Privacy Policy

Last updated: 30 September 2026

Framewisp is a tool that converts a Figma design into native Roblox Studio UI. This policy explains what data we handle and why. We keep it to the minimum needed to run the product.

Who we are

Framewisp is operated by Tim, a self-employed individual (sole proprietor) acting as the data controller for the personal data described below. For any privacy matter, the primary contact is support@framewisp.com.

What we collect

Roblox account (via "Sign in with Roblox"). When you sign in, Roblox shares your user ID and username with us (openid, profile scopes). We also receive an access/refresh token (asset:read, asset:write scopes) used solely to upload your design's images to your own Roblox account. We never post, message, or act on your account beyond these image uploads.
Figma account ID. Used to key your free trial, so it can't be reset by switching accounts. Your licence itself is bound to your Roblox account.
Email address. Collected at purchase to deliver your licence key and receipt.
Licence data. Your licence key, plan, and activation status.
Design content. The frame you convert is turned into a Roblox UI blueprint and stored briefly under a one-time import code, then deleted (see Retention).
Designs you choose to share — only if you turn on Help Framewisp learn. Off by default.

How we use it

To sign you in and upload your images to your Roblox account.
To verify your licence or trial and prevent abuse.
To deliver your licence key and provide support.
Only with your consent: to train and test Framewisp's own AI on the designs you share (see below).

Help Framewisp learn (optional)

We are building Framewisp's own AI that turns ideas into Roblox UI. It learns best from real designs, so the plugin asks you once whether you want to help. Nothing is shared unless you tick the box and press Accept.

What is shared. After you agree, each design you convert with the plugin is sent in addition to the normal conversion: its layer structure (layer names, sizes, positions, colours, effects, fonts and the text in it) and one rendered preview picture of the frame. Your source image files are not sent, although the preview shows the design as it looks, pictures included. Designs converted before you agreed, or after you withdrew your consent, are never sent.
Our promise: one purpose only. Your shared designs are used for one thing — to train, test and improve Framewisp's own AI. The aim is for the AI to learn layout and style in general, not to reproduce any one design. We will never publish them, show them to other users, sell them, give them to anyone else to use, or offer them as templates, assets or examples.
Who can see them. Only the Framewisp team. They are kept on our own computers and on servers we rent to train the AI (see Third parties), and processed there only for us.
How long. A shared design stays on our server for 3 days and is then deleted automatically; during that window we copy it into Framewisp's private training set. That copy is kept, together with your Roblox user ID so we can find it, until you ask us to delete it or we no longer need it for training. The import code itself still expires after about 24 hours, exactly as without sharing.
Withdrawing consent and deletion. You can withdraw your consent at any time: open a ticket in our Discord or email support@framewisp.com with your Roblox user ID (or username). We stop sharing for your account and delete what you already shared from our server and our training set within 30 days. An AI version that was already trained on it cannot "unlearn" a single design, but it will not be used to train any new version.
Age. If you are under 16, or under the age of digital consent where you live, please turn it on only with a parent's or guardian's permission.
Your answer is recorded. Accept or Cancel, we keep the date, the version of this text and your Roblox user ID, so the plugin does not ask your account again, on any computer. If we change what we ask for, it will ask once more.

Legal bases (GDPR / UK GDPR)

Performance of a contract — account sign-in, image uploads, licence verification, key delivery and support (everything needed to provide the product you asked for).
Legitimate interests — preventing licence abuse and fraud, keeping the service secure. We use the minimum data necessary for this.
Consent — Help Framewisp learn. You can withdraw it at any time; this stops future sharing and does not affect what happened before you withdrew.
Legal obligation — keeping basic purchase records where tax law requires it.

Third parties and international transfers

Roblox (USA) — sign-in and image (asset) upload.
Lava.top (Cyprus) — payment processing (they handle your card details; we don't see them).
Cloudflare (USA, global edge) — hosting and encrypted-in-transit storage (Workers KV).
Resend (USA) — sending your licence-key email.
RunPod (USA) — rented GPU servers where Framewisp trains its AI. Only designs shared through Help Framewisp learn are processed there, for us only.

This means your data may be processed outside your own country, including in the United States. We share only the minimum each provider needs, and rely on the safeguards those providers offer for international transfers (such as EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework).

We do not sell your data or use it for advertising.

Retention

OAuth tokens are stored only to perform uploads. You can revoke Framewisp's access at any time in Roblox → Account → Security → Authorized apps; once revoked, the token is unusable.
Import codes / design blueprints auto-expire within ~24 hours. They stay readable for that window so Studio can re-import and auto-sync your edits.
Shared designs (only with Help Framewisp learn on) are deleted from our server after 3 days; the private training copy is kept until you ask us to delete it or it is no longer needed.
Licence and email are kept while your licence is active, for support and renewals.

Your rights

Depending on where you live (GDPR, UK GDPR, CCPA), you can:

request access to, correction of, or deletion of your personal data;
ask us to restrict processing, object to processing based on legitimate interests, or receive your data in a portable format;
revoke Framewisp's Roblox access yourself at any time (Roblox → Account → Security → Authorized apps);
lodge a complaint with your local data-protection supervisory authority if you believe we handle your data unlawfully.

To exercise any of these, email support@framewisp.com — we respond within 30 days. California residents: we do not sell or share personal information as defined by the CCPA.

Contact

Data requests and privacy questions: support@framewisp.com. For everything else you can also reach us on Discord.

FRAMEWISP