← Back to SolidFrame

Privacy Policy

Effective date: 31 August 2026

This Privacy Policy explains how personal data are processed when you visit solidframe.io, create or use a SolidFrame Studio account, upload or publish content, purchase credits, request support or otherwise interact with the Service.

1. Who is responsible for your data

Two companies have distinct responsibilities.

AG PLUS LLC is an independent controller for checkout, orders, payment status, billing, purchase confirmations, refunds, fraud prevention, accounting, tax compliance, commercial records and first-line customer communications. AG PLUS LLC is registered in Uzbekistan under number 3080788, TIN 312696228, D-U-N-S 933906683, at Republic of Uzbekistan, Tashkent city, Yunusabad district, Katta Xasanboy MFY, Xasanboy Street, 8th Lane, house 3-B. Privacy and billing contact: info@4teen.me; telephone: +998 95 792 02 87.

Solidframe Technologies OÜ is an independent controller for website and account operation, authentication, project administration, uploaded media, prompts, generated outputs, editing activity, public sharing, technical logs, platform security, abuse prevention and technical support. Solidframe Technologies OÜ is registered in Estonia under code 14562948, VAT number EE102110034, D-U-N-S 536395419, at Harju maakond, Tallinn, Lasnamäe linnaosa, Võru tn 2-51, 13612, Republic of Estonia. Privacy and technical contact: info@solidframe.io; telephone: +372 5911 6652.

Where Solidframe processes particular personal data solely under AG PLUS’s documented instructions, Solidframe acts as a processor. The companies are not automatically joint controllers merely because their services work together.

2. Personal data we collect

Depending on how you use the Service, we process:

  • Account data: name, email address, account identifier, authentication records, account status, team or business details and preferences.
  • Transaction data: selected package, credits, amount, currency, tax information, payment status, timestamps, order and billing references, refund or chargeback history and limited payment-method information received from Kapitalbank or another checkout participant. We do not intend to store complete card numbers or card security codes.
  • Service and content data: projects, uploaded media, prompts, instructions, outputs, timelines, selected models, editing actions, credit usage, public-sharing choices and associated metadata.
  • Communications: registration messages, support requests, complaints, refund requests, notices, survey responses and related correspondence.
  • Technical and security data: IP address, browser and device information, session identifiers, access times, logs, crash or error reports, fraud signals, abuse reports and security events.
  • Consent and contract evidence: policy versions, acceptance timestamps, checkout consents, requests for immediate performance and withdrawal acknowledgements.
  • Public content: profile or project information you choose to publish, together with moderation status and reports concerning that material.

Please do not provide sensitive personal data unless it is necessary for a feature and you have a lawful basis. Media may contain faces, voices or other biometric characteristics; you are responsible for obtaining required permissions before uploading another person’s material.

3. How data are collected

We collect data directly from you, automatically through the website and application, from AG PLUS or Solidframe where needed to coordinate the Service, from payment and fraud-prevention providers, from selected AI or media providers, and from people who submit a lawful report concerning content or account activity.

4. Purposes and legal bases

We process personal data to:

  • create, authenticate, administer and secure accounts;
  • provide projects, editing, generation, processing, export and public-sharing functions;
  • deliver purchased credits and keep accurate usage records;
  • process orders, payments, taxes, refunds, disputes and chargebacks;
  • respond to customer, privacy, billing and technical requests;
  • prevent fraud, abuse, prohibited content, security incidents and unauthorised access;
  • comply with accounting, tax, sanctions, court, regulatory and other legal duties;
  • establish, exercise or defend legal claims;
  • maintain and improve Service performance using operational, aggregated or de-identified information;
  • send necessary transactional or security communications; and
  • send marketing only where permitted and with any consent required by law.

Where the GDPR applies, the legal bases are performance of a contract, steps requested before entering a contract, compliance with legal obligations, legitimate interests in operating and protecting the Service and users, and consent where specifically requested. Legitimate interests are balanced against your rights and expectations.

5. User content, prompts and AI processing

Solidframe processes User Content to perform the operations you request. Relevant content may be transmitted to the third-party AI or media provider selected for a task. The provider may apply safety screening and retain limited operational information under its disclosed terms.

Confidential User Content is not used to train a general-purpose model without your express opt-in, except for strictly necessary safety and abuse detection or where law requires processing. You may withdraw an optional training consent prospectively.

Do not upload confidential information, personal data, images, voice recordings or other material concerning another person unless you have an appropriate lawful basis and all required rights and permissions.

6. Payments

AG PLUS is the seller and merchant of record. Its confirmed banking and acquiring payment partner is Joint-stock commercial bank “Kapitalbank” (“Kapitalbank” JSCB), Uzbekistan. Kapitalbank and any separate gateway, wallet or card-network participant identified at checkout may act as AG PLUS’s processor and/or as an independent controller for payment authorisation, settlement, fraud prevention, card-network compliance, sanctions, taxation, refunds and regulatory duties. Each provider’s privacy notice applies to its independent processing.

AG PLUS receives transaction results and limited method details needed to allocate credits, issue confirmations, reconcile accounts, prevent fraud and handle refunds or disputes. Solidframe receives only the transaction status and identifiers reasonably needed to activate and support the account.

7. Recipients and service providers

Personal data may be shared, strictly as necessary, with:

  • “Kapitalbank” JSCB and any separate payment gateway, wallet, card-network, issuing-bank or fraud-prevention provider involved in the transaction;
  • hosting, storage, content-delivery and security providers;
  • authentication, email, customer-support and monitoring providers;
  • AI and media-processing providers selected for a task;
  • professional advisers, auditors and insurers subject to confidentiality;
  • courts, regulators, tax authorities or law-enforcement bodies where legally required; and
  • a successor in a merger, financing, reorganisation or sale, subject to appropriate safeguards.

Confirmed AI and media provider categories and names are maintained in the Subprocessor and Third-Party Provider Disclosure. Operational infrastructure providers will be disclosed there once confirmed for the production deployment; they are not guessed in this Policy.

8. International transfers

AG PLUS is established in Uzbekistan and Solidframe in Estonia. Service providers and users may be located in other countries. Personal data may therefore be transferred internationally.

Where the GDPR applies to a restricted transfer, the responsible company will use an approved mechanism, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, or another lawful safeguard, together with supplementary measures where appropriate.

Personal data subject to Uzbekistan law will be stored and transferred in accordance with applicable localisation and transfer rules. Categories that must be stored in Uzbekistan will be handled accordingly. Other data may be processed abroad only where a lawful transfer condition is met.

9. Retention

Retention depends on purpose:

  • account and active project data are generally retained while the account is active;
  • deleted project content is removed from active systems within a reasonable operational period, subject to backups, investigations and legal holds;
  • transaction, invoice, tax and accounting records are retained for the periods required by applicable law;
  • security, fraud and abuse records are retained for a period proportionate to the relevant risk;
  • support and complaint records are retained while necessary to resolve the matter and establish legal claims;
  • public content remains available until unpublished or removed, followed by a limited backup period; and
  • consent and contract evidence is retained for the applicable limitation and compliance period.

When data are no longer required, they are deleted or anonymised. Backups may persist for a limited period before secure overwrite.

10. Cookies and similar technologies

The Service uses cookies and similar browser storage for authentication, session continuity, security, fraud prevention, preferences and core operation. Optional analytics, marketing or advertising technologies will be used only after any consent required by law. Details and controls are described in the Cookie Policy.

11. Public projects

Projects are not made public merely because they are stored in your account. If you choose to publish, the selected material and related public metadata can be viewed and shared by others. Do not publish personal data or another person’s material without authority.

Public content may be reviewed, restricted or removed under the Acceptable Use and Content Safety Policy or the Copyright, Illegal Content and Takedown Policy. Moderation records may be retained to explain and defend decisions.

12. Your rights

Depending on applicable law, you may have the right to request access, correction, deletion, restriction, portability, objection, or withdrawal of consent. You may also request information about recipients and applicable international-transfer safeguards.

Send requests relating to billing, purchases or AG PLUS records to info@4teen.me. Send requests relating to accounts, projects, content or platform records to info@solidframe.io. If a request concerns both companies, you may write to either address and it will be routed appropriately. Identity verification may be required.

You may complain to the competent data-protection authority. Where the GDPR applies, this may include the Estonian Data Protection Inspectorate or the authority in your EU/EEA country of residence or work. Where Uzbekistan law applies, you may use the competent Uzbekistan authority and available state procedures.

If AG PLUS’s processing is subject to GDPR Article 27 and no exception applies, the identity and contact details of its designated EU representative will be added to this Policy before the relevant processing begins.

13. Automated decisions

Automated systems may detect fraud, abuse, prohibited content or security risks. They may temporarily block an operation or flag it for review. Where applicable law gives you a right to human review of a decision producing legal or similarly significant effects, you may request review through the relevant contact.

14. Security and incidents

AG PLUS and Solidframe use proportionate technical and organisational measures intended to protect personal data, including access controls, authentication, logging, encryption where appropriate, supplier controls and incident procedures. No internet service can guarantee absolute security.

If a personal-data breach occurs, the responsible company will investigate and notify affected persons and authorities where required by law. Protect your credentials and contact technical support promptly about suspected compromise.

15. Children

The Service is intended for adults and is not directed to children. We do not knowingly create accounts for children. If you believe a child has provided personal data unlawfully, contact info@solidframe.io.

16. Changes

We may update this Policy to reflect changes in the Service, providers or law. The current version and effective date will be published on the website. Material changes will receive additional notice where appropriate or legally required.

17. Language

This Policy is issued in English. A Russian translation may be provided for convenience. If the translations differ, the English version prevails, subject to mandatory law.