How Itemlume handles your information.

Who is responsible and how to contact us

Itemlume is operated by 东莞星织科技有限公司, registered in Dongguan, Guangdong, China. For privacy questions or requests, email support@framesprite.com. Include the email address used for the account and describe the information or content concerned. We may ask for information needed to verify that you control the account before disclosing or changing private records.

Information we collect

• Account and sign-in data. Email address, display name, language, role, account dates, password-verification data when you use a password, recovery and session records, and credit balance. If you choose Google or Apple sign-in, we receive the provider account identifier, verified email address, and the name the provider supplies. We do not receive your Google or Apple password.
• Creative workspace data. Product images, model references, first frames, prompts, generation settings, saved assets and works, brand settings, results, job records, and review or selection state that you submit or create.
• Service and transaction records. Requests, errors, security events, credit reservations and adjustments, and, if payment is enabled, order identifiers, selected pack, amount, currency, payment status, and refund or dispute records. Itemlume does not collect payment-card details entered on a payment provider page.
• Public-site measurement. Daily aggregate page-request and approved campaign-link counts. Itemlume does not store raw IP addresses in its analytics database or set a persistent analytics visitor identifier. Hosting, security, and rate-limit systems may process connection metadata such as IP address, user agent, request time, and path.

How and why we use information

We use information to create and secure accounts; complete the sign-in method you request; provide private workspaces; submit requested image and video generations; save and deliver results; calculate and reconcile credits; provide support; prevent abuse; diagnose failures; maintain the service; and understand aggregate use of public pages.

We process information when it is needed to provide the service you request, to protect the service and its users, to meet legal obligations, and, where applicable, with your consent. You may browse public product pages without an account. Uploading or starting a generation is an affirmative request to process the selected content for that operation.

When information is shared

We disclose only the information needed for the relevant function:

• Google or Apple when you choose that sign-in method, so the provider can authenticate you and return the account information described above.
• Configured AI providers and gateways when you start a generation. The request may include a product image, model reference, first frame, prompt, ratio, and generation settings. Automated safety providers also process submitted text and selected reference media before generation, and generated images or sampled video frames before delivery. Safety checks may retain a decision, model and policy version, timestamp, and media hash with the job record. Automated screening can make mistakes; a blocked or inconclusive result is withheld, and support can help investigate without guaranteeing approval.
• Hosting, email, security, and payment providers that process data for infrastructure, account messages, abuse prevention, or an enabled purchase.
• Authorities or transaction parties when disclosure is required by law, needed to protect rights and safety, or part of a merger, financing, reorganization, or sale, subject to applicable safeguards.

We do not sell personal information. Itemlume currently does not use third-party advertising trackers.

Membership and payment records

When you request a monthly membership or extra credit purchase, Itemlume sends PayPal the selected plan or pack, USD amount, currency, merchant and internal purchase identifiers, and return URLs. This checkout request does not send your Itemlume sign-in email. Payment credentials are entered on PayPal rather than in Itemlume.

We keep subscription and order identifiers, plan, paid period, renewal and cancellation state, confirmed receipts, payment events, refunds, disputes, credit pools, expiry and reconciliation records to deliver paid access, calculate credits and resolve transactions. Verified payment notifications or provider reconciliation confirm payments before credit issuance. Subscription cancellation does not delete the transaction records needed for accounting or disputes.

International processing and retention

Itemlume is operated from China and the China edition is hosted on a Tencent Cloud server in Beijing. Identity, AI, email, security, or payment providers may process information in other countries under their own infrastructure and terms. Data-protection rules in those locations may differ from those where you live.

Account and workspace records are kept while the account is active and as needed to provide the service, resolve disputes, protect the service, and meet legal obligations. Sessions normally expire after seven days. Aggregate public-page analytics are retained for up to 400 days. Provider-side retention depends on the provider and account configuration. When we approve a deletion request, some records may remain for a limited period in backups, security records, transaction records, or where retention is legally required.

Your choices and rights

You can choose password, Google, or Apple sign-in when those methods are available; decline to submit optional creative content; sign out to end the current browser session; and contact us to request access, correction, deletion, or a copy of account information. You can also object to or restrict certain processing where applicable law provides that right.

Email support@framesprite.com to make a request. We will verify the request, assess it under applicable law, and explain if a record must be retained. Browser controls can remove local preferences and cookies, but removing a session cookie does not delete the account.

Security, children, and policy changes

We use access controls, account-scoped routes, password hashing, signed anti-forgery tokens, and transport encryption to protect the service. No transmission or storage method is completely secure, so users should protect their credentials and avoid uploading content they are not authorized to process.

Itemlume is a business creative service and is not directed to children under 18. Do not create an account or submit personal information if you are under 18. Contact us if you believe a child has provided information.

We may update this policy when the product, providers, or legal requirements change. The effective date at the top identifies the current version. Material changes will be presented on the site or through an appropriate account notice.

Workspace support reports

When you send Issue feedback, we store the report title, description, selected issue type and feature, account identifier, submission dates, processing status and administrator replies. If you choose a related generation task, we retain a limited diagnostic snapshot: task identifier, name, type, status, error code and output size. The feedback system does not automatically copy creative prompts, reference images or API credentials.

Reports and replies are visible to the reporting account and site administrators for support and fault diagnosis. They are stored with service support records for as long as needed to resolve the issue and related disputes under the retention rules above. Feedback is not sent to an AI provider and does not trigger email notifications. For access, correction or deletion requests, use the privacy contact listed in this policy.