Burger Compress Privacy Policy

Important Notice

Burger Compress (also known as 汉堡压缩, the “Product”) is a local-first image and video conversion and compression tool. By default, your images, videos, thumbnails, file names, local file paths, local job history, and media metadata are processed only on your device. They are not uploaded to Visionular merely because you use an account, template synchronization, or product analytics.

The Product also offers optional online features, including account registration and sign-in, device management, personal-template synchronization, software updates, security, customer support, and limited product analytics after any consent required by applicable law. These online features require us to process the information described below.

Please read this Policy carefully, especially the sections on accounts, analytics, international transfers, children, and your rights. If you do not want online processing, you may use the Product without registering or signing in and may disable optional analytics. Core local media processing will remain available. If information is necessary for a particular online feature, declining to provide it will prevent only that feature from working.

1. Scope and Controller

This Policy applies to the Product's Windows desktop software, the product website at https://burgercompress.visionular.net/, account and device services, personal-template synchronization, software updates, and related customer support.

For the Product and online services distributed directly through the product website, the controller and software licensor is:

• Visionular, Inc. (“Visionular,” “we,” “us,” or “our”)
• 280 2nd Street, Los Altos, CA 94022, USA
• Email: info@visionular.com
• Telephone: +1 (650) 279-7578
• Corporate website: https://visionular.ai/

Visionular's affiliated entity in China, Hangzhou Visionular Information Technology Co., Ltd., may assist with privacy inquiries and rights requests from users in China. Its contact address is 18th Floor, Building D, Paradise Software Park, No. 3 Xidoumen, Xihu District, Hangzhou, Zhejiang, China. You may always contact Visionular directly using the details above.

If you obtain the Product from Microsoft Store or another third-party store, that store processes its own account, purchase, and download data under its own privacy policy. An entity separately identified as the seller on a store listing or order is responsible for the transaction data it actually controls. This Policy continues to apply to the Product and online services controlled by Visionular.

This Policy does not apply to third-party websites, independently supplied system extensions, or other third-party services that you choose to access.

2. Information We Process

2.1 Information Processed Only on Your Device

To perform conversion, compression, preview, queue, output, and history operations that you request, the Product locally reads or generates:

• selected images, videos, and output files;
• file names, source and output paths, thumbnails, and previews;
• media properties such as resolution, duration, frame rate, bitrate, and codec;
• local queue, progress, results, and job history; and
• local preferences, caches, logs, and temporary files.

This content is not sent to Visionular by default. You control it through the Product, your operating system, and any uninstall data-removal option that is offered. Its retention depends on your actions and device settings. If you deliberately send a file to customer support, that copy becomes support information governed by Section 2.7.

2.2 Account and Identity Information

When you register, sign in, reset your password, or update your account, we process:

• email address, display username, internal user ID, account status, and role;
• email-verification state, registration time, most recent sign-in time, and profile-update time;
• a password only long enough to verify it or produce a password hash. The server stores a strong, randomly salted hash, not the plain-text password; and
• registration or reset-code purpose, keyed code hash, issue and expiry time, attempt count, and consumption state. The server does not retain the plain-text verification code.

We use this information to create and maintain accounts, authenticate users, recover or change passwords, prevent abuse, send necessary service messages, and enable signed-in personal-template features. Information necessary to provide an account is processed to perform our contract with you. We obtain consent where applicable law requires it.

2.3 Device and Session Information

To maintain sign-in, enforce the device limit, and protect accounts, we process:

• a client-generated random installation ID and a server device-record ID;
• device display name, operating-system platform, Product version, last-active time, and creation or revocation time;
• session ID, hashes of access and refresh tokens, token expiry, last-used time, and revocation state; and
• minimal security events such as password changes, device removal, and account disablement or restoration.

The Product does not use hardware serial numbers, advertising IDs, or a combination of hardware attributes to create a device fingerprint. At present, one account may keep up to five active signed-in devices. This limit affects only online account and synchronization services, not offline local media processing.

The client retains a renewable session and uses operating-system secure storage where supported to protect local session material. The server stores token hashes rather than plain-text tokens.

2.4 Personal-Template Synchronization

When you sign in and use personal templates, we synchronize:

• template ID, type, name, short description, and display order;
• semantic template settings, modification time, and deletion marker; and
• synchronization time and success or failure state.

Personal templates may reflect Product preferences but do not contain media, thumbnails, file names, paths, local history, or media properties. We process them to save, restore, and synchronize your templates across signed-in devices at your request.

2.5 Optional Product Analytics

After obtaining any consent required by applicable law, we may collect these limited events:

• random event ID, random installation ID, and an internal user ID associated by the server when you are signed in;
• event and receipt time, Product version, operating-system platform, and interface language;
• app launch, account-operation results, template-sync results, and update check/download/install results;
• image or video, conversion or compression, and job started/completed/failed/cancelled categories; and
• the identifier of an official template used.

These events exclude media content, thumbnails, file names, paths, local history, resolution, bitrate, duration, personal-template names or descriptions, and personal-template settings. We use them to measure active clients, understand feature use, identify failure trends, improve reliability, and plan releases.

Analytics is not necessary for core local processing. Before it is enabled, we will request a choice where applicable law requires one. You may disable future analytics in the Product's privacy settings without losing local conversion or compression. Withdrawing consent does not invalidate processing that was lawful before withdrawal.

2.6 Website, Download, Update, and Security Information

When you visit the website, download an installer, check for or download an update, or call an online endpoint, our website, servers, and content-delivery providers may process:

• IP address, request time and URL, response status, network protocol, and browser or client User-Agent;
• the requested Product version or file and download/update success or failure; and
• short-lived request information needed for rate limiting, attack prevention, troubleshooting, and security auditing.

The website currently does not use cross-context behavioral advertising or tracking for advertising profiles. If we later add non-essential cookies or third-party analytics, we will update this Policy and provide choices as required before using them.

2.7 Customer Support and Communications

When you contact us, we process your name or preferred form of address, email, description of the issue, correspondence, and any logs, screenshots, or attachments you choose to provide. Please remove unrelated personal information, media, paths, and account secrets before sending materials. We will not ask for your password, complete session token, or an unnecessary original media file.

Service communications such as verification codes, security alerts, and material terms notices are necessary to provide or protect the service. We send marketing email only after obtaining consent where required and provide a clear, free unsubscribe method.

2.8 Information for Future Paid Features

The current version is free to use. If you later choose to buy a premium feature, subscription, or commercial license, we may process order ID, plan, price, currency, purchase time, subscription and refund state, invoice details, and transaction status returned by a payment service. Microsoft Store or another payment provider will normally process complete card numbers and security codes directly; Visionular does not retain complete payment-card credentials. This processing begins only after paid features are launched and the applicable price, term, and payment rules are shown to you.

3. How We Use Information

We process personal information only for specified, reasonable purposes directly related to the Product, including to:

1. provide, maintain, and secure accounts, sign-in, device management, template synchronization, updates, and support;
2. verify email and identity and respond to recovery, rights, and support requests;
3. diagnose failures, measure reliability, and improve the Product without analyzing your media;
4. detect abuse, attacks, fraud, and unusual sign-ins and operate rate limiting and security audits;
5. fulfill orders, subscriptions, refunds, tax, and financial duties if paid features are enabled;
6. comply with applicable law, regulation, and valid legal process; and
7. send optional marketing or perform another consent-based activity after obtaining consent.

We will not use information for a new incompatible purpose. If a purpose, method, or category materially changes, we will update our notice and obtain new consent when required.

4. Legal Bases

In the People's Republic of China, we process personal information only under a condition permitted by the Personal Information Protection Law, principally your consent, necessity to conclude or perform a contract to which you are a party, necessity to perform a legal obligation, or another condition provided by law.

In the European Economic Area, United Kingdom, and jurisdictions using similar legal bases, we rely as appropriate on performance of a contract, your consent, compliance with law, or our legitimate interests in securing and improving the service where those interests are not overridden by your rights. You may contact us to ask about the basis for a particular activity.

5. Processors, Disclosure, Transfer, and Publication

5.1 Service Providers

We engage carefully selected providers only to the extent necessary to provide the service. Their categories include:

• Singapore server, networking, database backup, and security-operations providers;
• email delivery for verification codes and essential service notifications;
• installer and update hosting, including Alibaba Cloud Object Storage Service in Singapore;
• app store, payment, subscription, tax, and invoicing providers after paid features launch; and
• customer-support tools when you contact us.

Our contracts restrict the purpose, duration, data types, safeguards, and deletion duties of processors, and we oversee their processing. A local open-source or third-party component does not automatically receive personal information merely because it is bundled with the installer.

5.2 Independent Recipients and Required Disclosure

We may provide necessary information to another controller or third party only:

• at your clear direction or with any separate consent required by law;
• to complete a purchase, refund, or subscription that you initiate through a store or payment provider;
• to comply with applicable law or valid legal process, or protect users, the public, Visionular, and its affiliates; or
• as part of a merger, acquisition, restructuring, financing, or asset transfer, provided the recipient remains bound by this Policy or safeguards no less protective and we give any notice required by law.

We obtain separate or written consent before a disclosure where required. We do not publicly disclose personal information without separate consent unless the law provides otherwise.

5.3 No Sale or Behavioral-Advertising Sharing

We do not sell personal information, share it for cross-context behavioral advertising, or use it to apply unreasonable price discrimination to equivalent transactions.

6. Retention

We retain information for no longer than reasonably necessary for its purpose, subject to legal retention, dispute preservation, and genuine security investigations. Our maximum schedules are:

If a statutory retention period has not expired, or immediate deletion from a backup is technically impracticable, we restrict the data to storage, security, and legal-compliance purposes and complete deletion when the period expires or the backup is restored.

7. Storage and International Transfers

Media processing occurs on your device. Online account, device, session, personal-template, and limited analytics data is currently transmitted to and principally stored on production servers in Singapore. Installers and update files are also hosted through Alibaba Cloud OSS in Singapore. Authorized Visionular personnel may access necessary information from operating locations for account support, security response, and system operations.

For personal information transferred from mainland China:

• the overseas recipient is Visionular, Inc., whose name, address, email, and telephone are in Section 1;
• purposes, methods, and categories are limited to the account, synchronization, analytics, security, and support processing in Sections 2 and 3;
• primary storage is in Singapore, and authorized remote access may occur from Visionular's US operations;
• you may exercise access, copy, correction, deletion, consent withdrawal, account closure, and complaint rights directly against Visionular using Section 10;
• where required, we present a separate cross-border notice, obtain separate consent before transfer, conduct a personal-information protection impact assessment, and use an applicable security assessment, standard contract, certification, or other lawful mechanism; and
• if you decline a necessary cross-border transfer, account registration, online device management, and cloud template synchronization may be unavailable, but core local media processing remains available.

For protected EEA, UK, or Swiss data, we use an adequacy decision, Standard Contractual Clauses, the UK international-transfer mechanism, or another legally recognized safeguard where applicable, together with supplementary protections where required.

8. Security

We use administrative and technical safeguards appropriate to risk, including:

• HTTPS/TLS in production;
• strong, randomly salted password hashing and keyed hashes for verification codes and tokens;
• operating-system secure storage for client session material where supported;
• access controls, role separation, and least privilege for databases, production networks, and administration;
• audit records for sensitive administrator actions and input validation, body limits, and rate limits for interfaces;
• backups, restoration testing, vulnerability remediation, dependency updates, and incident response; and
• confidentiality and security duties for relevant personnel and processors.

No system can be absolutely secure. If an incident may harm your rights, we take remedial action and notify you and authorities as required, including available information about the incident, potential effects, our measures, protective steps you can take, and a contact point.

9. Children

The Product is intended for general users and creators and is not directed to children under 14. A user under 14 in China must have a parent or guardian read and agree to this Policy and provide separate parental consent when required. In other jurisdictions, users below the age at which they can independently consent or contract must have guardian authorization.

We do not knowingly request unnecessary information from children or use it for behavioral advertising. If we learn that a child's information was processed without valid guardian consent, we will suspend the affected account feature and delete it or take other protective steps as required. Guardians may contact us under Section 10.

10. Your Rights and Request Procedure

Subject to applicable law, you may:

• know and decide how we process personal information and restrict or object to certain processing;
• access, copy, correct, or complete personal information;
• delete personal templates, remove other signed-in devices, and sign out of the current session;
• withdraw consent to optional analytics or marketing;
• request deletion of information or closure of your account;
• request portability where statutory conditions are met;
• request an explanation of this Policy or a significant solely automated decision; and
• complain to us or a competent privacy or consumer-protection authority.

Use available in-Product account, device, template, and privacy controls first. For a right not yet available in the Product, email info@visionular.com with the subject “Burger Compress Privacy Request” and state the request type, account email, and information necessary to verify identity. Do not email a password or complete session token.

To prevent account takeover, we may verify control of the account email or request other proportionate evidence. We collect only what is necessary for verification. After verification, we respond within the time required by law, ordinarily within 15 business days. If a complex request requires longer, we explain why. If we deny a request, we give a reason and available appeal path. Rights requests are generally free unless repetitive, manifestly unfounded, or chargeable under applicable law.

Account closure ends online account, device, and template services, and related information is deleted or de-identified under Section 6. Closing an account does not automatically remove software or local data from your device. You may continue to use available local guest functions or uninstall and clear the data yourself.

10.1 EEA, UK, and Swiss Users

Where the corresponding law applies, you may also object to processing based on legitimate interests, request restriction, receive data you supplied in a structured and machine-readable format, and complain to your local data-protection authority. You may withdraw consent at any time. You may always object to direct marketing, after which we will stop the affected marketing. We do not currently make solely automated decisions with legal or similarly significant effects.

10.2 California Users

Where the California Consumer Privacy Act (“CCPA,” as amended) applies to Visionular and you, you may request the categories, sources, purposes, recipient categories, and specific pieces of personal information we collect, use, and disclose; request deletion or correction; and exercise rights without discrimination. Categories we may have collected in the preceding 12 months are identifiers (such as email, account ID, and random installation ID), internet or electronic-network activity, Product usage, support communications, and commercial or transaction information only after a paid feature is enabled. Sources are principally you, your device, Service interactions, and transaction platforms. We disclose information only to providers or lawful recipients described in Section 5. We do not sell or share personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information to infer characteristics. We therefore do not currently need a “Do Not Sell or Share” or “Limit Use of Sensitive Personal Information” link. If that practice changes, we will update notice and provide required choices before the change. You may use an authorized agent where law permits.

11. Automated Decisions

We do not currently make solely automated decisions that produce legal or similarly significant effects, and we do not use profiles to determine the Product's price or availability. Rate limits, unusual-sign-in detection, and security blocks may operate automatically. If one incorrectly affects your account, contact us for human review.

12. Third-Party Links and Stores

The website or Product may link to Microsoft Store, GitHub, software stores, system extensions, or other third-party pages. Each third party independently determines its practices. Review its privacy policy when leaving the Product. We do not control a third party merely by providing an ordinary link.

13. Changes to This Policy

We may update this Policy for changes to features, processing, law, or security. We update the date above and retain accessible prior versions. For a material change to purpose, method, category, recipient, transfer, or user rights, we give advance notice through the Product, website, account email, or another prominent channel and obtain renewed consent where required. An update will not retroactively expand the purpose of information already collected.

14. Contact and Complaints

For questions about this Policy, personal-information security, or a rights request, contact:

• Visionular, Inc.
• Email: info@visionular.com
• Telephone: +1 (650) 279-7578
• Address: 280 2nd Street, Los Altos, CA 94022, USA

We would appreciate the opportunity to address your concern first. This does not affect your right to complain to a competent privacy, consumer-protection, or other authority or seek judicial relief.