AssetFrame

Privacy Policy

What we collect and why.

Last updated: June 2026.

Who we are

AssetFrame is the data controller for personal data processed through this site. Contact: hello@assetframe.co.uk.

What we collect

Account data (your email and authentication details) is handled by our authentication provider, Clerk. Payment data is handled by our merchant of record (Lemon Squeezy) — we never see or store your full card details. We hold your subscription status so we can grant access. We may collect basic, privacy-respecting analytics about site usage.

Why we use it

To create and secure your account, deliver the reports you're entitled to, process subscriptions, provide support, and comply with legal obligations. Our lawful bases are performance of a contract and our legitimate interest in running and securing the service.

Sharing

We share data only with the processors that run the service — authentication (Clerk), payments (Lemon Squeezy), hosting (Vercel), storage/CDN (Cloudflare) and email — each under their own terms. We do not sell your personal data.

Cookies

We use only the cookies needed to run the site: authentication and session cookies set by Clerk when you sign in, which are strictly necessary and need no consent. Our default traffic measurement (Vercel) is cookieless. If we enable Google Analytics it loads only after you accept the cookie banner — choosing Reject means no analytics cookies are set.

Your rights

Under UK GDPR you may access, correct, delete or port your data, and object to or restrict processing. Email us to exercise these rights. You may also complain to the Information Commissioner's Office (ICO).

Retention & security

We keep account data while your account is active and as required by law, then delete it. Access to paid content is protected by authentication and short-lived signed links; we apply reasonable technical and organisational security measures.

Template policy — confirm the processor list and retention periods with your solicitor before launch.