Privacy Policy

Last updated: 2026-09-29

This policy explains which personal data we process when you visit www.wunderframe.com, use the Wunderframe app, run screens with the Wunderframe player, or take part in a live engagement as a guest — and what rights you have. It is written for the Swiss Federal Act on Data Protection (FADP / nDSG) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Who we are

Wunderframe is a product of Maravilla Labs, a brand of SOLUTAS GmbH, Paradieshofstrasse 117, 4054 Basel, Switzerland (“we”, “us”). Maravilla Labs is our brand; SOLUTAS GmbH is the legal entity responsible.

Questions about data protection and requests to exercise your rights: hello@maravillalabs.com.

Our two roles

  • Controller. For visitors of our website, for account holders and workspace members, and for the data we need to run and bill the service, we decide why and how data is processed.
  • Processor. For the content a customer puts into a workspace — and in particular for everything guests send at a live engagement — the event organizer (the workspace owner) is the controller and we process that data on their behalf and on their instructions only. Guests should address requests about their posts to the organizer first; we help the organizer answer them and forward requests that reach us.

2. Where your data is stored

Wunderframe runs on Maravilla Cloud, our own hosting platform. Maravilla Cloud runs on a dedicated server we rent from Hetzner Online GmbH (Germany) in a Hetzner data center in the European Union. The database, uploaded files, media we generate and backups are kept on that infrastructure. Backups are rotated and overwritten after a few days.

We do not sell personal data, and we do not use it for advertising.

3. Visiting the website

When you open a page, our servers necessarily receive your IP address and technical request data (the page requested, time, browser and operating system as sent by your browser) to deliver the page and to protect the service against abuse. We do not build visitor profiles from this.

No analytics, no advertising trackers. The website and the app use no analytics service, no advertising or social media pixels and no third-party tracking cookies.

Fonts. Our pages load the typefaces of our brand from Google Fonts (Google). To deliver them, Google receives your IP address and the usual request data.

4. Your account and sign-in

To create an account we process your name (display name), email address and password. Sign-in is handled by the Maravilla Cloud sign-in service; we never see your password in plain text. If a sign-in with an external provider (such as Google or GitHub) is offered and you use it, we receive your name and email address from that provider.

While you are signed in we keep a session in cookies (see section 9). We record which workspaces you belong to and your role there.

5. Workspace content

Everything you and your team put into a workspace is stored so the service can show it on your screens: stories and scenes, images, videos and other media, data collections, news and data feeds you connect, venues and stages, sessions and call sheets, and presenters (for example name, email address, photo and biography). Media is processed on our platform (for example resized, transcoded or given a focal point) so it plays well on screens.

When you invite a workspace member or a presenter, we send an invitation email to the address you enter (presenter invitations include a calendar file).

If you use the Wunderframe API or connect an AI assistant through our MCP server, keys act on your behalf with the permissions you chose. Actions taken through them are logged with your user id and the name of the agent, so your team can see who changed what.

6. Screens and players

A screen running the Wunderframe player (in a browser or in the Wunderframe TV app) gets a random device id. When it is paired, we store which stage it belongs to, when it was first and last seen, and a regular heartbeat with technical data: player and app version, device model, operating system and browser (user agent), screen size, playback state, cache usage, recent errors and performance figures. When an editor asks for it, the player also sends a screenshot and a log bundle.

Features that use a camera connected to a screen (presence and hand gestures) analyze the picture on the device itself; only whether someone is in front and gesture events leave the device, never a picture. When a guest casts to a screen, the stream is relayed through Maravilla Cloud’s own real-time media server.

When an editor opens live monitoring, the Wunderframe TV app can stream what the screen shows through Maravilla Cloud’s own real-time media server. Android asks at the screen before it starts, and the stream stops when the editor closes it. Nothing is recorded.

This data is about devices, not people, but it can be linked to the workspace that operates them.

7. Guests at live engagements

At an event, guests can scan a code and send notes, questions, photos, short Live clips and videos to the event’s screens. For this data the organizer is the controller and we are their processor (see section 1).

  • No account. Guests do not register and are never asked for an email address or phone number. The browser keeps a random guest pass so you can keep posting; we store only a scrambled (hashed) form of it, which expires after 60 days.
  • Name and selfie are optional. You can post anonymously. A name and a selfie, if you give them, are shown with your posts.
  • Consent step. Before you post, the page shows the organizer’s consent text (by default: that your post and photo are shown on the screens at this event and kept until the retention period ends). We record the time you agreed.
  • Moderation. Depending on the organizer’s settings, posts appear at once, only after approval, or are held when an automatic check flags them. Organizers can hide or reject any post.
  • Face detection — for placement only. After a photo or a video’s poster frame is uploaded, our own platform detects where faces are in the picture solely to work out a focal point, so the picture is cropped and placed well on the walls. Only that focal point (a position in the picture) is kept; the detection output is deleted. We do not create biometric templates or profiles, and we do not recognize or identify anyone. This runs on our platform and no picture is sent to a third party for it.
  • Captions are made on your phone. Speech is turned into caption text on your own device; the sound is not uploaded to us for captioning. Only the caption text you confirm is sent. If the organizer allows sound, a video you send is uploaded with its sound like any video.
  • Share copies. You can share your own photo or video from your phone. The copy is served through a link that works for a few minutes and only for you; a take-home QR code (for example from a photo booth) works for 24 hours. On the free plan, shared copies carry a small Wunderframe watermark; the screens always show the original.
  • Retention and deletion. The organizer sets how long guest content is kept (by default 30 days, at most 365 days, counted from the engagement’s last post). After that our system deletes posts, photos, clips, videos, selfies and share copies automatically. Organizers can delete a whole engagement at any time. To have your own posts removed earlier, contact the organizer — or us, and we pass your request on.
  • IP addresses. We use a scrambled form of your IP address only for short-lived rate limits against abuse. It is not stored with your posts.

8. Emails and payments

Emails. We send emails that belong to the service: invitations to a workspace or to present at a session, and messages of the sign-in service such as a password reset. We do not currently send a newsletter; if we start one, we will only send it to people who have confirmed they want it.

Payments. Wunderframe is currently free. We do not collect payment data today. When paid plans launch, payments will be handled by a payment provider (we plan to use Stripe), which will receive the data needed to take the payment. We will update this policy before that happens.

9. Cookies and browser storage

We only use cookies and browser storage that the service needs or that remember a choice you made. None is used for tracking or advertising, which is why we do not show a cookie banner.

Cookies

  • session — keeps you signed in (short-lived, about 15 minutes, renewed automatically).
  • refresh — renews your session (30 days).
  • ws — remembers the workspace you last opened (1 year).
  • wf_lang — remembers the language you picked on the website (1 year).
  • studio_preview — only for editors previewing the website inside our content editor (12 hours).

Browser storage

  • On the guest page: your guest pass, your name and a small copy of your selfie (if you gave them), and the list of your own posts — kept in your browser so you can come back to the same engagement.
  • In the app: interface preferences such as an open help panel or a chosen camera.
  • In the player: the device id, and a cache of media and settings so screens keep playing when the network drops.
  • The speech-to-text model used for captions is cached in your browser so it does not need to download again.

You can delete cookies and site data in your browser at any time; you will then be signed out, and a guest loses the link to their earlier posts.

10. Legal bases

We process personal data in line with the principles of the FADP. Where the GDPR applies, we rely on:

  • contract (Art. 6(1)(b) GDPR) — to provide your account, workspaces, screens and the features you use;
  • legitimate interests (Art. 6(1)(f) GDPR) — to deliver the website, keep the service secure, prevent abuse with rate limits, and answer inquiries;
  • consent (Art. 6(1)(a) GDPR) — where we ask for it; you can withdraw it at any time with effect for the future;
  • legal obligations (Art. 6(1)(c) GDPR) — for example to keep accounting records once paid plans exist.

For guest content, the organizer decides the legal basis (usually the guest’s consent given on the guest page) and is responsible for it.

11. Service providers and recipients

We use these providers to run the service. They process data only on our instructions:

  • Hetzner Online GmbH, Germany — server hosting (data center in the EU).
  • Brevo (Sendinblue SAS), France — sending invitation emails.
  • Resend, Inc., USA — sending emails of the sign-in service.
  • Google — delivering web fonts (Google Fonts). Screens that use camera gestures may also load the gesture-detection model from Google’s or jsDelivr’s servers when it is not served by us.

Beyond that, we disclose personal data only when the law requires it (for example to a court or authority), to protect our rights, or — with notice — as part of a sale or merger of our business.

12. Transfers abroad

Our servers are in the European Union, which the Swiss Federal Council recognizes as providing adequate data protection. Some providers listed above are based in the USA or may access data from there. For such transfers we rely on the Swiss-U.S. and EU-U.S. Data Privacy Framework where the provider is certified, or on the standard contractual clauses of the European Commission as recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC).

13. How long we keep data

  • Account data — as long as your account exists; afterwards we delete it unless the law requires us to keep it longer (for example accounting records, usually 10 years under Swiss law).
  • Workspace content — as long as the workspace owner keeps it, or until the workspace is deleted.
  • Guest content — for the retention period the organizer sets (see section 7).
  • Device records — until the screen is unpaired or the workspace is deleted.
  • Rate-limit counters — minutes; backups — a few days.

14. Security

All connections are encrypted (HTTPS). Access to workspaces is checked on every request, secrets such as guest passes, pairing secrets and API keys are stored only in hashed form, and links to guest media are signed and expire. No system is perfectly secure, but we work to protect your data with appropriate technical and organizational measures.

15. Your rights

Within the limits of the applicable law you have the right to request access to your data, to have it corrected or deleted, to restrict or object to its processing, to receive data you gave us in a common format, and to withdraw a consent at any time. Write to hello@maravillalabs.com; we may ask you to prove your identity. For guest content we forward your request to the organizer, who decides as controller.

You can also complain to a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), in the EU the authority of your country of residence.

16. Children

Wunderframe accounts are meant for adults and organizations. Organizers who run engagements where children take part are responsible for obtaining any consent of parents or guardians that the law requires.

17. Changes

We update this policy when the service or the law changes. The date at the top shows the current version. If a change is significant, we will tell account holders beforehand.

18. Contact

SOLUTAS GmbH (Maravilla Labs), Paradieshofstrasse 117, 4054 Basel, Switzerland — hello@maravillalabs.com