Privacy Policy
Guangzhou Jianyun Information Technology Co., Ltd. ("we", "us") operates the PiP Expert Chrome extension and this website. We are the data controller responsible for the personal data described below. This policy explains what data we handle, why, how long we keep it, and the choices and rights you have.
1. Data processed in your browser
The extension processes video inside your browser. We do not receive your browsing history, the pages you visit, or the content of the videos you watch. Extension settings and licence state are stored in Chrome's local storage on your own device and are not transmitted to us.
2. Licence data we store
To deliver and maintain the licence you purchased, we store your order email address, your licence key, your plan, the subscription status reported by our payment provider, and a limited device identifier. That identifier is a random value generated by the extension, together with the browser name, the operating system and the time of the last check-in. We use it only to enforce your plan's device limit and to let you remove devices yourself. It is not used to track you across websites and is not linked to your browsing activity.
3. Verification codes
When you use the Manage devices page, we email you a one-time 6-digit code. We store only a salted hash of that code together with its expiry, never the code itself. Delivery is handled by Resend, our email delivery provider, which processes the recipient address on our behalf.
4. Payments
Payments are processed by Dodo Payments, our merchant of record and payment provider. Your card details are entered on the provider's secure checkout and never reach our servers. The provider shares your billing details, transaction status and the email address used at checkout with us so that we can issue and maintain your licence. The provider handles your payment data under its own privacy policy as an independent controller.
5. What we do not collect
- Browsing history or page content
- Video content, page URLs or watch history
- Card numbers or any full payment credential
- Precise location or device contacts
6. Why we process your data, and our legal bases
Where the EU or UK GDPR applies, we rely on the following legal bases:
- Performance of a contract — to issue, activate, verify and maintain your licence, and to enforce your plan's device limit.
- Legitimate interests — to prevent fraud and licence abuse, to keep the Service secure, and to respond to support requests.
- Legal obligation — to keep records where tax or accounting law requires it, and to handle chargebacks and disputes.
- Consent — where we ask for it for a specific purpose; you can withdraw it at any time.
7. Sharing and service providers
We do not sell your personal data. We share it only with service providers that help us run the Service, and only as far as needed:
- Dodo Payments — payment processing and merchant-of-record services.
- Resend — delivery of verification and transactional emails.
- Cloud hosting providers — running our website, API and database.
We may also disclose data where the law requires it, or to protect our rights or the safety of others.
8. International transfers
Our service providers may process your data in countries other than your own, including outside the EEA and the UK. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.
9. Cookies and local storage
This website uses only what it needs to work: strictly necessary cookies and browser local storage for things such as your language choice and your management session. We do not use advertising or cross-site tracking cookies. Your browser settings let you clear or block local storage, though some parts of the Service may then not work.
10. Retention and deletion
Licence and device records are kept while your licence is active and for a reasonable period afterwards, so that we can handle refunds, disputes, chargebacks and support requests and meet our legal obligations. After that we delete or anonymise them. You can ask us to delete your data at any time by writing to support@jianlequ.com. Deleting a record does not affect any refund obligations, but it does prevent us from re-issuing a licence to you.
11. Your rights
Depending on where you live, you may have the right to access, correct, export or erase your personal data, to restrict or object to processing, and to withdraw consent. If you are in the EU or UK, you also have the right to lodge a complaint with your local supervisory authority. If you are a California resident, you have the right to know, delete and correct your personal information, and we do not sell or share it as those terms are defined by the CCPA. To exercise any of these rights, write to us; we will respond within 30 days and will not charge you or treat you differently for making a request.
12. Security
Licence signatures use asymmetric keys: the private key never leaves our servers, and the extension only contains the public key. Management sessions are short-lived and kept only in the browser tab that created them. We use encryption in transit and restrict access to personal data to those who need it. No system is completely secure, but we work to protect your data and to notify you of any breach that affects you where the law requires it.
13. Children
The Service is a general-purpose utility and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Changes to this policy
If we make a material change to this policy, we will update the date above and, where appropriate, notify you by email or in the extension before the change takes effect.
15. Contact
Questions about this policy, or a request about your data? Write to us at support@jianlequ.com.