Privacy policy

1. Information we collect

You may provide chat messages, reference images, drawings, CAD files, email, company name and contact details. Registration also collects your name, email and application time and records a pending, approved or rejected state. Approved members can ask for a one-time sign-in code sent to their registered email; the server stores only a hash of the code, which expires after 10 minutes. Services may produce 3D models, structural drawings, bills of materials, version records and timestamps. Signup/grant and checkout consent records include an account or session reference, checked items, terms and privacy versions, time and an IP hash. Our cloud hosting and network security provider processes connection IP addresses. The human-verification service processes browser and device signals to detect bots, including User-Agent, TLS connection characteristics and verification signals. The project database fields for request limits and consent records store an IP hash instead of the raw IP. The site uses localStorage for language and local project/preview state; the conversation access credential lives only in an HttpOnly cookie set by the server (7-day lifetime, cleared on sign-out). Clearing browser data does not delete server records. Signup sets a signed HttpOnly session cookie necessary for account access, with a default lifetime of 30 days that service configuration may change. The server stores only a hash of the session token, not the token itself. Legacy staff demo tools may set a one-year bjm_acct cookie for display identification, not secure sign-in or payment authorization; anonymous account queries do not set it. We do not use advertising trackers or sell personal information.

Back to contents

2. How information is used

Responding to requests, creating and revising designs, sending necessary service notices and, once enabled, managing accounts and points rely on performance of a contract or steps taken at your request before entering a contract. Preventing fraud, abuse and attacks and keeping necessary security records rely on our legitimate interest in protecting users and service security, balanced against your rights and interests. Legally required accounting records, responses to lawful demands and data-protection duties rely on legal obligations. Other processing that requires consent by law relies on your valid consent, which you may withdraw without affecting the lawfulness of earlier processing.

When email notices are configured, request/conversation excerpts and attachment names and sizes are sent to BjM staff, without the files themselves. Customer new-reply emails are not implemented. Registration review emails go only to the configured owner address verified by the mail service and contain the applicant name, email, application time and review links for the owner to decide personally. An append-only audit records the reviewer, time, decision and source (email link or workbench). Applicant approval emails are disabled until a separate transactional mail provider is connected; the current mail service does not send them to unverified applicant addresses. Points rules support server-side ledger calculations; payments and refunds are not connected. The grant anti-abuse interface accepts opaque device/network signals supplied by a gateway and does not itself add browser fingerprint collection. Human-verification signal processing is described in section 1.

Back to contents

3. CAD file and design confidentiality

Uploads and saved engineering artifacts use private cloud file storage through protected staff routes, without public attachment URLs. Customers need both an owner-approved account session and the conversation access credential to read their conversation; a complete customer file-account permission system is not built. Processing may involve authorized BjM staff and the providers in section 5 needed for the service, as well as conversations accessible to you. We cannot guarantee that only you and designated engineers access all information. Engineering files may be downloaded to authorized staff workstations. If a working folder uses cloud synchronization, files may also be copied to the sync service; local processing does not mean that files never pass through cloud services.

BjM manages access on a necessary basis and confidentiality under applicable law and the providers’ contractual/data-processing arrangements; actual protection depends on system settings and applicable arrangements. We will not actively publish or display customer designs or provide them for other customers’ use without prior written consent, except disclosure required by law or processing needed to provide this service. BjM checks rights and consent records before public display. A separate non-disclosure agreement (NDA) may be arranged. This policy is not a guarantee of absolute confidentiality or zero risk.

Back to contents

4. Retention periods

Chats and uploads are kept for 3 years after the last interaction. Account and payment records are kept for the period required by law. These retention rules also apply to backups, emails and provider copies under our management. The current code does not implement a complete automatic retention schedule, expiry deletion or customer self-service account deletion; retention and deletion are managed manually. Real accounts and payments are not enabled. You may request earlier deletion (section 6); we verify identity, process the request and reply with the result.

Back to contents

5. Service providers

We use the following categories of service providers to process data; this policy does not name them individually:

• Cloud hosting and network security (website hosting, human verification, staff authentication). • Database and live chat (conversations, projects and design versions). • AI service providers: in conversations with AI replies on, recent chat text and photos you upload (JPEG, PNG, WebP) are sent to an AI service provider to produce replies and 3D modeling suggestions; when image recognition is enabled, photos are recognized by a second AI service provider and the result is passed on as text. CAD files and other attachments are not sent to AI service providers. • Email delivery (sign-in code emails and staff notices; only the recipient email and the code or notice content are sent). • File storage and sync (private file storage; if an authorized staff member's local working folder uses cloud sync, engineering files are synchronized too).

Payment services are not connected and no payments are processed today.

Your data is stored and processed by our service providers; data protection there may differ from yours. By using this service, you consent to the cross-border transfer of your personal data to those service providers for storage and processing for the purposes described in this policy, subject to applicable requirements of the Personal Data Protection Law (PDPL) of Vietnam. This consent does not replace any additional consent, safeguards or procedures required by applicable law. When data is transferred abroad, we apply the safeguards required by applicable law. We update this policy before adding new service categories.

A list of our processors is available on request by email.

Back to contents

6. Your rights

Under applicable law, you may request access, correction, download or deletion of your information, restrict or object to particular processing, stop notifications and withdraw consent to processing based on consent. Contact email: hello@bjm-furniture-design.com; we reply within 30 days or any shorter period required by applicable law. Requests require manual identity verification, scope assessment and response; a complete self-service data download/deletion portal is not available. You may complain to the relevant data-protection regulator, including the authority in your place of residence, work or the alleged infringement where applicable law permits.

Back to contents

7. Security

The code includes private file routes, staff authentication and server authorization checks. The server stores only a hash of the conversation credential. Transport security for production services relies on HTTPS and deployment settings. Grants require a server-verified human-verification result. No system guarantees absolute security. If a breach affects your information, we will investigate and notify affected people as required by applicable law.

Back to contents

8. Policy changes

Material changes will be announced on the site. Bulk customer email notifications are not connected, so we do not promise automatic email to all registered users. Notification methods will be explained before activation.

Back to contents

9. Contact us

BjM Furniture Design — hello@bjm-furniture-design.com

If the language versions differ, the Traditional Chinese version prevails; mandatory consumer rights under applicable law are not affected.

Back to contents