Privacy by design.

HEREFRAME collects only information needed to operate profiles, booking requests, messages, moderation, and support. Public pages must not expose private email addresses or booking details.

Images

Uploads are size- and MIME-limited, stored separately from relational metadata, and should have sensitive EXIF data such as GPS removed before public delivery.

Security

Access to requests and messages requires server-side authorization. Sensitive values belong in environment configuration, never source code or browser-visible logs.

Launch requirement

Retention periods, data-controller details, international transfers, and regional rights must be finalized before public launch.