Privacy Policy

Overview

This Privacy Policy explains how Bulin 47 AI Video ("we," "us," or the "Service") collects, uses, shares, and retains information when you visit the website, create an account, or use the Service.

The Service generates a short vertical freestyle clip from one authorised photo of one adult. The generation provider receives the photo and a motion reference derived from the supplied template to guide a similar performance and scene. The Service restores the template audio on delivery. The generated appearance, motion, scenery and people in the background can vary.

Your uploaded photo and the generated clip are private customer content. We do not publish them in a public gallery, sell them, or use them to train an AI model operated by us. The public site does not display generated sample videos or customer work.

The creator and pricing page show current availability. This Policy describes the data processing involved when you use the available features.

You can pay, generate and download without creating an account or logging in. We create an internal guest ownership identifier and a revocable signed access key so single-video orders and private files remain linked to the same guest. This is separate from Stripe’s billing email; we do not automatically merge a guest purchase into an account with a matching email.

An essential HttpOnly, same-site cookie keeps guest access on this browser for up to 30 days. Save the private recovery link shown before checkout to restore access on another device or after clearing cookies. Its key is in the URL fragment, not a server query parameter. Anyone with the link can access the guest’s orders and videos; keep it confidential. The link is not emailed automatically, and losing both the link and cookie may prevent recovery. Recovery does not extend the 7-day video download window. The link has no scheduled expiry while its ownership record and signing key remain valid; revoked access is refused. Contact support about suspected disclosure, revocation or deletion.

Information We Process

Account and authentication data

We process your name, email address, profile image, email-verification status, linked sign-in provider, and account identifiers. You can sign in with an email and password or with Google. For email-and-password accounts, the authentication system stores a protected password credential, not the password in readable form. Session records may include an IP address, browser or device information, and expiration time.

If you sign in with Google, Google provides the profile and authentication data needed to sign you in. Google's handling of your data is governed by its own privacy terms.

Photos, generation settings, and clips

To create a clip, we process the one photo you upload, its file type and size, image dimensions, generation settings, consent confirmation, task identifiers, task status, provider responses, errors, and the resulting clip. A standard clip is a 10-second, 720p, 9:16 vertical MP4 with an audio track.

You may upload only a photo that you own or are authorised to use, showing one adult who is 18 or older. Do not upload a minor's photo or a photo of a public figure. Supported photos are JPG, PNG, or WebP files up to 8 MB.

Photos and clips are stored in private Cloudflare R2 storage. They are not available through a public listing. A generated clip can be streamed or downloaded only after the Service confirms that the verified account or private guest access owns the corresponding task.

Purchases and credits

Payments are handled by Stripe. The provider collects and processes card data, and we never store your complete card number. We receive and retain information needed to fulfil and reconcile a purchase, such as the selected single-video order or account credit pack, amount, currency, provider customer and checkout identifiers, payment or invoice identifiers, payment status, refund status, and the related order or account credit ledger. An account-pack clip costs 45 credits. A direct single-video order costs USD 9.90 and does not use credits.

Messages and communications

If you contact us, we process your name, email address, message, and the information needed to respond. Newsletter enrolment is currently disabled. If it becomes available, we will request a separate opt-in before adding you; creating an account alone does not subscribe you. Newsletter delivery and contact management would use a third-party provider, with an unsubscribe control in each newsletter email.

Website and device data

Cloudflare processes network and security data to deliver and protect the Service. Worker diagnostics use request categories, status and timing; we do not intentionally log photo contents, private media URLs or request queries. Platform traffic and reliability metrics do not require optional analytics cookies.

With your permission, Google Analytics and self-hosted Plausible at lanyanglab.xyz measure page visits and anonymous conversion events. Plausible receives sanitized page paths, language, allowed campaign fields and conversion properties; it does not use tracking cookies. Microsoft Clarity records interactions and visible public content on selected informational pages using relaxed masking, with sensitive fields masked. It does not record the homepage, creation workbench, authentication, settings, private videos or the admin area. Query strings and hashes are excluded from recorded pages; photos, payment data, email addresses, account IDs and private links are not analytics custom-event data.

Optional analytics scripts load only after you choose Allow analytics. Use Cookie settings to reject or withdraw permission; withdrawal stops optional collection and clears the pending browser events and attribution record. Providers may process IP and browser data under their own privacy policies. See our Cookie Policy.

Video previews

The creator loads a public, supplied sample reference from this site's own media path. It does not load an Instagram frame or contact Instagram to play the sample. When a signed-in account has a delivered result, the preview uses an authenticated private media endpoint. Playback remains subject to ownership and expiration; other visitors cannot access your result. Neither the sample nor your playback URL is supplied to optional analytics as event data.

Acquisition and operations records

With analytics permission, we may store an entry-page path, referrer hostname and allowlisted campaign fields (utm_source, utm_medium, utm_campaign) in your browser for up to 30 days. When signed in, recorded acquisition and usage information can be associated with the account, and a source snapshot can be stored at checkout. Rejecting analytics prevents this optional browser attribution collection.

Verified payment, refund, credit and delivery records remain necessary to fulfil purchases, reconcile accounts and investigate failures. They are separate from optional traffic analytics. Withdrawing browser permission does not erase legally required transaction records or earlier account records; contact us for data-rights requests.

Security verification

When Turnstile is configured, email login, registration, and password-reset forms load Cloudflare's security widget. Cloudflare processes connection and browser signals to detect automated abuse. Our server sends the verification token and, when available, the requesting IP address to Cloudflare Siteverify. We do not send form passwords, photo content, or media links to Siteverify.

How We Use Information

We use information to:

create and secure accounts, verify email addresses, and maintain sessions;
validate photos, create generation tasks, deliver clips, and provide task history;
process purchases, grant or revoke credits, prevent duplicate fulfilment, and handle refunds or payment disputes;
provide support, service messages, and requested communications;
diagnose failures, prevent abuse and fraud, enforce our Terms, and protect users and the Service;
maintain, measure, and improve reliability and usability; and
comply with legal, tax, accounting, and regulatory obligations.

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where requested, and compliance with legal obligations.

AI Processing and Temporary Access

We use Kie.ai as the video-generation provider. Before generation, we upload only the authorised input photo to Kie's temporary file service and verify its download link. Kie documents that uploaded files are automatically deleted after 24 hours. This link does not grant access to your account or other files; anyone holding it may retrieve that temporary copy, so we do not publish it. Kie processes the photo, a motion reference derived from the fixed template and generation instructions to create the requested result. Provider-side processing and temporary copies are subject to Kie's own terms and infrastructure.

The fixed template is public source material, separate from private account photos and results. An estimated-depth version guides the photo person's motion and scene; background people and scenery may be generated in a similar layout. We restore the source audio onto the generated result after generation.

After generation, we copy a qualifying result into our private storage rather than treating the provider's temporary result URL as your permanent clip.

Service Providers and Disclosures

We disclose only the information reasonably needed for a provider to perform its function. Current or conditionally enabled providers include:

Cloudflare for website delivery, Workers, D1 database storage, R2 object storage, caching, and service email;
Kie.ai for AI video generation;
Stripe for checkout, payment processing, fraud controls, invoices, and refunds;
Google when you choose Google sign-in;
Resend for newsletter contact management when newsletters are enabled;
Discord for limited operational purchase notifications when configured;
Plausible, self-hosted at lanyanglab.xyz, for optional cookieless visits and conversion measurement after permission;
Google Analytics for optional traffic and conversion measurement, and Microsoft Clarity for optional replay on selected public information pages, only after analytics permission. Other configured optional measurement providers are subject to the same permission control.

We may also disclose information when required by law, to protect rights and safety, to investigate fraud or abuse, or as part of a merger, financing, acquisition, or sale of assets subject to appropriate protections. We do not sell personal information or share it for cross-context behavioural advertising.

Retention and Deletion

Uploaded photos: unused inputs expire 24 hours after upload. Inputs for active tasks are retained until the task finishes, then expire 24 hours later. Expired inputs are removed by scheduled cleanup.
Generated clips: download access expires 7 days after delivery unless deleted earlier. Expired files are removed by scheduled cleanup.
Drafts in this browser: photo previews and creation choices may be kept in session storage so a login or payment return can restore the draft. They are not uploaded until you start the private upload and quote flow.
Account, credit, task, and payment records: kept for as long as needed to provide the Service, maintain transaction integrity, resolve disputes, prevent fraud, and meet legal, tax, or accounting duties. A task record may remain after its media has been deleted.
Operations records: associated acquisition, usage and delivery records are retained as needed to measure service use and diagnose problems. Financial records follow purchase reconciliation and accounting retention; the 30-day browser window does not delete recorded transaction attribution.
Support and security records: retained for a period appropriate to the request, incident, or legal requirement.

You can delete a finished clip from the Service and can request account deletion from account settings. A running task cannot be deleted until it reaches a final state. Deletion does not require us to erase information that must be retained for legal compliance, payment reconciliation, fraud prevention, dispute resolution, or security, and provider or backup deletion may take additional time.

Deleting an account ends account access; it does not confirm that every stored media copy has been physically erased. Contact us to request media erasure or ask about a deletion request.

Security

We use access controls, private object storage, ownership checks, expiring task access, and transport security intended to protect your information. No online service can guarantee absolute security. Protect your account credentials and contact us promptly if you believe your account has been compromised.

Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of certain personal information, and to withdraw consent where processing relies on consent. You can update basic account information, manage newsletter status, delete finished clips, or delete your account through the available account controls.

To make another privacy request, contact us. We may need to verify your identity before completing a request. You may also have the right to complain to your local data-protection authority.

Adults and Other People's Photos

The generation service is intended for adults and only for photos showing one adult who is 18 or older. Do not upload a minor's photo, and do not upload a photo of a public figure. You must own the photo or be authorised to use it, and you must have permission and all necessary rights to upload the person's photo and use their likeness. If you believe your image has been used without permission, contact us with enough information to investigate.

International Processing

Our providers may process information in countries other than your own. Their processing locations and safeguards depend on the provider and service. For questions about where your data is processed or the safeguards applicable to your use of the Service, contact us.

Changes to This Policy

We may update this Policy as the Service or legal requirements change. We will post the revised version here and change the date above. Material changes may also be communicated through the Service or by email when appropriate.

Contact

For privacy questions or requests, contact us or email support@bulin47ai.dev.

Cookie Consent