Burning Bridges AI Privacy Policy

This policy describes how Burning Bridges AI (“we”, “us” or “the Service”) handles personal information when you visit burning-bridges-ai.pro, create an account, generate videos or contact support. It also explains the choices available to you. For questions about this policy, email support@burning-bridges-ai.pro.

• Account details: your email address, name, profile image and sign-in records. Google sign-in provides the profile details needed to create your account. Where email and password sign-in is enabled, authentication uses a password hash.
• Creative content: prompts, reference photos and other supported uploads, model choices, generation settings, generated videos and task history. Processing records may include safety-check results and provider responses used to investigate failures.
• Billing records: the product purchased, order and subscription identifiers, amount, currency, payment status, refunds and credit activity. We send your account identifier, email address and selected product to our third-party payment service providers for checkout. Payment credentials are collected by those providers and their payment partners; our application does not store full card numbers or card security codes.
• Technical information: IP address, approximate country, browser or device information, timestamps and request logs used for authentication, security and troubleshooting.
• Support correspondence: the contact details, descriptions, attachments and order or generation references you choose to send us, including content-safety reports and the information needed to investigate them.

We use this information to run your account, process generation requests, display your private history, deliver downloads, manage credits and subscriptions, answer support requests, detect abuse and resolve technical or payment problems.

Your inputs are sent to the AI services needed to perform the requested generation. Depending on the model and its safety requirements, prompts and uploads may also be processed by content moderation services. Do not upload material you lack permission to share, including photographs of other people without appropriate consent.

We do not sell your personal information, including a sale as defined by applicable California privacy law, or use your uploads or generated videos to train our own AI models. Third-party AI services process requests under their own terms and data practices; their retention rules may differ from ours.

Where data-protection law requires a legal basis, our purposes and bases for processing are:

• Accounts, generation, history and downloads: performance of our agreement with you.
• Payments, subscriptions and credits: performance of our agreement; legal obligations for required accounting and transaction records.
• Support and service notices: performance of our agreement and legitimate interests in answering requests and communicating billing, security and policy changes.
• Safety checks, reports and fraud prevention: legitimate interests in protecting users and the Service, and legal obligations where a report or disclosure is required.
• Diagnostics and usage analysis: legitimate interests in reliability and improvement; consent where required for non-essential cookies or tracking.
• Legal requests and compliance: our legal obligations. You may withdraw consent for processing based on consent, without affecting earlier lawful processing.

• Infrastructure services: third-party infrastructure service providers supply hosting and related database, storage and delivery services.
• AI and safety providers: third-party AI service providers, depending on your model and safety checks, receive prompts, reference media and settings needed to process your request. Media can be supplied through temporary access links. Provider responses and safety decisions are stored with task records to deliver results and investigate failures or abuse.
• Authentication and checkout: third-party authentication services support Google sign-in. Third-party payment service providers and their partners identified at checkout process payments, subscriptions and refunds. Card data is handled through their PCI-DSS-compliant payment processing and is not stored on our servers. Review the provider’s privacy notice at checkout for its handling of payment information.
• Analytics: third-party analytics services may receive usage information when enabled, as described below.

Access is limited to what is needed to operate and support the Service. We may also disclose information when required by law, to respond to valid legal requests, or to protect users, people depicted in content and the Service against abuse. We may share information with your specific consent. If a merger, acquisition or transfer of the Service involves personal information, we will notify affected users and require continued protection under applicable law.

Necessary cookies support sign-in and account security. Preference cookies remember interface choices such as the sidebar state. Browser storage can remember your theme and temporarily preserve generation settings during sign-in. You can clear preference storage through your browser settings.

When enabled in production, third-party analytics services help us understand visits and usage. These services may use cookies and process device, referral and interaction information. We also collect site-usage statistics through a separately hosted analytics endpoint. This policy governs our use of those site statistics.

Third-party analytics service providers process information under their own privacy policies. Contact us for details about the services in use, their data practices and available opt-out options.

You can clear or limit cookies and local storage in your browser, or use its tracking controls. Disabling essential cookies can prevent sign-in or other account features from working. Contact us if you need more information about the analytics used on the site.

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, including providing your account, generation history and downloads, complying with legal obligations, resolving disputes and enforcing our agreements. Temporary uploads may be cleared during routine maintenance. The Service is not a permanent archive; download copies of results you want to keep.

You can remove uploaded reference images that are not linked to a generation using the available upload controls. For other content, account deletion or data-access requests, email support@burning-bridges-ai.pro from your account email address. We may need to verify ownership before acting.

Some billing, fraud-prevention or security records may need to be retained for legal obligations or dispute resolution after a deletion request. Copies in provider systems or backups may follow separate retention cycles; we will explain any applicable limits when handling your request.

When information is no longer needed for these purposes, we delete or anonymize it unless a legal obligation requires continued retention. Safety and report records are limited to what is needed to investigate reports, prevent repeated abuse, protect affected people and meet legal requirements.

Depending on your location, you may have rights to access, correct, export or delete personal information, restrict or object to processing, withdraw consent, and complain to your local data-protection authority. Send requests to support@burning-bridges-ai.pro. We handle requests in accordance with applicable law.

You may also ask us to explain the categories, sources, recipients and purposes of your information. We may verify your identity before providing data or acting on a request. Where the GDPR applies, we respond without undue delay and within one month; if a lawful extension is necessary, we explain the reason within that month. Other applicable statutory deadlines apply to requests from other locations. We do not discriminate against you for exercising privacy rights.

Account access checks, private media storage and restricted provider credentials help protect your information. No online service can guarantee complete security. Keep your sign-in credentials secure and report suspected unauthorized access promptly.

We use HTTPS for data in transit and hash passwords where password sign-in is enabled. If a personal-data breach requires notification under the GDPR, we notify the competent authority without undue delay and, where feasible, within 72 hours after becoming aware of it. We notify affected people without undue delay when the breach is likely to create a high risk to their rights, and meet other applicable notification requirements.

If someone used your likeness or uploaded your information without permission, contact us with enough detail to identify the content so we can investigate.

The Service is intended only for adults aged 18 or older who can enter into a binding agreement. Photos of children require permission from a parent or legal guardian and must comply with our Terms of Service. We do not knowingly collect information from children below the applicable minimum age. Contact us if you believe a child has provided personal information improperly so we can investigate and delete it as required.

Hosting, authentication, AI and payment providers may process data outside your country, including in the United States and other locations in their service networks. Destinations depend on the provider and model. Local privacy laws may differ from those in your country.

Transfers subject to the GDPR must use a lawful transfer mechanism, such as an applicable adequacy decision or Standard Contractual Clauses with any necessary supplementary safeguards. Contact support@burning-bridges-ai.pro to ask about destinations and safeguards applicable to your data. Linking to a provider policy does not remove our responsibility for our own processing. Independently operated websites and checkout services have their own privacy notices, which you should review before use.

Billing, account-security and policy notices are service communications. Creating an account or making a purchase does not by itself give consent to optional marketing. If you receive marketing from us, you may ask support@burning-bridges-ai.pro to stop it; withdrawing marketing consent does not stop necessary service communications.

We may revise this policy as the Service changes and will update the date above. We will announce material changes through a site notice or your registered email at least 15 days before they take effect. Where a change requires consent, we will obtain it; continued use alone does not replace that consent. For privacy questions, rights requests, safety reports or support, contact support@burning-bridges-ai.pro or visit our Contact page.