Legal

Privacy Policy

Effective date: August 11, 2026

This Policy explains how Bonframe Technology Limited processes personal data on the website, in the desktop application, and through optional online services.

1. Controller and contact

Bonframe Technology Limited (trading as Bonframe) is the controller for personal data we collect about users of our website and product, except where another party is an independent controller (for example, Polar for card-payment data, or Airwallex for invoice and wire payment data). Our principal place of business is Unit B53, 2F, Kwai Shing Industrial Building Phase 1, 36-40 Tai Lin Pai Road, Kwai Chung, Hong Kong.

Privacy requests: [email protected].

2. Categories of personal data

We may process: account and contact details (such as name and email); login credentials or authentication tokens; license, seat, and device identifiers; support messages; purchase status and order references; website security logs (IP address, user agent, timestamps, requested paths); language/session preferences in browser storage; and limited diagnostic information you choose to provide.

When you pay through Polar, Polar processes payment-card, tax, billing, and transaction information as Merchant of Record / independent controller for that payment data. When you pay by invoice or wire through Airwallex, Airwallex processes the corresponding billing and payment information. Bonframe does not receive complete card numbers.

3. Purposes and legal bases

We use personal data to: create and manage accounts and licenses; deliver purchases and download access; provide customer support; secure the service and prevent fraud; meet legal and tax record-keeping obligations; and improve reliability of the website and product.

Depending on the activity, our legal bases include: performance of a contract (providing the product and license); legitimate interests (security, fraud prevention, product reliability — balanced against your rights); consent (where required, for example certain marketing or non-essential cookies); and legal obligation (tax, accounting, and regulatory requirements).

4. Local media processing

Bonframe is local-first. In desktop local modes, video, audio, transcripts, indexes, OCR results, and previews are processed and stored on your device unless you explicitly enable a feature that requires a remote service.

Activation, model downloads, update checks, support, or an optional cloud model may require network access. The application identifies these choices before use; selected providers process data under their own policies.

5. Sharing, including Merchant of Record

We share information only with service providers needed for hosting, authentication, email, support, security, and optional features you select; with professional advisers; with authorities where required by law; with Polar as Merchant of Record for card sales of the product/service, subscription management and payments, tax compliance, invoicing, refunds, and related buyer support; and with Airwallex for business invoice, purchase-order, and wire payments.

Website live chat is provided by Chatwoot. Messages and contact details you enter in the chat widget are processed by Chatwoot to deliver support.

We do not sell personal information.

6. Retention, security, and international transfers

We retain account, transaction, tax, fraud-prevention, and support records for as long as needed for the stated purpose and applicable legal obligations, then delete or anonymize them. Local project data remains under your control on your device.

We use reasonable technical and organizational safeguards, including encryption in transit where applicable and access controls. No system is completely secure.

Service providers may process information in countries other than your own (including outside Hong Kong, the UK, or the EEA). Where required, we use appropriate safeguards such as contractual protections with providers.

7. Your rights, cookies, and updates

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection, and withdraw consent where processing is consent-based. You may also lodge a complaint with a competent data-protection authority. We aim to respond within one month, or as otherwise required by law. Some transaction or security records must be retained where required by law.

The website may use essential cookies or local storage for security and preferences. If analytics or marketing cookies are introduced, we will disclose them and provide preference controls where required.

We may update this Policy as the product or legal requirements change. Material changes will be posted on this page with a revised effective date.