Privacy Policy

1. Introduction

Welcome to BPMNify ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our BPMN AI generation platform at bpmn-ai.com (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Authentication credentials (managed through our authentication provider)
• Account preferences and settings

2.2 Usage Data

We automatically collect certain information when you access our Service:

• Device information (device type, operating system, browser type)
• Device fingerprint for fraud prevention and security purposes
• IP address and approximate location
• Usage patterns and feature interactions
• Credit consumption and transaction history

2.3 User-Generated Content

When you use our BPMN AI generation features, we process:

• Text descriptions you provide for diagram generation
• Images you upload for image-to-BPMN conversion
• BPMN diagrams you create, edit, or import
• Project names and organizational metadata

2.4 Payment Information

Payment processing is handled by Stripe, our third-party payment processor. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. We receive and store transaction confirmations, subscription status, and billing history.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide AI-powered BPMN diagram generation, image-to-BPMN conversion, and diagram editing features
• Account Management: To create and manage your account, process subscriptions, and track credit balances
• Security: To detect and prevent fraud, abuse, and unauthorized access using device fingerprinting and other security measures
• Improvement: To analyze usage patterns and improve our AI models, features, and user experience
• Communication: To send service-related notifications, updates, and support responses
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Data encryption in transit (TLS/SSL) and at rest
• Secure authentication through Supabase
• Regular security audits and monitoring
• Access controls and employee training

Your data is stored on secure cloud infrastructure. BPMN diagrams and project data are stored to enable project persistence and version history features.

5. Third-Party Services

We use the following third-party services that may have access to your data:

• Supabase: Authentication and database services
• Stripe: Payment processing and subscription management
• AI Providers: We use AI services (including Google Gemini and OpenAI) to power our BPMN generation features. Your text prompts and uploaded images may be processed by these services
• Cloudflare R2: File storage for exported diagrams and uploads

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account data is retained until you request deletion
• BPMN projects and diagrams are retained while your account is active
• Transaction records are retained for 7 years for legal and accounting purposes
• Usage logs are retained for up to 90 days

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Export: Download your BPMN projects and data
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us at admin@bpmn-ai.com.

8. Cookies and Tracking

We use essential cookies and local storage for:

• Authentication session management
• User preferences and settings
• Security and fraud prevention (device fingerprinting)

We do not use third-party advertising cookies or sell your data to advertisers.

9. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers. We take appropriate safeguards to ensure your data remains protected.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.