws may differ. We use contractual and technical measures to ensure adequate protection for such transfers.

9. Your Rights and Choices

You may access, correct, or delete your personal data at any time by contacting us. Depending on your jurisdiction, you may also have rights to restrict or object to certain processing activities.

10. Verification of Provider Credentials

FrameShare may request verification of professional credentials for users representing themselves as licensed providers. We reserve the right to suspend or remove accounts that misrepresent professional status or use the Platform in ways inconsistent with its purpose.

11. Prohibited Uses

You may not use FrameShare to:

  • Engage in harassment, hate speech, or unlawful behavior.
  • Upload or share content without appropriate consent.
  • Attempt to extract or scrape user or artwork data.
  • Use FrameShare to provide unlicensed therapeutic or diagnostic services.

12. Governing Law

This Privacy Policy and any disputes arising from it shall be governed by the laws of the State of New York, without regard to its conflict of laws principles.

13. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at: support@frameshare.org