Security and privacy
Local-first by design. Plain about the rest.
Your media plays from your disk and renders in your browser. This page says what leaves your computer, when and where it goes — and what we haven’t built yet.
- passwords to leak
- 0
- isolated sandbox per agent session
- 1
- to restore a deleted project
- 7 days
- trackers or cookies on this website
- 0
01Media
Your files stay local. Until you sync them.
Imported files play from your disk — your computer’s own, or goframe drive, which mounts your team’s cloud storage in Finder as a real disk. Nothing is uploaded to edit them. Cloud Sync is optional, per file or automatic, and it is what lets the agent and your teammates use a file. Exports render on your computer, in the browser.
- Playback and editing
- from your disk
- Files on goframe drive
- opened like from any other disk
- Cloud Sync
- optional, off by default
- Largest synced file
- 50 GB
- Sent for transcription
- the audio track only
- Rendering
- in your browser
Synced files are kept in goframe’s cloud storage and delivered through its CDN. goframe drive is our Mac app for a team’s storage: the editor opens files from it like from any other disk.
02Sign-in
No passwords. A code, by e-mail.
You sign in with a 6‑digit code we e-mail you, and your account is created the first time. There is no password to leak, reuse or reset. During the beta a new account also needs an invite code — or a place on the waitlist.
- Sign-in code
- 6 digits
- Code works for
- 1 hour
- New code
- after 60 seconds
- Passwords
- none
- Invite code
- single use, expires in 30 days
- Wrong invite codes
- 10 tries an hour
03The agent
An isolated sandbox. One per session.
Each agent session runs in its own isolated cloud sandbox with the project’s files. Media reaches it only once it is synced. Before every run the editor saves a “Before AI” version, and after it you see what changed, with Revert.
- Sandbox
- one per agent session
- Closes when idle
- after about 30 minutes
- Runs
- one at a time per project
- Before every run
- a “Before AI” version
- After every run
- a diff with Revert
To do AI work, the parts of a project a task needs go to the models that do it: the agent runs on Claude; generation, voice, music and transcription use other leading models.
04Versions
Nothing lost by accident. Every change is a version.
goframe saves as you work. Every change lands in version history — editing sessions, snapshots you name, AI edits and a checkpoint before each one. Restoring adds a new version, so nothing is overwritten. Deleted projects wait in Trash for 7 days.
- Auto-save
- every few seconds
- Kinds of versions
- Session, Snapshot, AI edit, Before AI, Restore
- Restore
- non-destructive
- Old sessions
- thinned out over time; other kinds are kept
- Trash
- 7 days, then deleted for good
- Archive
- out of the way, not deleted
06The app
What the app measures. Stated plainly.
The editor uses PostHog, hosted in the EU and reached through goframe’s own domain, to see how the product is used. Once you sign in, events are tied to your account. Autocapture is off, and sessions are never recorded.
Measured
- Sign-in events
- Page views
- Agent chat events
- Crash reports
Not measured
- Session recordings
- Automatic click capture
- The contents of your media
- Profiles of visitors who aren’t signed in
- Analytics
- PostHog, EU cloud
- Reached through
- goframe’s own domain
- Tied to
- your account, once signed in
- Autocapture
- off
- Session recording
- off
- Stored in your browser
- an analytics ID (cookie and local storage)
- Desktop crash reports
- kept on your computer
07This website
This site measures nothing. No cookies.
The pages you are reading have no analytics, set no cookies and load nothing from other companies — fonts included. One small thing stays in your browser: your language choice.
default-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';media-src 'self' blob:;connect-src 'self' https://download.goframe.dev https://download-ru.goframe.dev;object-src 'none';base-uri 'self';form-action 'self'- Analytics
- none
- Cookies
- none
- Other companies’ scripts or fonts
- none
- Remembered
- your language (local storage)
- Only outside request
- /download reads the latest release from download.goframe.dev
08Not built yet
What we haven’t built. Yet.
What a security review will ask about and goframe doesn’t have today. Better you read it here.
- Single sign-on (SSO, SAML)Sign-in is by e-mail code only.
- End-to-end encryptionSynced files and projects are not end-to-end encrypted: the agent and collaboration work with them on our servers.
- A choice of data regionYou can’t pick where projects and synced files are stored.
- Share links that expireA link works until you revoke it.
- An analytics switch in the appThere is no opt-out setting for app analytics yet.
09Contact
Questions about your data? Write to us.
Security and privacy questions, or something to report: hello@goframe.dev. Help with the app: support@goframe.dev.