1. Information We Collect
Depending on how you use the service, we may collect the following categories of information:
- Account and profile information, such as your name, email address, login details, and workspace or organization metadata.
- Customer Content, including prompts, process descriptions, BPMN diagrams, generated outputs, exports, comments, and files or data you choose to submit to the product.
- Technical and usage information, such as IP address, browser type, device information, access times, referring pages, error logs, and activity needed to operate, secure, and improve the service.
- Billing and transaction metadata, if paid plans are offered or purchased in the future. Payment card details are typically handled by payment providers, not stored by us directly.
- Communications you send to us, including support requests, feedback, and other messages.
2. How We Use Information
We use information to provide and operate BPMN Editor Cloud, including to:
- create and manage accounts, sessions, and access controls;
- store, sync, render, export, and share diagrams;
- run AI-assisted features you request;
- maintain security, prevent abuse, and troubleshoot problems;
- communicate with you about the service, support, or important updates; and
- comply with legal obligations and enforce our terms.
We do not use your private Customer Content to train our own public or general-purpose AI models.
3. AI and Google Gemini
When you use AI features, the content needed to fulfill your request may be sent to third-party AI providers. For BPMN Editor Cloud, this can include Google Gemini services when Gemini-powered functionality is enabled.
Important: if you connect or use a Google Gemini API key on Google's Free Tier, Google states that submitted content may be used to improve its products. On Gemini Paid Tier, Google states that submitted content is not used to improve its products. See Google's Gemini API pricing documentation.
You are responsible for making sure you have the rights and permissions needed before submitting personal, confidential, or regulated information to any AI workflow.
4. Sharing and Disclosure
We may share information only as reasonably necessary to run the service or comply with law, including with:
- hosting, storage, security, authentication, support, and infrastructure providers;
- AI providers used to fulfill the features you request;
- payment processors, if and when paid billing is enabled;
- professional advisers or authorities where required by law, regulation, court order, or to protect rights and safety; and
- a buyer or successor in the event of a merger, acquisition, financing, or sale of assets.
If you deliberately create a public sharing link or make content available to collaborators, the content you share may be accessible to the people you authorize or anyone who receives that link.
5. Cookies, Local Storage, and Logs
We and our providers may use cookies, local storage, session storage, or similar technologies for core functionality such as authentication, security, user preferences, and service reliability. We may also keep server and application logs needed to maintain the service and investigate misuse or incidents.
6. Retention and Security
We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the kind of data, your account status, backups, and operational needs.
We use reasonable technical and organizational measures intended to protect data in transit and at rest. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
7. Your Rights and Choices
Depending on your location, you may have rights to access, correct, export, delete, or restrict processing of your personal information, or to object to certain uses. You may also be able to close your account or request deletion of Customer Content, subject to legal and operational limitations.
To exercise privacy rights or ask a question about this policy, contact us at contact@luisbh.com.
8. International Transfers
BPMN Editor Cloud and its service providers may process information in countries other than your own. Where required, we rely on appropriate safeguards or lawful transfer mechanisms.
9. Children's Privacy
The service is not directed to children under 13, and you should not use the service if you are not old enough to do so lawfully in your jurisdiction. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date on this page and, where appropriate, provide additional notice.
11. Contact Us
For privacy requests, legal notices related to this policy, or questions about how BPMN Editor Cloud handles data, contact contact@luisbh.com.