Privacy Policy

Last updated: 4 August 2026

Framewisp is a tool that converts a Figma design into native Roblox Studio UI. This policy explains what data we handle and why. We keep it to the minimum needed to run the product.

Who we are

Framewisp is operated by Tim, a self-employed individual (sole proprietor) acting as the data controller for the personal data described below. For any privacy matter, the primary contact is support@framewisp.com.

What we collect

Roblox account (via "Sign in with Roblox"). When you sign in, Roblox shares your user ID and username with us (openid, profile scopes). We also receive an access/refresh token (asset:read, asset:write scopes) used solely to upload your design's images to your own Roblox account. We never post, message, or act on your account beyond these image uploads.
Figma account ID. Used to key your free trial, so it can't be reset by switching accounts. Your licence itself is bound to your Roblox account.
Email address. Collected at purchase to deliver your licence key and receipt.
Licence data. Your licence key, plan, and activation status.
Design content. The frame you convert is turned into a Roblox UI blueprint and stored briefly under a one-time import code, then deleted (see Retention).

How we use it

To sign you in and upload your images to your Roblox account.
To verify your licence or trial and prevent abuse.
To deliver your licence key and provide support.

Legal bases (GDPR / UK GDPR)

Performance of a contract — account sign-in, image uploads, licence verification, key delivery and support (everything needed to provide the product you asked for).
Legitimate interests — preventing licence abuse and fraud, keeping the service secure. We use the minimum data necessary for this.
Legal obligation — keeping basic purchase records where tax law requires it.

Third parties and international transfers

Roblox (USA) — sign-in and image (asset) upload.
Lava.top (Cyprus) — payment processing (they handle your card details; we don't see them).
Cloudflare (USA, global edge) — hosting and encrypted-in-transit storage (Workers KV).
Resend (USA) — sending your licence-key email.

This means your data may be processed outside your own country, including in the United States. We share only the minimum each provider needs, and rely on the safeguards those providers offer for international transfers (such as EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework).

We do not sell your data or use it for advertising.

Retention

OAuth tokens are stored only to perform uploads. You can revoke Framewisp's access at any time in Roblox → Account → Security → Authorized apps; once revoked, the token is unusable.
Import codes / design blueprints auto-expire within ~24 hours. They stay readable for that window so Studio can re-import and auto-sync your edits.
Licence and email are kept while your licence is active, for support and renewals.

Your rights

Depending on where you live (GDPR, UK GDPR, CCPA), you can:

request access to, correction of, or deletion of your personal data;
ask us to restrict processing, object to processing based on legitimate interests, or receive your data in a portable format;
revoke Framewisp's Roblox access yourself at any time (Roblox → Account → Security → Authorized apps);
lodge a complaint with your local data-protection supervisory authority if you believe we handle your data unlawfully.

To exercise any of these, email support@framewisp.com — we respond within 30 days. California residents: we do not sell or share personal information as defined by the CCPA.

Contact

Data requests and privacy questions: support@framewisp.com. For everything else you can also reach us on Discord.

FRAMEWISP