Privacy Policy

1. Introduction

At Framework Exchange, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, protect, and manage your data when you use our website, platform, and related services.

We believe in transparency regarding our data practices and have designed our platform with privacy in mind, collecting only the information necessary to provide you with a valuable and personalized experience.

This policy applies to all services offered by Framework Exchange, including our website, community platform, and any related applications or tools.

2. Information Collection

We are committed to the principle of minimal data collection, gathering only the information necessary to provide our core services. Here's what we collect:

Account Information

When you create an account, we collect:

• Email address (for account access and communications)
• Name (to personalize your experience)
• Optional profile details (such as industry, company size, or role)

User-Generated Content

As you use our platform, we collect:

• Tasks you create or modify
• Comments and contributions to discussions
• Templates or resources you upload
• Votes and ratings you provide

Usage Information

If you allow analytics, we collect usage data with Google Analytics (through Firebase) to understand how Framework Exchange is used and to improve it:

• Features you interact with
• Time spent on different sections
• Task completion patterns

Analytics is optional. We ask for your choice on your first visit, and you can change it at any time from "Analytics settings" in the site footer. Analytics data is not linked to your account ID, and Google advertising features and Google signals are turned off.

Cookies and Browser Storage

• Google Analytics cookies (such as _ga) are set only after you allow analytics, and we remove them if you later turn analytics off.
• Your analytics choice is saved in your browser's local storage so we do not ask again on every visit.
• When you are signed in, your browser keeps your sign-in session and a local copy of your tasks and task progress so the site keeps working on a slow or lost connection. This local copy is cleared when you log out.
• If you try the task list without an account, your changes stay in that browser tab only and are not saved.

Technical Information

For security and functionality purposes, we collect:

• Device type and browser information
• IP address (for security and regional customization)
• Log data (for troubleshooting and security monitoring)

We emphasize that we only collect what's necessary to provide you with a functional, personalized, and secure experience on Framework Exchange.

3. Use of Information

We use the information we collect for the following purposes:

Providing and Improving Our Services

• Delivering the core functionality of Framework Exchange
• Developing new features based on user needs and feedback
• Troubleshooting issues and optimizing performance

Personalizing Your Experience

• Filtering tasks based on your industry and preferences
• Recommending relevant templates and resources
• Customizing your dashboard and notifications

Facilitating Community Interactions

• Enabling discussions and knowledge sharing
• Connecting you with relevant experts
• Supporting collaborative task management

Ensuring Platform Security

• Preventing unauthorized access and fraud
• Detecting and addressing potential abuse
• Maintaining the integrity of our platform

Account Management and Communication

• Sending essential service notifications
• Providing updates about new features or changes
• Responding to your inquiries and support requests

AI Moderation System

Our platform uses automated AI moderation to ensure content quality and community safety. This system:

• Reviews user-generated content for policy violations, including inappropriate material such as offensive language, spam, and potentially sensitive information
• Helps maintain a constructive and respectful community environment
• Processes content data solely for moderation purposes and does not store or analyze personal data beyond what is necessary for moderation

4. Information Sharing

We are committed to protecting your privacy and do not sell your personal information to third parties. We limit information sharing to the following circumstances:

Service Providers

We share limited information with Firebase/Google Cloud services for:

• Hosting and infrastructure support
• Database management (Firestore)
• Authentication services (Firebase Auth)
• Analytics to improve our platform (Google Analytics through Firebase), only if you allow it
• Cloud Functions for server-side processing
• Storage for user-uploaded files and attachments

These service providers are bound by strict data protection agreements and only process your information as necessary to provide their services to us.

With Your Consent

We may share information when you explicitly authorize us to do so, such as when you choose to publicly share your templates or participate in community discussions. Usage data is shared with Google Analytics only if you allow analytics (see Usage Information).

Legal Compliance

We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Protection of Rights and Safety

We may share information when we believe it's necessary to:

• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users or others
• Investigate and prevent fraud or security issues

Business Transfers

If Framework Exchange is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

5. Data Security

Protecting your information is a top priority for Framework Exchange. We implement a variety of security measures to maintain the safety of your personal information:

Technical Safeguards

• Data encryption at rest and in transit using industry-standard protocols, including explicit HTTPS/TLS encryption for all data transmission
• Secure database configurations with regular backups
• Firewall protection and intrusion detection systems provided by Firebase's built-in security features

Access Controls

• Strict authentication requirements for all users
• Limited staff access to user data on a need-to-know basis
• Role-based permissions system for internal access

Monitoring and Auditing

• Operational security practices including monitoring for suspicious activities
• Continuous monitoring for suspicious activities
• Prompt investigation of potential security incidents

Incident Response

In the event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Investigate the cause and extent of the breach
• Take appropriate measures to mitigate harm and prevent future incidents

User Responsibilities

While we implement strong security measures, the security of your account also depends on:

• Maintaining the confidentiality of your password
• Using strong, unique passwords that meet our requirements: minimum 8 characters with at least one uppercase letter, one lowercase letter, one number, and one special character
• Logging out of your account when using shared devices
• Promptly reporting any suspicious activity to us

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. User Rights and Controls

We believe you should have control over your personal information. Framework Exchange provides several ways for you to access, update, and manage your data:

Account Access and Correction

You can access and update most of your account information directly through your profile settings. This includes:

• Personal details (name, email, profile information)
• Password and security settings
• Notification preferences

Account Deletion

You have the right to delete your account at any time. When you request account deletion:

• You can initiate account deletion through your account settings
• You'll be given options for handling your user-generated content:
  • Remove all content associated with your account
  • Anonymize your contributions but leave them on the platform
• We'll delete your personal information within 30 days
• Some information may be retained in backups for up to 90 days

Analytics Choice

You can allow or turn off analytics at any time from "Analytics settings" in the site footer. Turning it off stops collection from then on and removes the analytics cookies from your browser.

Data Portability

Upon request, we can provide you with an export of your personal data in a structured, commonly used format.

Communication Preferences

You can manage your communication preferences by:

• Adjusting notification settings in your account
• Unsubscribing from marketing emails using the link provided in each message
• Contacting us directly to update your preferences

To exercise any of these rights or if you have questions about your data, please contact us using the information provided in the Contact Information section.

7. Children's Privacy

Framework Exchange is designed for business professionals and entrepreneurs, not for children under the age of 13. We do not knowingly collect personal information from children under 13 years of age.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

For users between the ages of 13 and 18 (or the applicable age of majority in your jurisdiction), we recommend reviewing this Privacy Policy with a parent or guardian to ensure you understand how we collect, use, and share your information.

8. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you of significant changes through a notice on our website or by email
• Obtain your consent when required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of Framework Exchange after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

9. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Contact us through our contact page.

We are committed to addressing your concerns and will respond to your inquiry as soon as possible, typically within 5 business days.

For urgent privacy matters or to report a potential data breach, please include "URGENT: Privacy Concern" in your email subject line.