Privacy Policy

Last updated 3 September 2026.

1. Who we are

FrameMyRoots is operated by Paraspect, based in Pune, India. For any privacy question or request, email hello@framemyroots.com with “Privacy” in the subject line.

2. What we collect

From Google, when you sign in

Your name, email address, Google account identifier and profile picture. That is everything Google sends us. We never receive or store your Google password. We use it to create your account, recognise you when you return, and attach your trees to you.

From you — your family tree

Names (in more than one language if you use them), dates or years of birth and death, gender, parent and child relationships, spouse or partner relationships, a place associated with a person, and any notes you write. You decide what to enter. Much of it will be about people who are not our users and never will be.

From your purchases

A record that a purchase happened and which tree it was for. Payments are handled by a third-party provider — complete card details are collected and processed by them, not by us, and do not reach our systems. We do not collect a postal address or phone number, because we do not ship anything.

Technical information

Ordinary server and security information — IP address, browser and device type, session and login activity, and error diagnostics. We use it to keep the service running and secure, not to build a profile of you.

3. What we don’t do

We do not sell your family history. Not your tree, not your names, not your notes — not to advertisers, not to anyone.

There is no analytics or tracking on this site. No Google Analytics, no advertising pixels, no third-party session recording. Nobody is watching what you click. If that ever changes, this page will change with it.

4. Where it is stored

In a managed PostgreSQL database operated by a third-party infrastructure provider, hosted in Mumbai, India. Access controls at the database level mean you can read and write only your own trees, plus any tree someone has explicitly invited you to.

5. Who else is involved

Three services, each doing exactly one job:

• Google — sign-in only.
• A third-party database and infrastructure provider — hosting, storage and authentication infrastructure.
• Our payment provider — card payments only.

Each receives only what its job requires. We may also disclose information where the law requires it, or where reasonably necessary to protect our users or the security of the service.

6. Sharing a tree

You can invite people by their Google email address and choose what they can do. There is no public link — sharing is invitation-only on purpose. Anyone you invite can see what is in that tree, so choose deliberately.

7. Information about other people

This is the part that makes a family tree different from most services: you will record grandparents, parents, children, siblings, cousins and others who have no account here and never agreed to anything.

Please use real care with living relatives, and don’t record what you have no good reason to record. If someone believes their information has been added improperly, they can email us and we will investigate and, where appropriate or legally required, correct, restrict or delete it.

8. How long we keep it

While your account is active, we keep your trees so you can come back and keep building. Deleting a tree deletes its data. If you want your whole account removed, email us and we will do it.

Some records may be kept longer where required for legal, tax, accounting, fraud-prevention or dispute-resolution purposes — and only for as long as that purpose needs.

9. Your rights

Subject to applicable law, you can ask us what we hold about you, ask us to correct it, ask us to delete it, withdraw consent where processing relies on it, or complain about how we have handled it. We may need to verify who you are first, and we will respond within the period the law requires — in any case within 30 days.

10. Children

FrameMyRoots is intended for adults. A family tree will naturally contain information about children, because children are part of families — please add only what is needed. We do not knowingly invite children to create their own accounts.

11. Cookies

We use cookies to keep you signed in and to maintain your session. They are functional, not advertising cookies. Blocking them will stop sign-in from working.

12. Security

Encryption in transit, database-level access controls, and authentication handled by Google. No internet service can promise absolute security, but the measures here are real ones rather than reassuring words.

13. Processing outside India

Your data is stored in Mumbai. Some providers may process limited information outside India in the course of running their services; where that happens, we expect it to be done under appropriate legal safeguards.

14. Changes

If we change this policy materially, we will give reasonable notice through the service and update the date at the top.

15. Privacy complaints

Write to hello@framemyroots.com with “Privacy” in the subject line. We review and respond in accordance with applicable law, including India’s data protection law.