Privacy Policy

1. Who we are

Project Bifrost ("we", "us") operates the Project Bifrost After Effects plugin and dashboard. We are the data controller for personal data processed through the Service.

2. What we collect

• Account data: email address, hashed password, account timestamps.
• Subscription data: subscription status, plan, seat count, licence keys, licence expiry.
• Payment data: we do not store card details. Stripe processes payments and stores a customer ID.
• Licence verification logs: hashed licence key, hashed machine ID, IP address, and check result — used to prevent seat abuse.
• Support conversations: tickets and messages you send us.

3. How we use it

• Provide the Service (accounts, licences, downloads, panel updates).
• Process payments and manage subscriptions (contract).
• Fraud and seat-abuse prevention (legitimate interest).
• Send transactional emails: verification, password reset, magic links, support replies (contract).
• Comply with legal obligations.

4. Sub-processors

• Supabase (auth, database, storage) — EU-hosted.
• Stripe (payments) — international.
• Cloudflare (edge hosting).
• Lovable (transactional email delivery).

5. Retention

We keep account data for as long as your account is active. Payment records are retained for 7 years to satisfy accounting law. Licence verification logs are retained for 90 days. Support tickets are retained for 3 years.

6. Your rights

You can access, correct, export, or delete your personal data at any time. Delete requests are actioned within 30 days. See our GDPR page for details, or open a ticket on our Support page.

7. Cookies

We use only strictly necessary cookies to keep you signed in. We do not use advertising, tracking, or analytics cookies.

8. Security

Passwords are hashed. All traffic is served over TLS. Database rows are protected by row-level security. Licence keys are hashed before being logged.

9. Changes to this policy

Material changes will be notified by email at least 14 days before they take effect.