Privacy Policy

Last Updated: August 21, 2026
Effective: immediately for users who register on or after the date above; thirty (30) days after email and site notice for users who registered before it.

Introduction

Styleframe.ai and the StyleFrame AI trademark are owned and operated by Glyf Space, Inc., a Delaware corporation ("StyleFrame," the "Company," "we," "us"). This Privacy Policy explains how we collect, use, disclose, and protect personal data ("Personal Data") when you use the styleframe.ai website and related applications and services (collectively, the "Services").

Your use of the Services is at all times subject to our Terms of Service, which incorporate this Privacy Policy. Any capitalized terms we use here without defining them have the definitions given in the Terms of Service.

We may update this Policy from time to time. We will notify you of material changes at least 30 days before they take effect, by placing a notice on the Site, sending you an email, or other means. The date of the last modification is displayed at the top of this Policy.

Categories of Personal Data We Collect

Profile and Contact Data, such as your name, email address, username, and password. Purpose: providing the Services; corresponding with you. Disclosed to: service providers.

Payment Data, such as payment card type, last four digits of your card, and billing address, phone number, and email. Purpose: processing your payments. Disclosed to: our payment processor, Stripe, Inc. (see Stripe's terms and privacy policy for how it handles your data). We do not store full card numbers.

User Content, such as images, video, and other media you upload to the Services and the content you generate with them ("Sensory Data" under some laws — this may include photos or videos of you or your environment). Purpose: providing the Services (storing, processing, and rendering your projects). Disclosed to: service providers (hosting and infrastructure, and third-party model providers that process your content solely to generate your requested output and are contractually prohibited from using it to train their models).

Device and IP Data, such as IP address, device identifiers, operating system, and browser type. Purpose: providing, customizing, securing, and improving the Services; estimating usage by geography; diagnosing technical problems. Disclosed to: service providers; analytics partners.

Web Analytics Data, such as page interactions, referring page or source, and statistics associated with the interaction between your device and the Services. Purpose: providing, customizing, and improving the Services; marketing the Services. Disclosed to: service providers; analytics and advertising partners.

Communications Data, such as information you provide when you contact us, fill out a form, respond to a survey, or submit a support request. Purpose: responding to you; providing support; improving the Services. Disclosed to: service providers.

Geolocation Data, limited to approximate location inferred from your IP address. Purpose: providing and securing the Services. Disclosed to: service providers; analytics partners.

We do not collect Social Security numbers, driver's license numbers, passport numbers, or precise geolocation, and we do not knowingly collect Sensitive Personal Information as defined under applicable state privacy laws. Media you upload that contains a face or voice is handled as described in the "Biometric Information" section below.

Biometric Information

The Services do not currently include features that analyze faces or voices to derive biometric identifiers or biometric information, and we do not collect biometric information as defined under applicable laws (including the Illinois Biometric Information Privacy Act and similar state laws). If we introduce such features in the future, we will update this Policy and provide any required notices and obtain any required consents before collecting such data.

How We Use Personal Data

We collect and use Personal Data for the following business purposes: creating and managing your account; processing transactions and billing; providing you with the Services and features you request; providing support; improving the Services, including testing, research, internal analytics, and product development; personalizing content and communications; marketing the Services; corresponding with you; meeting legal obligations and enforcing our legal terms; and completing corporate transactions.

We do not use your uploaded content or your generated content to train artificial intelligence or machine learning models.

We will not collect additional categories of Personal Data or use collected Personal Data for materially different, unrelated, or incompatible purposes without providing you notice or obtaining your consent.

Categories of Sources of Personal Data

You: when you provide information directly to us (creating an account, using the tools, filling out forms or surveys, contacting us) and when information is collected automatically as you use the Services (through cookies and similar technologies, described below).

Third parties: vendors such as analytics providers that help us understand how you interact with the Services, and advertising partners that assist with marketing. If you sign in through a third-party account, such as Google, we receive the account information you authorize that provider to share.

How We Disclose Personal Data

Service Providers. Parties that help us provide the Services or perform business functions on our behalf, under contracts that limit their use of your data to providing services to us: hosting, technology, and infrastructure providers; payment processing (Stripe); support and communications tooling; and security and fraud-prevention services.

Analytics and Advertising Partners. Parties that provide analytics on usage of the Services and help us measure and improve our marketing, including Meta and LinkedIn, whose cookies and pixels may collect identifiers and information about your visits. Under certain U.S. state privacy laws, these disclosures may be considered "sharing" or "targeted advertising." You may opt out as described in the state privacy rights sections below.

Legal Obligations. We may disclose Personal Data to meet legal requirements, such as in response to subpoenas, court orders, or legal process; to establish or exercise our legal rights or defend against claims; and to investigate, prevent, or take action regarding suspected illegal activities, fraud, threats to the physical or financial safety of any person, or violations of our Terms of Service.

Business Transfers. Personal Data may be transferred to a third party if we undergo a merger, acquisition, bankruptcy, or other transaction in which that third party assumes control of our business in whole or in part.

Within Our Corporate Group. We may share Personal Data with subsidiaries or entities under common control, whose use is subject to this Policy.

Aggregated or De-Identified Data. We may create and disclose aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you.

We do not sell Personal Data in exchange for money. Certain disclosures to our advertising partners, described above, may constitute "sharing" under some state privacy laws; you can opt out as described below.

Tracking Tools and Opt-Out

The Services use cookies and similar technologies such as pixel tags and web beacons ("Cookies") to recognize your browser, understand how you use the Services, analyze trends, maintain your preferences, secure accounts, and support our marketing.

We use the following types of Cookies: essential Cookies (required for core features such as logging in; disabling these may make the Services unavailable), functional Cookies (record your settings and preferences), performance/analytical Cookies (help us understand usage and measure the performance of our marketing campaigns), and advertising Cookies (support interest-based advertising through the partners identified above).

You can control Cookies through your browser settings, including blocking or deleting them; some features may not function if you do. You can opt out of interest-based advertising through the Digital Advertising Alliance and Network Advertising Initiative opt-out platforms.

We recognize Global Privacy Control ("GPC") signals transmitted by your browser as a valid request to opt out of the sharing of your Personal Data for targeted advertising where required by applicable law. A GPC signal applies only to the browser or device from which it is sent. You can also opt out at any time through the "Your Privacy Choices" link in our website footer. We do not currently respond to "Do Not Track" browser signals, as there is no uniform standard for them.

Data Security

We protect Personal Data using appropriate physical, technical, organizational, and administrative security measures based on the type of data and how we process it. You should also help protect your data by choosing a strong password, limiting access to your devices, and signing out after use. No method of transmitting or storing data is completely secure; if we learn of a security incident affecting your Personal Data, we will notify you as required by applicable law.

Data Retention

We retain Personal Data for as long as needed to provide the Services and for our legitimate business purposes, considering the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use, and applicable legal requirements. Specifically: profile information and credentials are retained for as long as you have an account; payment data is retained as long as needed to process your purchase or subscription; and content you remove from your account may remain on active systems for up to 30 days, with copies in backups thereafter.

If you delete your account, your content becomes inaccessible immediately, and for 30 days your account and content may be restored on request. All user content and personal data are permanently deleted from active systems no later than 90 days after account deletion, except for data we are required to retain by law (including litigation holds and law-enforcement requests) and anonymized or aggregated data that does not identify you. Cancelling a paid subscription ends future billing only; it does not delete your account or content. You may request earlier deletion as described below.

Personal Data of Children

The Services are not directed to children, and you must be at least 18 years of age to use them. We do not knowingly collect or solicit Personal Data from anyone under 18. If you are under 18, do not use the Services or send us any Personal Data. If we learn we have collected Personal Data from a person under 18, we will delete it as quickly as possible. If you believe a person under 18 may have provided us Personal Data, contact us at privacy@styleframe.ai.

California Resident Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended ("CCPA"). These rights are subject to conditions and exceptions under applicable law. If there is any conflict between this section and any other provision of this Policy, the portion that is more protective of Personal Data controls.

Access. You may request information about our collection and use of your Personal Data over the past 12 months, including the categories of Personal Data collected, the categories of sources, the business purposes for collection, the categories of third parties to whom we disclosed it, and the specific pieces of Personal Data we have collected about you.

Deletion. You may request that we delete the Personal Data we have collected about you, subject to statutory exceptions (for example, data needed to complete a transaction you requested or to comply with a legal obligation).

Correction. You may request that we correct inaccurate Personal Data we hold about you.

Opt-Out of Sale or Sharing. We do not sell Personal Data in exchange for money. Our use of advertising cookies and pixels may constitute "sharing" for cross-context behavioral advertising under the CCPA. You may opt out of such sharing at any time through the "Your Privacy Choices" link in the footer of our website, by enabling a legally recognized opt-out preference signal such as Global Privacy Control in your browser, or by contacting privacy@styleframe.ai. To our knowledge, we do not sell or share the Personal Data of consumers under 16 years of age.

Limit Use of Sensitive Personal Information. We do not collect Sensitive Personal Information as defined by the CCPA.

Non-Discrimination. We will not discriminate against you for exercising your rights — we will not deny you the Services, charge different prices, or provide a different level of quality because you exercised a CCPA right.

Shine the Light. Under California Civil Code §§1798.83–1798.84, California residents may request information regarding disclosure of Personal Data to third parties for those parties' direct marketing purposes. We do not disclose Personal Data to third parties for their own direct marketing purposes.

Colorado, Connecticut, Virginia, Utah, and Other State Rights

If you are a resident of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, or another state with a comprehensive consumer privacy law in effect, you may have the following rights, subject to the conditions and exceptions of your state's law: the right to confirm whether we process your Personal Data and to access it; the right to correct inaccuracies; the right to delete Personal Data provided by or obtained about you; the right to obtain a portable copy of your Personal Data; and the right to opt out of targeted advertising, the sale of Personal Data, and profiling in furtherance of decisions that produce legal or similarly significant effects.

We do not sell Personal Data in exchange for money and do not engage in profiling that produces legal or similarly significant effects. Our use of advertising pixels may constitute "targeted advertising" under these laws; you may opt out through the "Your Privacy Choices" link in our website footer, via a Global Privacy Control signal, or by contacting privacy@styleframe.ai.

Nevada. Nevada residents have the right to opt out of the sale of certain Personal Data. We do not sell Personal Data as defined by Nevada law.

Exercising Your Rights

To exercise any of the rights above, email privacy@styleframe.ai with (1) sufficient information for us to verify that you are the person about whom we collected Personal Data, and (2) enough detail about your request for us to understand, evaluate, and respond to it. You do not need an account to submit a request. Where permitted by your state's law, you may use an authorized agent to submit requests on your behalf; we may require proof of the agent's authority and verification of your identity.

We will respond within the time required by applicable law. We will not charge a fee unless your request is excessive, repetitive, or manifestly unfounded, in which case we will notify you of the fee and the reason before completing the request. If we decline to act on your request, you may appeal by replying to our response with the word "Appeal," and we will inform you of the outcome within the period required by your state's law, including how to contact your state's Attorney General if you are dissatisfied with the result.

International Users

The Services are hosted and operated in the United States. If you access the Services from outside the United States, your Personal Data will be transferred to and processed in the United States, where laws may differ from those of your country. By using the Services, you consent to the transfer, storage, and processing of your Personal Data in the United States. If you are located in a jurisdiction that grants you additional rights over your Personal Data, you may contact us at privacy@styleframe.ai to exercise them, and we will respond in accordance with applicable law.

Contact Us

If you have questions or comments about this Policy or our privacy practices, or to exercise any right described here, contact us at:

Glyf Space, Inc. (d/b/a StyleFrame AI)
2261 Market St STE 36141, San Francisco, CA 94114, United States
Email: privacy@styleframe.ai