Before/after stance changes across captured policy versions, with exact citations. If no before/after delta is available yet, AIRIN shows the latest citation-backed stance events instead.
No before/after stance delta is available for this filter yet. Latest citation-backed stance events are shown below.
Aug 10, 2026privacyhigh
data sharing
Latest stance: sale or sell
“Do Not Sell or Share My Personal Information. If you are a resident of a state with U.S. State Privacy Laws, you may have the right to opt out of the “sale” or “sharing” of your personal information, including the processing of your personal information for purposes of targeted advertising. Targeted advertising is when we or our partners display ads to you based on your personal information that is collected across different businesses. Residents of states with U.S. State Privacy Law states who would like to exercise their right to opt out of the “sale” or “sharing” of their personal information can do so by sending an email to legal@framer.com .”
Open citationAug 10, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“We only share your personal data with third parties if: This is necessary for the provision of a service or the involvement of the third party. Sub-contractors, for example, will in principle only get access to the personal data that they require for their part of the service provision.”
Open citationAug 10, 2026traininglow
model training
Latest stance: no training claim
“Framer may use automated systems and artificial intelligence (" AI ") tools to support certain internal business operations, including customer support, troubleshooting, product improvement, security monitoring, analytics, and service optimisation. In connection with these activities, personal data submitted to or processed through our Service may be processed by such tools on our behalf and subject to applicable confidentiality, security, and data protection safeguards. We do not use customer personal data to train third-party general-purpose AI models unless expressly disclosed otherwise or permitted in our agreements with customers.”
Open citationAug 10, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“This website ( www.framer.com ) (the “ Website ”), is owned and operated by Framer B.V. Framer B.V. provides a platform for designing and publishing interactive websites (the “ Service ”). Framer B.V. is an entity incorporated under the laws of the Netherlands and registered in the Netherlands with the Dutch Chamber of Commerce under registration number 59920637. Framer B.V. has its registered office at Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands. This privacy statement (“ Privacy Statement ”) specifies how Framer B.V. and its affiliates (hereinafter referred to as “ Framer ”, " we ", " us ", " our ") process personal data of its Users in different contexts.”
Open citationAug 10, 2026moderationmedium
data sharing
Latest stance: third party or vendor sharing
“Authorized government institutions. Such as, courts, police, and law enforcement agencies. We may release information about our Website visitors, including IP address, when legally required to do so, at the request of governmental institutions conducting an investigation or to verify or enforce compliance with the policies governing the Website and applicable laws. We may also disclose such user information whenever we believe disclosure is necessary to protect the rights, property or safety of Framer, or any of our respective business partners, customers or others.”
Open citationAug 10, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“We may also disclose non-identifying, aggregated user statistics to third parties for a variety of purposes, including describing our Service to prospective partners and other third parties. Examples of such non-personal data include the number of users who visited the Website during a specific time period.”
Open citationAug 10, 2026commercial usemedium
data sharing
Latest stance: third party or vendor sharing
“Framer may transfer personal data to third parties (e.g., our cloud service provider) located outside the EEA. This will involve transferring your data to countries outside the EEA and UK (“ Third Countries ”), including the United States of America (“ U.S. ”), where the servers we use are located. A list of countries to which Framer transfers personal data can be found in Framer’s Trust Center (available at https://trust.framer.com ). Any data transfer shall always take place in compliance with Chapter V of the GDPR and additional recommendation or decision issued in this regard by the European Data Protection Board (“ EDPB ”), European Commission, or other competent authority or body under the applicable laws. If you are a resident of a U.S. state with comprehensive privacy laws, including residents of California., you may have additional rights. Please see section 13 (“Your U.S. State Privacy Rights (California and other U.S. states”) for further details.”
Open citationAug 10, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“Transfers of your personal data to a country outside the EEA may in the first place be legitimized based on a so-called adequacy decision. This is a decision in which the European Commission states that e.g. a certain country offers a level of data protection similar to the GDPR. The current list of adequacy decisions of the European Commission is available here . An example of transfer of Framer based on an adequacy decision is the transfer of your personal data to the U.S. (insofar as the recipient is certified under the Data Privacy Framework). The transfer of your data from the UK to a third party outside the UK may primarily be legitimized based on an adequacy regulation of the UK government. An overview of the applicable adequacy regulations of the UK government is available here . If we transfer personal data to Third Countries to which no adequacy decision or adequacy regulation applies, we will conclude the applicable version of the model clauses to safeguard data protection as published by the European Commission, so called standard contractual clauses (“ Transfer SCCs ”). If deemed required under the applicable law, additional measures will be taken. This may concern technical, organizational and/or contractual measures. Where the UK GDPR is applicable, a UK Addendum will be added to the Transfer SCCs, as required by UK laws and regulations. Further information on our legitimization of data transfers to Third Countries will be provided upon your request. Please use our contact details to make such a request, as stated below.”
Open citationAug 10, 2026retentionmedium
retention
Latest stance: indefinite or necessity based
“Legal or dispute data – as long as necessary for legal proceedings or compliance.”
Open citationJun 17, 2026commercial usehigh
content license
Latest stance: sublicensable or transferable
“m) assign, sublicense, sell, resell, lease, rent or otherwise transfer or convey, or pledge as security or otherwise encumber, Customer’s rights under Sections 2.1 and 2.2;”
Open citationJun 17, 2026subprocessors / sharingmedium
data sharing
Latest stance: third party or vendor sharing
“e) Notice . Customer will provide and adhere to a privacy policy for Customer’s use of the Services that: (i) complies with all applicable laws, rules, and regulations, (ii) is conspicuously displayed to all End Users, and (iii) clearly and accurately describes to End Users what information Customer collects (such as login information, contact form data, cookies, etc.) and how Customer uses and shares such information (including for marketing and advertising) with Framer and other third parties.”
Open citationJun 17, 2026subprocessors / sharingmedium
data sharing
Latest stance: third party or vendor sharing
“Each Party agrees that all items of Confidential Information are proprietary to the disclosing Party or such third party, as applicable, and will remain the sole property of the disclosing Party or such third party. Each Party further agrees: (a) to use Confidential Information disclosed by the disclosing Party only for the purposes described herein; and (b) that the receiving Party will not reproduce Confidential Information disclosed by the disclosing Party, except as necessary to carry out the receiving Party's obligations and exercise its rights under this Agreement, and will hold in confidence and protect such disclosing Party's Confidential Information from dissemination to, and use by, any third party. 7.4 Legally Required Disclosure. Notwithstanding the foregoing, each Party may disclose Confidential Information to the limited extent required in order to comply with the order of a court or other governmental body, or as otherwise necessary to comply with applicable law or legal requirement, provided that the receiving Party shall first have given notice to the disclosing Party (to the extent permitted) and shall have provided assistance to the disclosing Party as may be reasonably requested to limit such disclosure.”
Open citationJun 17, 2026moderationhigh
content license
Latest stance: sublicensable or transferable
“Framer does not endorse the Content or any advice, suggestion, or opinion expressed in the Content. 4.3 Although Framer has no obligation to monitor Content, Framer may do so and may remove Content and/or prohibit any use of the Services it believes may be (or alleged to be) in violation of the license and use rights set out in Section 2 of this Agreement. 4.4 License to Display Content. Customer grants: (a) Framer a worldwide, non-exclusive, royalty-free, transferable license with a right to sub-license to use, reproduce, distribute, display and perform the Content to the extent required for the provision of the Services; and (b) individuals with whom Content is shared via the Services a personal, non-exclusive, royalty-free license to access the Content and to use the Content in accordance with the terms of this Agreement. The foregoing license terminates automatically when Content is removed from the Services. Customer understands and agrees that part of the Services is a public platform and other users may search for, see, use, and/or re-post any Content that Customer makes publicly available through the Service. 4.5 Feedback. Customer may choose to or Framer may invite Customer to submit feedback about the Service, including without limitation about how to improve the Services or our products (“Feedback”). By submitting any Feedback, Customer agrees that disclosure is without restriction and will not place Framer under any fiduciary or other obligation.”
Open citationJun 17, 2026moderationmedium
content license
Latest stance: broad license
“Framer does not endorse the Content or any advice, suggestion, or opinion expressed in the Content. 4.3 Although Framer has no obligation to monitor Content, Framer may do so and may remove Content and/or prohibit any use of the Services it believes may be (or alleged to be) in violation of the license and use rights set out in Section 2 of this Agreement. 4.4 License to Display Content. Customer grants: (a) Framer a worldwide, non-exclusive, royalty-free, transferable license with a right to sub-license to use, reproduce, distribute, display and perform the Content to the extent required for the provision of the Services; and (b) individuals with whom Content is shared via the Services a personal, non-exclusive, royalty-free license to access the Content and to use the Content in accordance with the terms of this Agreement. The foregoing license terminates automatically when Content is removed from the Services. Customer understands and agrees that part of the Services is a public platform and other users may search for, see, use, and/or re-post any Content that Customer makes publicly available through the Service. 4.5 Feedback. Customer may choose to or Framer may invite Customer to submit feedback about the Service, including without limitation about how to improve the Services or our products (“Feedback”). By submitting any Feedback, Customer agrees that disclosure is without restriction and will not place Framer under any fiduciary or other obligation.”
Open citationJun 17, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“The security of your Personal Information is important to us. We therefore aim to safeguard and protect your Personal Information from unauthorized access, improper use or disclosure, unauthorized modification, or unlawful destruction or accidental loss, and we utilize and maintain certain reasonable processes, systems, and technologies to do so. This also means that our personnel is only allowed to access or process Personal Information if this is reasonably required to do so for work related tasks, to adhere to your request or to fulfill a legal obligation on behalf of us. Please remember that no method of transmission over the internet, or method of electronic storage, is 100% secure or error-free. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. Accordingly, we cannot be held responsible for unauthorized or unintended access that is beyond our control. Transferring Personal Information: As also mentioned above, where Personal Information is transferred outside the European Economic Area to our affiliated companies or to third party service providers, we will take steps to ensure that your Personal Information is protected by the same level of protection as if it remained within the European Economic Area, including by entering into data transfer agreements using the European Commission approved Standard Contractual Clauses. We contractually require agents, service providers, and affiliates who may process Personal Information related to the Services to provide the same level of protection for Personal Information as required under the GDPR.”
Open citationJun 17, 2026subprocessors / sharingmedium
data sharing
Latest stance: third party or vendor sharing
“Obtaining consent from our customers for our use of any service providers who will be processing any personal data; and - Ensuring that any such service providers agree in writing to comply with these requirements.”
Open citationJun 17, 2026governing lawmedium
dispute terms
Latest stance: arbitration or waiver
“If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services of Jams ADR are provided at no cost to you. If your complaint still remains unresolved, then you have the right to invoke binding arbitration by the Privacy Shield Panel upon written notice to Framer at: support@framer.com. We may share Personal Information with third parties in connection with potential or actual sale of our company or any of our assets, or those of any affiliated company, in which case Personal Information held by us about our customers and/or users may be one of the transferred assets. In accordance with our legal obligations and our privacy statement , we may also process Personal Information, subject to a lawful request, to public authorities for law enforcement or national security purposes. Further we may also disclose Personal Information where otherwise required by local law or regulations.”
Open citationJun 17, 2026governing lawmedium
dispute terms
Latest stance: arbitration or waiver
“Framer has further committed to refer unresolved Privacy Shield complaints to Jams ADR, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services of Jams ADR are provided at no cost to you. If your complaint still remains unresolved, then you have the right to invoke binding arbitration by the Privacy Shield Panel upon written notice to Framer at: support@framer.com.”
Open citationJun 17, 2026traininglow
model training
Latest stance: no training claim
“Our automated systems may analyze your Content using techniques such as machine learning in order to improve our Services and Software and the user experience. Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models. Marketing or Promotional Communications: Only if you have subscribed to our newsletter, we may use your Personal Information to contact you with marketing or promotional materials and other information communications related to Framer. If you no longer wish to receive marketing or promotional communications related to us, you can at any moment in time by using the unsubscribe button in the email or emailing support@framer.com to request us to stop sending you such communications. Such a request will be processed immediately by us, but in any event within two (2) business days.”
Open citationJun 17, 2026traininglow
model training
Latest stance: no training claim
“Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.”
Open citationJun 17, 2026subprocessors / sharingmedium
data sharing
Latest stance: third party or vendor sharing
“We operate worldwide and we may share your Personal Information with our affiliated businesses as part of our business operations, administration of the Services and to comply with local laws and regulations. We may also appoint third party service providers (who will operate under our instructions) to assist us in providing information, products or services to you, in conducting and managing our business, or in managing and improving our Services. We may share your personal data with these affiliates and third parties to perform services that the third parties have been engaged by us to perform on our behalf, subject to appropriate contractual restrictions and security measures, or if we believe it is reasonably necessary to prevent harm or loss, or if we believe that the disclosure will further an investigation of suspected or actual illegal activities.”
Open citationJun 17, 2026subprocessors / sharinghigh
content ownership
Latest stance: platform claims or reserves rights
“We operate worldwide and we may share your Personal Information with our affiliated businesses as part of our business operations, administration of the Services and to comply with local laws and regulations. We may also appoint third party service providers (who will operate under our instructions) to assist us in providing information, products or services to you, in conducting and managing our business, or in managing and improving our Services. We may share your personal data with these affiliates and third parties to perform services that the third parties have been engaged by us to perform on our behalf, subject to appropriate contractual restrictions and security measures, or if we believe it is reasonably necessary to prevent harm or loss, or if we believe that the disclosure will further an investigation of suspected or actual illegal activities. We reserve the right to share any information that is not deemed Personal Information or is not otherwise subject to contractual restrictions. Where Personal Information is transferred outside the European Economic Area to our affiliated companies or to third party service providers, we will take steps to ensure that your Personal Information is protected by the same level of protection as if it remained within the European Economic Area, including by entering into data transfer agreements using the European Commission approved Standard Contractual Clauses. We contractually require agents, service providers, and affiliates who may process Personal Information related to the Services to provide the same level of protection for Personal Information as required under the European Union General Data Protection Regulation ("GDPR").”
Open citationJun 17, 2026subprocessors / sharinghigh
content ownership
Latest stance: platform claims or reserves rights
“We reserve the right to share any information that is not deemed Personal Information or is not otherwise subject to contractual restrictions.”
Open citationJun 17, 2026privacyhigh
content ownership
Latest stance: platform claims or reserves rights
“In addition to the above rights, you have the right to object, on grounds relating to your particular situation, at any time to any processing of your Personal Information which we have justified on the basis of a legitimate interest, including profiling (as opposed to your consent) or to perform a contract with you. You also have the right to object at any time to any processing of your Personal Information for marketing or promotional purposes, including profiling for marketing or promotional purposes. In relation to all of these rights or if you have any questions about this Privacy Statement, please send an email to compliance@framer.com . Please note that we may request proof of identity, and we reserve the right to charge a fee where permitted by law, especially if your request is manifestly unfounded or excessive. We will endeavor to respond to your request within all applicable timeframes.”
Open citationJun 17, 2026subprocessors / sharingmedium
data sharing
Latest stance: third party or vendor sharing
“We may share Personal Information with third parties in connection with potential or actual sale of our company or any of our assets, or those of any affiliated company, in which case Personal Information held by us about our customers and/or users may be one of the transferred assets. In accordance with our legal obligations, we may also process Personal Information, subject to a lawful request, to public authorities for law enforcement or national security purposes. Further we may also disclose Personal Information where otherwise required by local law or regulations.”
Open citationJun 17, 2026audit / residencymedium
data sharing
Latest stance: third party or vendor sharing
“Where Personal Information is transferred outside the European Economic Area to our affiliated companies or to third party service providers, we will take steps to ensure that your Personal Information is protected by the same level of protection as if it remained within the European Economic Area, including by entering into data transfer agreements using the European Commission approved Standard Contractual Clauses. We contractually require agents, service providers, and affiliates who may process Personal Information related to the Services to provide the same level of protection for Personal Information as required under the European Union General Data Protection Regulation ("GDPR").”
Open citationJun 17, 2026subprocessors / sharingmedium
data sharing
Latest stance: third party or vendor sharing
“We operate worldwide and we may share your Personal Information with our affiliated businesses as part of our business operations, administration of the Services and to comply with local laws and regulations. We may also appoint third party service providers (who will operate under our instructions) to assist us in providing information, products or services to you, in conducting and managing our business, or in managing and improving our Services. We may share your personal data with these affiliates and third parties to perform services that the third parties have been engaged by us to perform on our behalf, subject to appropriate contractual restrictions and security measures, or if we believe it is reasonably necessary to prevent harm or loss, or if we believe that the disclosure will further an investigation of suspected or actual illegal activities. We reserve the right to share any information that is not deemed Personal Information or is not otherwise subject to contractual restrictions. Where Personal Information is transferred outside the European Economic Area to our affiliated companies or to third party service providers, we will take steps to ensure that your Personal Information is protected by the same level of protection as if it remained within the European Economic Area, including by entering into data transfer agreements using the European Commission approved Standard Contractual Clauses. We contractually require agents, service providers, and affiliates who may process Personal Information related to the Services to provide the same level of protection for Personal Information as required under the European Union General Data Protection Regulation ("GDPR").”
Open citationJun 17, 2026privacyhigh
data sharing
Latest stance: sale or sell
“This section provides additional details about the Personal Information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or "CCPA". We do not sell the Personal Information we collect to third parties for money or any other consideration, as that term is generally understood. However, the CCPA’s definition of "sale" is very broad and might be construed to include the following:”
Open citationJun 17, 2026subprocessors / sharingmedium
data sharing
Latest stance: third party or vendor sharing
“- Obtaining consent from our customers for our use of any service providers who will be processing any personal data; and”
Open citationJun 17, 2026privacyhigh
data sharing
Latest stance: sale or sell
“We do not sell the Personal Information we collect to third parties for money or any other consideration, as that term is generally understood. However, the CCPA’s definition of "sale" is very broad and might be construed to include the following: - Situations where browsing data is sent to referral advertisers - when you click on an ad that sends you to our website, we send a hashed identifier to the referring site so they can receive credit for the referral. We, along with millions of other sites, use these services. While we limit the information sent to what is needed to properly record the referral, the fact that you clicked on the link and visited Revinate may be added to your profile by the ad publisher. You have the right to opt out of this by sending us a request as described below.”
Open citationJun 17, 2026audit / residencymedium
data sharing
Latest stance: third party or vendor sharing
“As of July 16, 2020, we no longer rely on the Privacy Shield as a transfer mechanism for data transfers given the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield are no longer valid as a result of the CJEU ruling in Schrems II. However, to the extent Framer has ongoing obligations under our existing Privacy Shield Certification, we will continue to honor them. Our Privacy Shield certification is available here . Where Personal Information is transferred outside the European Economic Area to our affiliated companies or to third party service providers, we will take steps to ensure that your Personal Information is protected by the same level of protection as if it remained within the European Economic Area, including by entering into data transfer agreements using the European Commission approved Standard Contractual Clauses, or by relying on certification schemes such as the Privacy Shield. We contractually require agents, service providers, and affiliates who may process Personal Information related to the Services to provide the same level of protection for Personal Information as required under the European Union General Data Protection Regulation ("GDPR"). Framer complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States.”
Open citationJun 17, 2026governing lawmedium
data sharing
Latest stance: third party or vendor sharing
“If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services of Jams ADR are provided at no cost to you. If your complaint still remains unresolved, then you have the right to invoke binding arbitration by the Privacy Shield Panel upon written notice to Framer at: support@framer.com. We may share Personal Information with third parties in connection with potential or actual sale of our company or any of our assets, or those of any affiliated company, in which case Personal Information held by us about our customers and/or users may be one of the transferred assets. In accordance with our legal obligations and our privacy statement , we may also process Personal Information, subject to a lawful request, to public authorities for law enforcement or national security purposes. Further we may also disclose Personal Information where otherwise required by local law or regulations.”
Open citationJun 17, 2026subprocessors / sharingmedium
data sharing
Latest stance: third party or vendor sharing
“We may share Personal Information with third parties in connection with potential or actual sale of our company or any of our assets, or those of any affiliated company, in which case Personal Information held by us about our customers and/or users may be one of the transferred assets.”
Open citationJun 17, 2026audit / residencymedium
data sharing
Latest stance: third party or vendor sharing
“We are committed to processing personal data in accordance with our obligations as a data “processor” or “subprocessor” under applicable EU data protection laws. If your organization is based in the EU or is otherwise directly or indirectly subject to EU data protection laws, including the GDPR, we have executed, or upon request by your organization will execute, and have otherwise committed to comply with the applicable Standard Contractual Clauses approved by the European Commission related to our processing or subprocessing of personal data in connection with the services we provide to your organization as our customer. For our customers to which such EU data protection laws apply, these requirements include:”
Open citationJun 17, 2026tier differencesmedium
data sharing
Latest stance: third party or vendor sharing
“These security policies cover the following topics and are available to Enterprise customers upon request: Access control Change management Risk management Data classification and asset inventory management Incident response and management Network security Encryption and key management Human resources security Information transfer Secure development System monitoring and logging Vendor management Vulnerability management and malware protection Mobile device management and remote working Business continuity and disaster recovery”
Open citationJun 17, 2026tier differencesmedium
tier condition
Latest stance: rights or controls vary by tier
“Framer Enterprise includes all our general security measures, plus additional features and enhancements to provide even more customization and privacy.”
Open citationJun 17, 2026tier differencesmedium
tier condition
Latest stance: rights or controls vary by tier
“Framer Enterprise includes all our general security measures, plus additional features and enhancements to provide even more customization and privacy.”
Open citationJun 17, 2026tier differencesmedium
tier condition
Latest stance: rights or controls vary by tier
“Framer supports role-based access control, which means the access of team members within an organization are dictated by their role (viewer, collaborator, editor, or administrator). Administrators can assign team members specific roles or revoke access using the Framer account dashboard.”
Open citationJun 17, 2026tier differencesmedium
tier condition
Latest stance: rights or controls vary by tier
“These security policies cover the following topics and are available to Enterprise customers upon request: Access control Change management Risk management Data classification and asset inventory management Incident response and management Network security Encryption and key management Human resources security Information transfer Secure development System monitoring and logging Vendor management Vulnerability management and malware protection Mobile device management and remote working Business continuity and disaster recovery”
Open citationJun 17, 2026tier differencesmedium
tier condition
Latest stance: rights or controls vary by tier
“Framer supports single sign-on (SSO) for Enterprise customers. By using the customer’s existing identity management solution, Framer provides an easy and secure way for companies to manage their team members’ access. Framer supports identity providers like Google G Suite, Azure Active Directory, OneLogin, and Okta. Framer also supports both SAML and OAuth-based OpenID Connect.”
Open citationGenerated from live stance events. Informational only, not legal advice.