Your data deserves
clear treatment.

01 Controller

The controller responsible for Frimma is:

02 Scope

This notice applies to frimma.com, the Frimma dashboard, related APIs, support communications, uploaded materials, AI generation, and the integrations made available through the service. A third-party service may provide additional privacy information for its own processing.

03 Data we process

• Account and identity data: name, email address, account ID, authentication status, organization membership, and security information supplied through Clerk.
• Brand and workspace data: brand name, website URL, description, audience, voice, preferences, and organization identifiers.
• Content and AI data: prompts, topics, campaign inputs, generated text, images or videos, drafts, metadata, and workflow results.
• Files: filenames, file types, sizes, storage identifiers, and the contents of files you choose to upload.
• Technical and usage data: IP address, timestamps, device and browser information, request and security logs, session cookies, and error diagnostics.
• Communications: messages, support requests, and information you send to Frimma.

Please do not submit confidential, sensitive, or third-party personal data unless you have the right and a genuine need to do so.

04 Why we process data

• to create and secure your account and authenticate sessions;
• to provide workspaces, content generation, file storage, and workflows;
• to generate and improve the outputs you request;
• to operate, troubleshoot, secure, and prevent abuse of the service;
• to communicate with you and respond to requests;
• to comply with legal obligations and establish or defend legal claims; and
• to develop Frimma using aggregated or appropriately de-identified information where practical.

05 Legal grounds

Under Swiss law, Frimma processes personal data in accordance with the principles of lawfulness, proportionality, transparency, purpose limitation, and data security. Where the GDPR applies, processing is based on performance of a contract or pre-contractual steps, legitimate interests in operating and securing Frimma, compliance with legal obligations, or consent where consent is specifically requested. You may withdraw consent at any time without affecting earlier processing.

06 Service providers and disclosures

Frimma uses specialist providers only as needed to operate the service:

• Clerk: authentication, account, session, and organization management.
• Cloudflare: DNS, network security, and email routing once enabled.
• Netcup: self-hosted application, PostgreSQL database, and private S3-compatible object storage.
• Google Cloud / Vertex AI: requested AI video generation.
• Google user data (Analytics & YouTube): only when you connect your Google account — GA4 reporting data for your dashboard insights, your channel identity to confirm the connection, and video uploads you explicitly approve. Access stays limited to these features and follows the Google API Services User Data Policy.
• Meta AI services: requested text and campaign generation.
• Workflow infrastructure: execution and monitoring of requested automated jobs.

These providers may process identifiers, technical data, prompts, files, or outputs according to their role. Frimma may also disclose data when required by law, to protect rights and security, or in connection with a business transfer subject to appropriate safeguards. Frimma does not sell personal data.

07 International transfers

Providers may process data in Switzerland, the EEA, the United States, or other countries. Where a destination does not provide an adequate level of protection, Frimma relies on recognized safeguards such as the Swiss or EU standard contractual clauses, relevant certifications, or a lawful exception. Provider locations and safeguards can change as their infrastructure evolves.

08 Cookies and similar technologies

Frimma uses essential cookies and browser storage for authentication, security and interface functions. With your consent, Google Analytics 4 also measures visits, navigation, feature usage, action outcomes, errors and performance. Google receives technical device and connection data and uses analytics cookies to distinguish visits. We do not send account or workspace identifiers, email addresses, prompts, content, file names or OAuth credentials. Google may process data internationally, including in the United States. Advertising storage, Google Signals and advertising personalization are disabled. Analytics stays off until you allow it. Use Privacy settings at the bottom of any page to reject or withdraw consent; withdrawal stops tracking and clears accessible analytics cookies. Blocking essential cookies may prevent login or dashboard functions.

09 AI processing

When you request AI-generated content, relevant prompts, brand context, and instructions are sent to the configured model provider. Outputs may be inaccurate, incomplete, or similar to third-party material and must be reviewed before use. Frimma does not use AI to make decisions that produce legal or similarly significant effects about individuals.

10 Retention

Account, workspace, content, and file data are kept while your account is active and as needed to provide the service. After deletion or a valid erasure request, data is removed or anonymized within a reasonable period, subject to backups, fraud prevention, legal claims, and statutory retention duties. Security and request logs are retained only as long as reasonably necessary for operational and security purposes. Some provider backups may expire on their own documented cycles.

11 Security

Frimma uses proportionate technical and organizational measures including access controls, authenticated APIs, transport encryption, scoped storage links, provider security controls, and separation of customer records. No internet service can guarantee absolute security. Please use a strong, unique password and promptly report suspected unauthorized access.

12 Your rights

Depending on applicable law, you may request information and access, correction, deletion, restriction, objection, data portability, or withdrawal of consent. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner or, where the GDPR applies, your competent EEA supervisory authority. Rights can be limited where the law permits or requires it. Frimma may verify your identity before acting on a request.

Send requests to [email protected].

13 Children

Frimma is a business-oriented service and is not directed to children. You must be at least 18 years old, or otherwise legally able and authorized to enter into the Terms of Service, to create an account.

14 Changes

This notice may be updated when the service, providers, or legal requirements change. Material changes will be communicated through the service or by another reasonable method. The version published here is the current version.

Effective and last updated: 6 October 2026