A build around you.
Care for your information.

Scope and effective date

Effective 10/23/26 · Version privacy-2026-10-23. This policy describes Core & Frame’s website, estimate requests, quotes, private order pages, and related customer communications. Contact us at sales@coreandframe.com with privacy questions or requests.

Estimate requests, quote emails, and private order pages are connected. Checkout currently uses Stripe’s sandbox for testing; test payments do not collect real funds. Contact details, addresses, and other information entered during testing are still handled under this policy.

Information we collect

• Information you provide: your name, email, optional phone number, delivery location, configuration preferences, supplied parts links and lists, project notes, quantities, organization or procurement details, and uploaded inspiration photos or PDFs.
• Request and quote records: reference numbers, submission times, quote configurations and revisions, prices and availability, contact permission and notice versions, and email delivery records.
• Technical information: our hosting and security providers process connection and request information. The estimate service stores a hash derived from the connection IP address to help limit abuse; a hash is not a guarantee of anonymity.
• Order and service records: quote and terms approvals, delivery and billing information returned by the payment provider, address confirmations, parts and production progress, completion photos, tracking and delivery records, change requests, support correspondence, and cancellation or refund records. For an upgrade, records can include the condition and included equipment of your existing PC.
• Payment records: Stripe checkout and customer references, payment and refund amounts and status, calculated tax, and payment-provider event records used to verify transactions. Card details are entered directly with Stripe; Core & Frame does not receive or store full card numbers or card security codes.

Only send files you are entitled to share. Avoid uploading passwords, payment card numbers, student records, government IDs, confidential research, or other sensitive material unnecessary for your quote.

How we use and share information

We use your information to respond to requests, assess compatibility and sourcing, prepare quotes, provide order and service updates, prevent abuse, keep business records, and meet legal obligations. Transactional confirmations are not a subscription to a marketing list.

Service providers process information necessary for these purposes: OpenAI Sites and Cloudflare for website hosting, request records, and file storage; Resend for transactional email; and Microsoft 365 for our sales mailbox. Hosting and font services may receive technical connection data. Stripe processes checkout, payment, refund, address, and tax information. The site receives the information needed to verify payments and maintain order records, including in sandbox testing. These providers have their own privacy practices.

We may disclose necessary information to suppliers, shipping providers, professional advisers, or authorities when needed to fulfill an approved order, resolve a dispute, protect against fraud, or comply with law. We do not sell estimate information or use it for targeted advertising. We do not publish your inspiration files or private quote as marketing material without separate permission.

Cookies, fonts, and saved drafts

The application currently has no advertising pixels or analytics trackers. The hosting platform and sign-in or security services may use cookies or similar technologies needed to operate and protect the site. Stripe also uses technologies needed for its checkout and payment services. A necessary customer-order session cookie keeps your private order page open for up to eight hours before you need to reopen an email link. Anyone with your private order link may access that order; keep it private and contact us if a link needs to be revoked.

The configurator saves your choices on this browser using local storage. Inspiration photos and procurement PDFs may be saved in this browser’s IndexedDB while you prepare a request. These drafts can remain after submission or closing the tab. Contact form fields are not included in the saved configuration. Your browser settings can block or remove this storage, which may prevent draft recovery.

Shared build links contain configuration choices and text notes, but not contact form fields or uploaded file contents. Notes may contain information you entered yourself, so review a shared link before sending it to anyone.

Typography is loaded from Google Fonts, which receives the technical request information needed to deliver the font files. External links, including Newegg, lead to services governed by their own policies. When you ask us to read a Newegg list, the supplied public link is fetched to create a parts summary.

Core & Frame does not currently use application-level cross-site advertising tracking and does not change that behavior in response to a browser Do Not Track signal. We will reassess disclosures and consent controls before adding optional analytics or advertising technologies.

Retention and protection

We retain requests, uploads, correspondence, and order records as needed to evaluate your project, fulfill an order, provide support, maintain required accounting records, or resolve legal matters. Retention depends on those purposes and applicable obligations; submitting a request does not trigger a fixed automatic deletion date.

Submitted requests, files, quotes, and order records are restricted to authorized owner access. Customers can view and take permitted actions on their own order through private email links and necessary session cookies. We use access controls and service-provider safeguards, but no internet service can promise absolute security. Saved browser drafts may be accessible to other people using the same browser profile.

Your choices and privacy requests

You can request access to, correction of, or deletion of your request information by emailing sales@coreandframe.com. Include your request reference where possible. We may verify your identity before acting and may retain records needed for legal, accounting, fraud-prevention, or dispute purposes. We explain any applicable limits.

You may ask us to stop following up on an estimate. Necessary communications about an active order, refund, or legal matter may still be required. Any additional rights under applicable privacy law are preserved. The website is intended for adults arranging custom systems, including authorized institutional purchasers, rather than collecting personal information directly from children.

Policy updates

10/23/26 update: Updated the service status and explained the connected quote and order portal, Stripe sandbox checkout, order records, and private-order session cookie.

We update the effective date and version when this policy changes. Material changes are identified on this page and, where appropriate or legally required, brought to affected customers’ attention. A later policy does not authorize an unrelated use of information where additional notice or permission is required.