Privacy Policy

Last updated: jfmotionpro@gmail.com — please email any questions.

This policy explains what data JF Motion Studio collects, how we use it, and your choices.

1. What we collect

• Account: email address, WhatsApp number, full name).
• Usage: license heartbeat (IP, app version, render counts, quota). Used for plan enforcement and to show your dashboard stats.
• Payment: bKash transaction ID and payer number that you upload as proof. No card or banking credentials.
• Affiliate: if you visit via a referral link, a 30-day cookie remembers the referring code so the affiliate gets credit. Hashed visitor IDs are kept for click-count statistics.

2. How we use it

• Operate the service — issue licenses, enforce quotas, deliver updates.
• Process payments and approve accounts.
• Email account notifications (signup welcome, email verification, payment status, password resets).
• Aggregate stats (e.g. installed-base by app version) — no individual targeting.

3. We do NOT sell your data

We do not sell, rent, or trade your data to third parties. No advertising trackers.

4. Cookies

We use cookies only for: authentication (your sign-in session), language preference, and affiliate attribution. No analytics or advertising cookies.

5. Third parties

• hCaptcha — bot protection on signup/signin. See hcaptcha.com/privacy.
• bKash — payment confirmation is manual; no data is sent to bKash by our server.
• SMTP provider — for sending transactional emails to you.
• AI providers (OpenAI / Azure) — if you use the managed AI script-writer, your prompts are sent to the provider. You can use your own API key in Settings to bypass this.

6. Data retention

Account and license data are kept while your account is active. Payment records are retained for tax/audit purposes (5 years). Affiliate click rows are retained as aggregate counts.

7. Your rights

You can request deletion of your account and personal data by emailing jfmotionpro@gmail.com. We will remove identifying information within 30 days, except payment records required by law.

8. Security

Passwords are bcrypt-hashed. Refresh tokens are stored as SHA-256 hashes. Transport is HTTPS-only. Database is hosted on a secured VPS.

9. Children

The service is not intended for users under 18. We do not knowingly collect data from minors.

10. Changes

We may update this policy; the "last updated" date will change. Material changes will be emailed to active users.

11. Contact

Email jfmotionpro@gmail.com for any privacy question or deletion request.