Privacy Policy

FramerToNextJS (“FNJ”, “we”, “us”) runs framertonextjs.com: a tool that converts websites into code you own, an AI website builder, a visual editor and design Studio, and a connector that lets AI apps work on your sites over the Model Context Protocol (MCP).

This policy explains what we collect, why, who receives it, how long we keep it, and the choices you have. It covers our website, apps and connector.

Account details: your email address, the name and workspace name you give us, and how you sign in (Google or email). If you sign in with Google, Google shares your email address and basic profile with us. Passwords are handled by our authentication provider, Supabase; we never store them ourselves.

How you found us: when you create an account we record the site that referred you, campaign tags in the link, the page you landed on, your country (from your connection, not your exact location), and your device type, browser and operating system. We do not store your IP address or full browser details.

Your sites and content: the addresses of sites you convert, the code we generate, your edits, designs you make in Studio or the AI builder, CMS content, images you upload, and site names.

AI builder requests: your prompts and the references you attach (screenshots, page addresses, design library picks and project files) are sent to our AI provider to build your site. We don't keep the references after the request, with one exception: logo files from a project you drop in are saved with your site so they can appear on it. Your builder conversation history stays in your browser. We record how much each build used, to count your credits.

Payments: checkout is run by Dodo Payments. We receive confirmation of what you bought and the amount, never your card details.

Connections and keys: when you connect a host (Vercel, Netlify or Cloudflare) or add your own AI provider or Framer API key, we store it encrypted so we can act for you. A GitHub token you use to push code is used for that push and not stored. Access tokens for AI apps connected over MCP are stored only as one-way hashes.

Messages: when you contact us or apply to a program, we keep your email address, your message and the page you sent it from.

Usage: we use Google Analytics to understand which pages people visit and from what kind of device. We also count visits ourselves with a random ID kept in your browser, recording the page, your country and device type; this count is not linked to your account.

Creators and partners: if you join the template marketplace or the partner program, we keep the profile you give us, sales and referral counts, commissions, and the email address payouts go to.

• To run the service: convert, build, edit, export and publish your sites, and keep you signed in.
• To take payments, apply credits and plans, and handle refunds.
• To answer support requests and send the emails the service needs, such as sign-in codes and alerts about your sites.
• To send product news, which you can unsubscribe from at any time with the link in each email.
• To understand how the service is used, fix problems and improve it.
• To prevent abuse and keep the service secure, and to meet legal obligations.

We don't sell your personal information, and we don't use it for advertising. We don't use your sites, prompts or designs to train AI models.

The AI builder and our support assistant use Anthropic’s API on our account. For the builder, we send your prompt, your references and the current design of your site; for the assistant, the messages in that chat. Anthropic processes this under its commercial API terms. We don't store support assistant chats.

The editor’s assistant runs on your own API key, so your prompts and the site content it reads go to the provider you chose (Anthropic, OpenAI or Google) under your account with them.

When you connect an AI app such as Claude or Cursor through our MCP connector, you approve it on our consent screen and choose full or read-only access. That app can then read your sites and, with full access, change and publish them. What it reads goes to that app and is handled under its own privacy policy. We answer its requests; we don't record your conversations with it. You can disconnect an app at any time under AI & MCP in your dashboard.

We share information only with services that help us run FNJ, and only what each one needs:

• Supabase: sign-in and our database.
• Cloudflare: hosting, file storage and email routing.
• Anthropic: the AI builder and support assistant.
• Google: sign-in with Google if you choose it, Google Analytics, and PageSpeed Insights, which scores the sites you convert.
• Dodo Payments: checkout and billing.
• Resend: sending email.
• Unsplash: search terms for photos chosen while building your site; the photos load from Unsplash.
• Pinterest: design library images load from Pinterest’s servers.

Services you connect yourself (Vercel, Netlify, Cloudflare, GitHub, Framer, your AI provider and AI apps connected over MCP) receive what's needed to do what you asked, under their own terms.

We may also disclose information when the law requires it, to protect our users or the service, or as part of a merger or sale of the business, in which case this policy continues to apply to it.

• Sign-in cookies keep you logged in. The service doesn't work without them.
• Attribution cookies remember the site and campaign that first brought you here (one year) and the last page you viewed (30 days).
• A partner cookie remembers which partner's link you followed, for 90 days.
• Google Analytics sets its own cookies to count visits.
• Your browser also stores preferences, drafts in progress and your AI builder chat history on your device.

You can block or delete cookies in your browser settings, and opt out of Google Analytics with Google’s browser add-on. Blocking sign-in cookies will sign you out.

Our database and servers are in the United States (Eastern North America). Some of the services above may process information in other countries; where they do, they apply the safeguards required by law.

Everything is sent over HTTPS. Host tokens and API keys you give us are encrypted at rest, and AI app access tokens are stored only as hashes. Access to our systems is limited to the people who run FNJ.

Images you upload in the editor or Studio are served from a public address so they can appear on your site, so anyone with that address can view them. Don't upload images you need to keep private.

No system is perfectly secure. If we learn of a breach that affects your information, we'll tell you as the law requires.

We keep your account and content while your account is open. When you ask us to delete your account, we delete it along with your sites, designs, uploaded files, connections and tokens within 30 days.

We keep payment and tax records for as long as the law requires, records of partner commissions, and visit counts that aren't linked to you. Backups are overwritten on their normal cycle. Converted site bundles can be removed earlier to save space; if that happens, we regenerate them from the original site when you need them.

• See and take your data: download your site’s code at any time, or ask us for a copy of what we hold about you.
• Correct it: email us and we'll update it.
• Delete it: email us from your account’s address and we'll delete your account and its data.
• Stop emails: use the unsubscribe link in any product email.
• Disconnect: remove connected AI apps, your AI provider key and Framer connections in your dashboard at any time, or ask us to remove a connected host.

Depending on where you live, including the European Union, the United Kingdom and California, you may also have the right to object to or restrict how we use your information, to move it elsewhere, and to complain to a data protection authority. We'll respond to any request within 30 days.

FNJ isn't intended for anyone under 16, and we don't knowingly collect information from children. If you believe a child has given us information, contact us and we'll delete it.

We'll update this policy when what we collect or how we use it changes, and change the date at the top. If a change is significant, we'll also tell you by email or in the dashboard.

For any question or request about your information, contact us at:

Email: framertonextjs@gmail.com