Privacy policy

What we hold

• Your account: your email address, which is how you sign in, and the name you give us after you first sign in. We also record when you last signed in.
• Your practice: its name and the details you give when you set it up, such as its country or region and its size, if you choose to give them. We also hold who belongs to it and in which role.
• Your maps: everything you put on them: stages, disciplines, products and how they connect, notes, comments, walkthroughs, published versions and your practice’s product library. We also keep a log of changes to a map.
• People you invite: the email address you invite a member, or share a map with as a guest.
• What you send us: feedback from the account menu comes with your name, your email and the page you sent it from. A report about a catalogue product comes with who sent it.

Where it is held

Your data is held in Europe: on Supabase’s servers in Dublin, Ireland. Supabase is a US company, so US law, such as the CLOUD Act, can reach that data even though it is held in Europe.

If you are in South Africa, your name and email held outside the country count as a cross-border transfer under POPIA. Starting a practice on Stakvue means accepting this. If your practice can’t accept these hosting terms, it should not use Stakvue for now.

Who can see what

Inside your practice. Practices are kept apart inside the database itself, so one practice’s maps are never open to another. Within your practice, what a person can do depends on their role (owner, admin, editor or viewer). Owners and admins also see each member’s email address and when they last signed in. The practice’s team sees the email addresses of the guests it has invited.

Your maps, your views. No one outside your practice sees them unless you invite them. What Digital Reframe can see is limited to:

• your practice’s name and counts, and its owner’s name and email, so we can write to the owner;
• the names of products as people typed them, with how many practices use each, when we match them to the catalogue. Tools your practice built in-house are never queued, never visible to us and never counted;
• the names and file extensions of any file formats your practice adds for itself, and how many practices and maps use them;
• how many practices use a stage set, never the stage sets themselves;
• feedback and product reports you send us, with the page and who sent them.

Figures across practices

We add up the products that practices use across all their maps, to see which products are used. We use these only in aggregated, anonymised form. Your practice is never named outside Digital Reframe, and anything we share outside is aggregated.

Sharing links and guests

• Public links show the last published version of a map to anyone who has the link, with your practice’s name. An item switched off for shared links, and any note marked internal, never appears there, in a walkthrough, an export or an embed. Owners and admins can see every public link of the practice and close any of them.
• Guests are people outside your practice that you invite by email. They see the live working copy of the maps shared with them, without what is switched off or marked internal, and they can comment. Their access ends on the date you set, or when you remove them.
• Comments show the name of whoever wrote them. A guest never sees a member’s email address on a comment.

Leaving and deleting

• Leaving a practice: anyone but the owner can leave. What you made stays, shown as “A former member”. The owner hands the practice to an admin first.
• Deleting your account: for each practice you own you choose to hand it to an admin or delete it. Your memberships are removed, then your sign-in is deleted. What you made in a practice that stays shows as “A former member”.
• Deleting a practice: an owner can delete it, with everything in it: its maps, its library, every share link and embed, and all members’ access.

Services we use

These companies handle data for us:

• Supabase: the database, sign-in and files, in Dublin, Ireland.
• Vercel: hosting the website and app, on its servers in the EU.
• Resend: sending sign-in links, invites and other emails, from Ireland.
• Sentry: finding errors in the app, in its EU data region.

Questions

To ask a question about this page or your data, contact Digital Reframe at [email address to be confirmed]. If you are signed in, you can also send feedback from the account menu.