Privacy Policy

Bexio uses artificial intelligence services provided by OpenRouter to analyze workspace images and generate design recommendations. The following terms govern how your data is handled when using AI-powered features:

1. Data Transmission Scope: We clearly distinguish between personal and non-personal data. Only data necessary for AI functionality is transmitted, specifically: workspace photos, design preferences, and layout information required for style identification and improvement suggestions.
2. Third-Party Disclosure: Our AI service provider is OpenRouter. We explicitly disclose this partnership to ensure transparency.
3. User Authorization: Before any data is transmitted to OpenRouter, we display a clear pop-up notice explaining the data purpose, recipient, and processing scope. We only proceed after obtaining your explicit, active consent.
4. Third-Party Safeguards: OpenRouter maintains data protection standards equal to or exceeding our own. OpenRouter processes data only for the agreed-upon purpose on a temporary basis, retains no user data, and destroys all data immediately after functionality completion. OpenRouter does not misuse, resell, or transfer your data to any other parties.
5. No App Storage: Bexio does not store any data transmitted to AI services on any server or database. Data is used only during active feature processing and is destroyed immediately after completion.

We collect and process the following categories of information to provide and improve our services:

1. User-Uploaded Content: Workspace photos, design notes, and transformation records you voluntarily upload. Purpose: To enable AI-powered style identification, layout suggestions, and progress tracking. Collection Method: Active user submission via camera or photo library.
2. System-Authorized Data: Camera access, photo library access, and microphone access (with your permission). Purpose: To capture workspace photos, save progress images, and record voice notes. Collection Method: Permission-based authorization through iOS system prompts.
3. Device Information: Device model, iOS version, app version, and unique device identifiers (non-personal). Purpose: To optimize app performance, diagnose technical issues, and ensure compatibility. Collection Method: Automatic collection during app usage.
4. Usage Data: Feature usage patterns, interaction logs, and crash reports. Purpose: To improve user experience and identify bugs. Collection Method: Passive collection via analytics tools.
5. Account Information: Email address and password (if you create an account). Purpose: To manage your account and enable cross-device synchronization. Collection Method: Active user submission during registration.

We are committed to protecting your privacy and limiting data sharing to only what is necessary:

1. Limited Sharing: We only share your data with OpenRouter for AI processing functionality. No other third parties receive your personal information.
2. Temporary Processing: Any data shared with OpenRouter is processed on a strictly temporary basis. OpenRouter retains no user data and destroys all data immediately after functionality completion.
3. Retention Period: Data shared with third parties exists only during the active feature processing period. There is no post-processing storage or archival.
4. Security Standards: All data transmissions to OpenRouter use encrypted connections and adhere to strict security protocols to prevent unauthorized access or data breaches.
5. No Sale or Rental: We absolutely do not sell, rent, trade, or otherwise transfer your personal information to any third party for marketing, advertising, or any other purposes.

You have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete personal data.
• Deletion: You may request deletion of your personal data and uploaded content at any time.
• Export: You may request an export of your data in a commonly used format.
• Withdraw Consent: You may withdraw your consent for data processing at any time by adjusting app permissions or contacting us.
• Account Deletion: You may delete your account and all associated data through the app settings or by contacting us.

To exercise any of these rights, please contact us at Bexio@gmail.com. We will respond to your request within 30 days.

Data Security Measures

We implement comprehensive security measures to protect your data:

• Encryption: All data transmissions use industry-standard TLS/SSL encryption.
• Access Controls: Strict access controls limit data access to authorized personnel only.
• Data Protection: Regular security audits and vulnerability assessments are conducted to maintain data integrity.
• Local Processing: Where possible, data processing occurs locally on your device to minimize transmission risks.

Children's Privacy

Bexio is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at Bexio@gmail.com, and we will promptly delete the data.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements.

• Update Method: Changes will be posted on this page with an updated effective date.
• Effective Time: Updates take effect immediately upon posting unless otherwise stated.
• User Notification: For material changes that significantly affect your rights or data processing, we will provide in-app notifications and prominent alerts to ensure you are aware of the updates.
• Continued Use: Your continued use of Bexio after any changes constitutes acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy or our data practices, please contact us at Bexio@gmail.com.