Privacy Policy

Introduction

Welcome to BJCRUM ("BJCRUM", "we", "us", or "our"). We operate the marketing website at bjcrum.com and the application at app.bjcrum.com (together, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform, services, and products.

By using BJCRUM, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please do not use our Platform.

We are committed to protecting your privacy and handling your data with transparency and care. Visiting the marketing website does not create an app account. The account, billing, and project provisions below apply when you use the app or contact us. Entering a prompt on the website and submitting it sends that prompt to the app in the destination URL so it can be carried through sign-in. Avoid including sensitive information in that prompt.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, purchase a plan, or interact with our Platform, we may collect:

Account information: Your name, email address, and password when you register.
Billing information: Payment details processed securely through Stripe. We do not store your full card number, CVV, or banking credentials directly. Stripe handles all payment data under their own privacy policy.
Profile information: Any additional profile details you choose to add, such as your company name or website.
Communications: Messages you send to us through support channels, email, or in-platform chat.
User content: Prompts, project descriptions, application names, and any content you input into BJCRUM to generate applications.

1.2 Information We Collect Automatically

When you use the app, operational information may be collected to provide the service and diagnose problems:

Usage data: Account activity, credit usage, generation requests, and actions taken within your projects.
Device information: Browser type and version, operating system, screen resolution, and device type.
Log data: IP address, access times, referring URLs, and error logs.
Browser storage: The website stores your chosen light or dark theme locally in your browser. The app uses browser storage for sign-in state and functional features. See our Cookie Policy.

The marketing website does not include advertising pixels or browser analytics scripts. Its hosting provider may process standard request and security logs, including IP addresses and requested URLs, to deliver and protect the website.

1.3 Information From Third Parties

We may receive information about you from:

Authentication providers: If you sign up or log in using Google or another OAuth provider, we receive basic profile information such as your name and email address.
Payment processors: Stripe provides us with transaction status, billing address, and limited payment metadata necessary to manage your subscription.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Operate the Platform

Create and manage your account
Process payments and manage your subscription or credit balance
Generate applications, websites, and tools based on your prompts
Store and manage your projects in BJCRUM Cloud
Enable project sharing, collaboration, and client handoff features
Provide customer support and respond to your inquiries

2.2 To Improve Our Platform

Analyse usage patterns to understand how people use BJCRUM
Identify and fix bugs, errors, and technical issues
Develop new features and improve existing ones
Train and improve our AI systems and generation quality

2.3 To Communicate With You

Send transactional emails including receipts, subscription confirmations, and password resets
Notify you of important changes to our Platform, policies, or terms
Send product updates, feature announcements, and platform news
Send marketing communications where you have opted in to receive them

2.4 To Ensure Safety and Security

Detect, prevent, and respond to fraud, abuse, and security incidents
Enforce our Terms of Service and Acceptable Use Policy
Comply with legal obligations and respond to lawful requests

2.5 Legal Basis for Processing (Where Applicable)

Where data protection laws require a legal basis for processing, we rely on:

Contract: Processing necessary to provide you with our services
Legitimate interests: Improving our Platform, preventing fraud, and communicating relevant product updates
Consent: Where you have explicitly opted in, such as for marketing emails
Legal obligation: Where we are required to process data to comply with applicable law

We do not sell your personal information. We do not share your data with third parties for their own marketing purposes. We share information only in the following circumstances:

3.1 Service Providers

We work with trusted third-party service providers who process data on our behalf to operate the Platform. These include:

Stripe for payment processing and subscription management
BJCRUM Cloud infrastructure providers for database hosting and application deployment
Email service providers for transactional and marketing communications
AI model providers including Anthropic, OpenAI, and Google, who process your prompts to generate application code

All service providers are required to handle your data in accordance with applicable privacy laws and our instructions.

3.2 Business Transfers

If BJCRUM is involved in a merger, acquisition, asset sale, or similar transaction, your information may be transferred as part of that transaction. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

3.3 Legal Requirements

We may disclose your information where we believe in good faith that disclosure is necessary to:

Comply with a legal obligation, court order, or lawful government request
Protect the rights, property, or safety of BJCRUM, our users, or the public
Detect or prevent fraud, security incidents, or technical issues

We may share your information with third parties when you have explicitly given us permission to do so.

4. Your Data and AI Generation

When you input prompts and content into BJCRUM to generate applications, that content is processed by AI models to produce your output. Please be aware of the following:

Do not input sensitive personal information, confidential business data, financial data, health information, or any information you would not want processed by AI systems into your prompts.
Prompts and generation inputs may be used in an aggregated and anonymised form to improve BJCRUM's generation quality and AI systems.
Generated code and application output belongs to you. See our Terms of Service for full details on intellectual property ownership.
If you share a project publicly or enable the public share link feature, that project may be viewable by others. You are responsible for what you make public.

5. Data Retention

We retain your personal information for as long as necessary to:

Maintain your account and provide our services
Comply with our legal obligations
Resolve disputes and enforce our agreements

Specifically:

Account data is retained for the duration of your account and for up to 90 days after account deletion, after which it is permanently deleted.
Project data is retained for the duration of your account. If you delete a project, it is removed from active storage. Backups may retain the data for up to 30 days before permanent deletion.
Billing records are retained for up to 7 years as required for financial and tax compliance.
Support communications are retained for up to 2 years.

6. Data Security

We take the security of your personal information seriously. We implement technical and organisational measures to protect your data including:

Encryption of data in transit using TLS
Encryption of sensitive data at rest
Access controls limiting who within our team can access personal data
Regular security reviews and monitoring
Secure payment processing through Stripe's PCI-DSS compliant infrastructure

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. If you become aware of any security vulnerability or breach, please notify us immediately at fax@bjcrum.com.

7. Cookies

We use browser storage for functional purposes, such as saving your website theme and maintaining app sign-in state. For the differences between the website and the app, and the browser controls available to you, please see our Cookie Policy.

8. Your Rights and Choices

Depending on where you are located, you may have certain rights regarding your personal information:

8.1 Access and Portability

You have the right to request a copy of the personal information we hold about you and to receive it in a portable format.

8.2 Correction

You have the right to request that we correct inaccurate or incomplete personal information.

8.3 Deletion

You have the right to request deletion of your personal information. You can delete your account at any time through your account settings. We will delete your personal data in accordance with our retention policy above.

8.4 Objection and Restriction

You have the right to object to or request restriction of certain types of processing, including processing based on legitimate interests or for direct marketing purposes.

Where we process data based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

8.6 Marketing Opt-Out

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at fax@bjcrum.com.

To exercise any of these rights, contact us at fax@bjcrum.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

9. International Data Transfers

BJCRUM operates globally and your data may be processed in countries other than your own. When we transfer personal data across borders, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

By using our Platform, you acknowledge that your information may be transferred to and processed in countries that may have different data protection laws than your country of residence.

10. Children's Privacy

BJCRUM is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from users under 18. If you believe we have inadvertently collected information from a user under 18, please contact us at fax@bjcrum.com and we will delete that information promptly.

11. Third-Party Links and Services

Our Platform may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use through or alongside BJCRUM.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

Posting the updated policy on our Platform with a new "Last updated" date
Sending you an email notification if the changes are significant

Your continued use of BJCRUM after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us at:

Email: fax@bjcrum.com Website: bjcrum.com

App: app.bjcrum.com

We aim to respond to all privacy-related inquiries within 5 business days.

Questions about this policy?
fax@bjcrum.com