Privacy Policy

JigFlow
Effective Date: February 18, 2026

Hargabyte Software LLC (“we,” “our,” or “us”) operates the JigFlow web application (“JigFlow,” “the Service,” or “our Service”). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

We believe in transparency. This policy is written in plain language — not legalese — so you can understand exactly what happens with your data.

1. What We Do

JigFlow is a browser-based tool that helps laser engraving businesses create product templates and generate laser-ready files. You use our visual editor to design templates, enter customer details (like names and dates), and we generate output files compatible with popular laser software including LightBurn (.lbrn), xTool Creative Space (.xcs), and SVG.

2. Information We Collect

We collect different types of information depending on how you interact with JigFlow:

2.1 Account Information

When you create an account, we collect:

• Email address (used for login and Service communications)
• Business name (optional, for personalizing your workspace)
• Authentication data managed through Clerk (our authentication provider)

2.2 User-Uploaded Content

You may upload files to use with your templates:

• Template files (SVG, .lbrn, .xcs formats)
• Custom fonts (.ttf, .otf files)
• Design assets and graphics

2.3 Customer Order Data

When you use JigFlow to process customer orders, you enter personalization details such as:

• Customer names
• Dates (anniversaries, birthdays, etc.)
• Custom messages or text content
• Order identifiers or reference numbers

Important: This is information about your customers, not about you. We process this data on your behalf to generate the output files you request.

2.4 Generated Output Files

We temporarily store the files you generate (LightBurn .lbrn, xTool .xcs, SVG) so you can download them. See our Data Retention section for specifics.

2.5 Usage and Analytics Data

We collect information about how you use JigFlow:

• Feature usage and interactions
• Template creation patterns
• Generated output statistics (file types, quantities)
• Device and browser information (type, version, operating system)
• IP address (stored briefly for security and rate limiting)
• Error logs and performance data

3. How We Use Your Information

3.1 Providing the Service

• Authenticating your account and keeping you logged in securely
• Rendering the visual template editor
• Processing templates and generating laser-ready output files
• Storing your templates, uploaded fonts, and designs
• Managing your subscription and billing (via Polar)

3.2 Improving JigFlow

• Understanding which features are most valuable
• Diagnosing bugs and technical issues
• Optimizing performance and user experience
• We do not use your customer data or uploaded content for training AI models

3.3 Communications

• Sending service-related emails (account verification, password resets, security alerts)
• Billing notifications and subscription updates
• Product updates and feature announcements (you can opt out of non-essential emails)
• Responding to your support requests

3.4 Security and Fraud Prevention

• Detecting and preventing unauthorized access
• Protecting against abuse and malicious activity
• Complying with legal obligations

4. How We Store Your Data

4.1 Where Your Data Lives

All data is stored in secure cloud infrastructure:

• Supabase (PostgreSQL database): Stores account information, templates, customer order data, uploaded file metadata, and generated output files
• Cloudflare Pages: Hosts the JigFlow application; static assets are distributed globally via Cloudflare's CDN
• Your Browser: Template designs and in-progress work may be stored locally in your browser for performance; we do not access this local data

4.2 Data Security Practices

• All data is encrypted in transit using TLS/SSL
• Database connections are encrypted
• We use industry-standard security practices to protect against unauthorized access
• Access to production systems is limited to authorized personnel

4.3 Data Location

Our infrastructure is hosted primarily in the United States. By using JigFlow, you understand that your data will be transferred to and processed in the United States.

5. Third-Party Services

We rely on trusted third-party providers to operate JigFlow. Here's what each one does:

5.1 Clerk (Authentication)

• What they handle: Login, password management, session security, multi-factor authentication
• Data shared: Email address, authentication tokens, session data
• Clerk's Privacy Policy: https://clerk.com/legal/privacy

5.2 Supabase (Database and Storage)

• What they handle: All data storage, including templates, customer order data, and uploaded files
• Data shared: All user data described in Section 2
• Supabase's Privacy Policy: https://supabase.com/privacy

5.3 Polar (Subscription Billing)

• What they handle: Payment processing, subscription management, invoicing
• Data shared: Email address, subscription tier, billing history
• Note: Polar uses Stripe for payment processing. We do not store your credit card information — this is handled directly by Stripe.
• Polar's Privacy Policy: https://polar.sh/legal/privacy
• Stripe's Privacy Policy: https://stripe.com/privacy

5.4 Cloudflare (Hosting and CDN)

• What they handle: Website hosting, content delivery, DDoS protection, security
• Data shared: IP addresses, browser information (for security and caching)
• Cloudflare's Privacy Policy: https://www.cloudflare.com/privacypolicy/

5.5 Future Integrations: Etsy and Shopify

We plan to add integrations with Etsy and Shopify for order synchronization. When these features launch:

• You will authorize the connection explicitly
• We will only access the data necessary to sync orders (customer names, order details)
• Separate privacy terms may apply for these integrations
• We will update this Privacy Policy before launch

6. Cookies and Tracking

6.1 Essential Cookies

These are required for JigFlow to function:

• Authentication session tokens (managed by Clerk)
• Security tokens for preventing CSRF attacks

6.2 Analytics

We may use privacy-focused analytics to understand how JigFlow is used:

• We do not use third-party advertising trackers
• We do not sell data to advertisers or data brokers
• Any analytics we use are designed to respect your privacy

6.3 Your Choices

• You can disable non-essential cookies in your browser settings
• Using JigFlow in private/incognito mode will limit some functionality but core features will work

7. How We Share Your Data

7.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or your customer data to third parties.

7.2 Limited Sharing

We only share data with third parties when:

• Required to provide the Service (see Section 5: Third-Party Services)
• You explicitly authorize it (such as future Etsy/Shopify integrations)
• Required by law, legal process, or government request
• Necessary to protect our rights, property, or safety, or the rights, property, or safety of others
• In connection with a merger, acquisition, or sale of all or a portion of our assets (you will be notified via email and/or a prominent notice on our website)

7.3 Aggregated Data

We may use aggregated, anonymized data (like “50% of users use the SVG export feature”) for analytics and marketing. This data cannot identify you or your customers.

8. Your Rights and Choices

8.1 Access Your Data

You can access your account information and template data at any time by logging into JigFlow.

8.2 Update Your Data

You can update your account information through your account settings. If you need to change your email address, contact us at hello@jigflow.com.

8.3 Delete Your Data

You can request deletion of your account and associated data by contacting hello@jigflow.com. Upon account deletion:

• Your account information, templates, uploaded fonts, and generated files will be permanently removed
• Deletion is typically processed within 30 days
• Some data may be retained in backups for up to 90 days before being purged
• We may retain certain data as required by law

8.4 Export Your Data

You can download your templates and generated files directly through JigFlow at any time. If you need a full data export, contact hello@jigflow.com.

8.5 Opt Out of Communications

You can opt out of non-essential communications at any time by clicking the “unsubscribe” link in any marketing email, or by contacting us at hello@jigflow.com. You cannot opt out of transactional emails related to your account (security alerts, billing confirmations).

9. Data Retention

After account deletion, we may retain anonymized, aggregated data indefinitely for analytics purposes.

10. Children's Privacy

JigFlow is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@jigflow.com and we will promptly delete that information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information
• Right to Opt Out: We do not sell personal information, so this right does not apply
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at hello@jigflow.com.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights:

• Legal Basis: We process your data based on contractual necessity (providing the Service), legitimate interest (improving the Service, security), and your consent (marketing communications)
• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interest
• Right to Withdraw Consent: Withdraw consent at any time for consent-based processing

To exercise these rights, contact us at hello@jigflow.com. You also have the right to lodge a complaint with your local data protection authority.

13. International Data Transfers

If you are accessing JigFlow from outside the United States, your data will be transferred to and processed in the United States. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy and applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the “Effective Date” at the top of this page
• For significant changes, we will notify you by email or by placing a prominent notice on our website
• Your continued use of JigFlow after changes are posted constitutes your acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Hargabyte Software LLC
Email: hello@jigflow.com

We aim to respond to all privacy-related inquiries within 30 days.