Effective date: October 23, 2026
This Policy explains how Bonframe Technology Limited processes personal data on the website, in the desktop application, and through optional online services.
Bonframe Technology Limited (trading as Bonframe) is the controller for personal data we collect about users of our website and product, except where another party is an independent controller (for example, Polar for card-payment data, or Airwallex for invoice and wire payment data). Our principal place of business is Unit B53, 2F, Kwai Shing Industrial Building Phase 1, 36-40 Tai Lin Pai Road, Kwai Chung, Hong Kong.
Privacy requests: [email protected].
We may process: account and contact details (such as name and email); login credentials or authentication tokens; license, seat, and device identifiers; support messages; purchase status and order references; website security logs (IP address, user agent, timestamps, requested paths); language/session preferences in browser storage; and limited diagnostic information you choose to provide.
When you pay through Polar, Polar processes payment-card, tax, billing, and transaction information as Merchant of Record / independent controller for that payment data. When you pay by invoice or wire through Airwallex, Airwallex processes the corresponding billing and payment information. Bonframe does not receive complete card numbers.
We use personal data to: create and manage accounts and licenses; deliver purchases and download access; provide customer support; secure the service and prevent fraud; meet legal and tax record-keeping obligations; and improve reliability of the website and product.
Depending on the activity, our legal bases include: performance of a contract (providing the product and license); legitimate interests (security, fraud prevention, product reliability — balanced against your rights); consent (where required, for example certain marketing or non-essential cookies); and legal obligation (tax, accounting, and regulatory requirements).
Bonframe is local-first. When you use on-device models, source video and audio, transcripts, reference voice recordings, editing or rewrite instructions, generated dialogue, indexes, OCR results, and previews are processed on your device. Project history, generated media, intermediate files, and local diagnostic records may be stored there. Local processing does not mean that no files or logs are retained.
Faces, voices, and transcripts may contain personal or sensitive information about you or others. You are responsible for having an appropriate basis and any required permissions to process that material. On-device processing alone does not upload this material to Bonframe or give us access to your local projects.
Activation, model downloads, update checks, support, or an optional cloud model may require network access. The application identifies these choices before use; selected providers process data under their own policies.
If you select a cloud or network-hosted model, the prompts, relevant transcript or dialogue text, and any media needed for that feature may be transmitted to the selected service. A model hosted on another machine, including on a private LAN, is not processing solely on your device. Review the destination, feature settings, and provider’s privacy, retention, and training policies before sending data.
We do not collect your on-device project content merely because you use a local model, and we do not use that local content to train shared models. Information you separately send to support or another remote service is processed for the purposes described here or by that service’s applicable policy; this statement is not a guarantee about a third-party provider’s model-training practices.
We share information only with service providers needed for hosting, authentication, email, support, security, and optional features you select; with professional advisers; with authorities where required by law; with Polar as Merchant of Record for card sales of the product/service, subscription management and payments, tax compliance, invoicing, refunds, and related buyer support; and with Airwallex for business invoice, purchase-order, and wire payments.
Website live chat is provided by Chatwoot. Messages and contact details you enter in the chat widget are processed by Chatwoot to deliver support.
Support requests may contain media, transcripts, prompts, or diagnostic files you choose to attach. Share only what is necessary, remove unrelated personal information where possible, and do not send passwords, private keys, or full payment-card details.
We do not sell personal information.
We retain account, transaction, tax, fraud-prevention, and support records for as long as needed for the stated purpose and applicable legal obligations, then delete or anonymize them. Local project data remains under your control on your device.
Local history, caches, intermediate files, exports, and backups can remain on your device until removed through available application controls or your storage tools. Deleting a project does not necessarily remove files exported elsewhere, copies shared with others, operating-system backups, or records held by a remote provider. We cannot remotely erase those copies; contact the relevant provider for its deletion options.
We use reasonable technical and organizational safeguards, including encryption in transit where applicable and access controls. No system is completely secure.
Service providers may process information in countries other than your own (including outside Hong Kong, the UK, or the EEA). Where required, we use appropriate safeguards such as contractual protections with providers.
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection, and withdraw consent where processing is consent-based. You may also lodge a complaint with a competent data-protection authority. We aim to respond within one month, or as otherwise required by law. Some transaction or security records must be retained where required by law.
The website may use essential cookies or local storage for security and preferences. If analytics or marketing cookies are introduced, we will disclose them and provide preference controls where required.
We may update this Policy as the product or legal requirements change. Material changes will be posted on this page with a revised effective date.
The declaration feature stores policy versions, confirmation time, operation scope and internal project/media references locally. It does not require uploading original media, identity documents or face templates. The declaration is not identity verification. You can withdraw declarations in the desktop Terms & declarations panel. Withdrawal stops new operations in that scope; exported files cannot be recalled. Local records remain on the installation until removed with the relevant application data. Purchase-term acceptance is separately retained with checkout identifiers and billing information for transaction, dispute and applicable recordkeeping purposes. Contact [email protected] about access or deletion, subject to legally required retention.