Privacy

• Account details. Your email address, and any name or business details you give us when you sign up or set up your business.
• Sign-in providers. If you sign in with Google, Google sends us your name, email address, and profile picture. We use them to create and sign in your account, and for nothing else. We never see your Google password.
• Your business content. The descriptions, copy, images, products, and settings you create in Fraya, plus the sites and assets we generate for you.
• Customer & sales data. If you sell through Fraya, information about your orders, customers, and messages so we can show you your business.
• Payment information. Handled by Stripe. We receive confirmation and billing status, but we never see or store full card numbers.
• Usage & device data. Basic analytics — pages viewed, actions taken, approximate location, and device/browser info — to keep the service running and improve it.

• To provide the service — generate your site and content, host what you publish, and run your dashboard.
• To process billing and the 1% sales fee through Stripe.
• To provide support and send you service-related messages.
• To keep the platform secure, prevent abuse, and meet legal obligations.
• To improve the product in aggregate. We don't sell your personal data or use it for third-party advertising.

To generate content you request, we send the relevant inputs (such as your business description or a prompt) to our AI model providers. Under our agreements with them, this content is used to produce your output and is not used to train their public models. AI output can be inaccurate — please review it before you rely on it.

We share data with a small set of service providers ("subprocessors") strictly to operate Fraya. Each handles data under its own privacy terms:

• Stripe — payments & subscription billing. stripe.com/privacy
• Supabase — database & authentication. supabase.com/privacy
• Vercel — hosting & edge delivery. vercel.com/legal/privacy-policy
• Resend — transactional email. resend.com/legal/privacy-policy
• Anthropic — AI generation & chat. anthropic.com/legal/privacy
• Google — AI research/grounding. policies.google.com/privacy
• fal.ai — image & video generation. fal.ai/privacy

We may also disclose information if required by law or to protect the rights, safety, and security of Fraya and its users.

We use a small number of essential and functional cookies — never for ad tracking. Details and controls are in our Cookie Notice.

We keep your data for as long as your account is active and as needed to provide the service. When you close your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to meet legal, tax, or accounting obligations.

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To make a request, email support@fraya.ai. We don't sell personal information.

Deleting your account. Email support@fraya.ai from the address on your account and we will delete the account, your sites, and your business data within 30 days. We keep only what the law requires us to keep, such as payment and tax records held by Stripe. Customers, orders, and content can be exported from the console first.

We use encryption in transit, scoped access controls, and a secret vault for credentials. No system is perfectly secure, but we work to protect your data and will notify affected users of a material breach as required by law.

Fraya isn't intended for anyone under 18, and we don't knowingly collect data from children.

Fraya and its providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

We may update this policy as Fraya evolves. The "last updated" date above reflects the latest change, and material changes will be communicated to signed-in users.

Questions or requests? Email support@fraya.ai.