Legal

Privacy Policy

Last updated: June 2026 · This is a template policy for a demo product.

We keep data collection to the minimum needed to run Ovoframe. When you use the app without an account, your designs are stored locally in your browser and never leave your device. When you sign in, your designs are synced to your private cloud space so they follow you across devices.

What we collect

• Account info — your email and display name, to sign you in.
• Your designs — the content you create, stored so you can come back to it.
• Basic usage — anonymous, aggregated metrics to improve the product.

What we don't do

We don't sell your data, we don't use your designs to train models without consent, and we don't share your content with third parties except the infrastructure providers needed to run the service.

Your rights

You can export or delete your designs at any time, and you can delete your account to remove your data. Reach us at hello@easel.design for any privacy request.

Terms of Service

Last updated: June 2026

By using Ovoframe you agree to these terms. You may use Ovoframe to create, edit and export designs for personal or commercial use. You retain full ownership of everything you create.

Acceptable use

• Don't use Ovoframe to create unlawful, infringing, or harmful content.
• Don't attempt to disrupt, reverse-engineer, or abuse the service.
• Respect the rights of others, including copyright and trademarks.

Your content

You own your designs. You grant us only the limited permission needed to store and display them back to you. We may remove content that violates these terms.

Service availability

We aim for high availability but provide the service "as is." Plans, features and pricing may change; we'll give reasonable notice of material changes.

Security

Last updated: June 2026

Security is built into how Ovoframe stores your work.

• Row-level security — every design is scoped to its owner at the database level, so no one can read or modify designs that aren't theirs.
• Encryption in transit — all traffic is served over HTTPS/TLS.
• Local-first by default — without an account, nothing leaves your browser.
• Least-privilege keys — the app uses public client keys whose access is constrained by security policies, not secret credentials.

Found a vulnerability? Please report it responsibly to security@easel.design and we'll work with you to resolve it.