Privacy Policy

1. Scope and contact

This Privacy Policy explains how Bulin 47 AI ("we", "our", or "the Service"), operating at bulin47-ai.net, collects, processes, stores, and protects personal information when you browse our website, submit photographs to the Video Studio, generate videos, create an account, purchase credit packs, or contact support.

For privacy-related questions, data access inquiries, or deletion requests, contact us at support@bulin47-ai.net or submit an account support ticket. You do not need an active subscription or account to submit privacy inquiries.

Bulin 47 AI is an independent generative entertainment tool that connects to verified third-party cloud infrastructure and AI compute providers to generate video transformations. This policy describes our data practices; third-party service providers and external platforms also maintain their own privacy policies.

2. Information we collect and process

The categories of information we collect depend on how you interact with Bulin 47 AI:

• Account and authentication credentials: your name or username, email address, profile avatar (if provided via OAuth), authentication tokens, password hashes (for email/password logins), verification timestamps, and session cookies. If you sign in via Google OAuth or another third-party authentication provider, we receive basic identity information permitted by your authorization settings.
• Reference photos and generation inputs: the single reference image you upload to the Video Studio, image metadata, facial alignment coordinates used by visual synthesis models, selected generation parameters (e.g., resolution, duration, aspect ratio), generation task identifiers, timestamp logs, generation status codes, and task credits.
• Payment and billing details: credit pack purchase records, transaction identifiers, payment timestamps, currency and amount paid, invoice records, and credit ledger history (initial credits, additions, deductions, and automatic refunds on failed tasks). All payment card numbers, CVVs, and sensitive billing instruments are processed directly by our payment processor (such as Stripe); we never store raw credit card details on our servers.
• Customer support records: emails, ticket subjects, messages, diagnostic attachments, and resolution notes submitted through our support desk or email.
• Technical, device, and network telemetry: IP address, browser type and version, operating system, referrer URL, device characteristics, request headers, error logs, and session activity collected to maintain service reliability, defend against abuse, and enforce rate limits.

You can browse our public informational pages, read trend guides, and inspect FAQs without uploading photos, creating an account, or purchasing credits.

3. How photos and AI video generation are processed

When you use the Bulin 47 AI Video Studio:

1. Client-side preparation: Your selected reference photo is prepared and optimized in your browser before upload.
2. Secure upload: The photo is uploaded to secure Cloudflare R2 object storage.
3. AI model synthesis: To synthesize the viral Madrid freestyle video matching the reference dembow beat and choreography, we transmit the image URL and scene instructions to our integrated AI video compute providers (principally Kie.ai or Fal.ai). The AI models extract visual facial features to composite and animate your likeness into the viral street freestyle scene.
4. Result generation and delivery: The generated 9:16 vertical MP4 video is rendered, synced with the original dembow freestyle audio, and stored in our Cloudflare R2 bucket. The result is accessible in your account under My Videos and via your unique generation page.

Face data and biometrics notice: Visual facial features extracted by the AI models during synthesis are used strictly to generate your requested video clip. We do not sell, rent, or trade your facial images, biometrics, or personal photographs to third-party advertisers, data brokers, or external AI model training consortiums.

User permissions requirement: You must only upload photographs of yourself or individuals who have given you explicit, informed permission to process their likeness for AI video generation. Do not upload photos of children without verified parental or legal guardian consent, or photos containing confidential documents, intimate imagery, or unauthorized celebrity likenesses.

Third-party AI providers handle files under their respective data protection terms. For details, review Kie.ai's Privacy Policy and fal.ai's Privacy Policy. Please download and archive your completed videos promptly to your personal device.

4. Purposes and legal bases for processing

We process your personal information for the following purposes and under the following legal bases (pursuant to GDPR, UK GDPR, and similar data protection regulations):

• Performance of a contract: Creating and managing user accounts, running AI video generation tasks, recording credit balances, processing one-time credit pack purchases, and restoring credits for failed tasks.
• Legitimate interests: Monitoring system performance, preventing payment fraud and promotional abuse, debugging pipeline failures, maintaining server security, and defending legal claims.
• Compliance with legal obligations: Maintaining accounting, transaction, and tax records, and responding to lawful requests from law enforcement or judicial authorities.
• Consent: Where required by local privacy laws for optional tracking analytics, promotional communications, or specific media permissions. You may withdraw consent at any time without affecting past lawful processing.

5. Third-party services and data sharing

We share information only with trusted third parties strictly necessary to deliver the Service:

• AI compute providers: Kie.ai and Fal.ai receive image inputs and generation parameters to render the video clips and return status callbacks.
• Infrastructure and cloud hosting: Cloudflare (Cloudflare Workers, Cloudflare D1 database, and Cloudflare R2 storage) hosts our application, manages API traffic, and securely stores media assets.
• Payment processing: Stripe (and other supported payment gateways) processes transactions and handles billing data securely under PCI-DSS compliance.
• Authentication and email delivery: Better Auth powers account session authentication; Resend or Cloudflare Email delivers transactional notifications (such as verification emails and receipts).
• Analytics (privacy-focused): When enabled, privacy-respecting analytics tools (such as Plausible or Google Analytics) collect aggregated, pseudonymized traffic patterns without invasive cross-site profiling.

We do not sell your personal data. In the event of a business transfer, merger, or asset reorganization, user records may be transferred to the successor entity subject to this Privacy Policy.

6. Video links, sharing, and public access

Videos generated in the Studio are linked to your account and visible under My Videos. When you share a generation link (e.g., /videos/[id]) or download link with others, anyone possessing that direct URL can view or download the synthesized video clip.

Do not treat shareable URLs as private or encrypted archives. If you publish or share your generated video on social media platforms (such as TikTok, Instagram, YouTube, or X), the processing and distribution of that media become governed by the terms and policies of those platforms.

7. Data retention and deletion

• Account records: Retained as long as your account remains active or as needed to resolve billing disputes and fulfill tax compliance obligations.
• Reference photos and generated media: Stored on Cloudflare R2 storage to allow you to review and download your creations. While purchased credits never expire, we do not provide permanent cloud archival. Third-party AI compute providers may clear temporary worker logs and generation caches after 14 to 30 days. We strongly recommend downloading your MP4 videos immediately upon completion.
• Account deletion requests: You may request complete deletion of your account, uploaded source photos, and generated videos at any time by emailing support@bulin47-ai.net with your account email address. We process deletion requests within 30 days, retaining only minimal records required for legal, tax, or fraud-prevention audits.

8. Cookies and local storage

We use essential cookies and browser storage (sessionStorage and localStorage) strictly required for:

• Maintaining secure authentication sessions and login status.
• Remembering interface preferences (such as light/dark mode and sidebar navigation).
• Caching upload selections temporarily within your browser session so you do not lose progress if you refresh the page.

You can configure your browser to block or alert you about cookies; however, blocking essential authentication cookies will prevent you from signing in and generating videos.

9. Your privacy rights and choices

Depending on your jurisdiction (including the European Economic Area, United Kingdom, California, and other US states), you may hold the following statutory privacy rights:

• Right to access and data portability: Request a copy of the personal information we hold about you.
• Right to rectification: Correct inaccurate or outdated account information.
• Right to erasure ("Right to be forgotten"): Request deletion of your account, photos, and generation history.
• Right to restriction or objection: Restrict or object to our processing of your personal information under certain circumstances.
• Non-discrimination: We will never deny services, charge different prices, or provide a different quality of service for exercising your statutory privacy rights.

To exercise any of these rights, contact support@bulin47-ai.net or file a ticket in Support Tickets. We will verify your identity and respond within the timeframe mandated by applicable law.

10. International data transfers and security

Our service infrastructure is globally distributed using Cloudflare's edge network and servers located in the United States and Europe. By using Bulin 47 AI, you acknowledge that your information may be transferred to, stored, and processed in jurisdictions with data protection standards that may differ from those in your home country.

We implement robust administrative, technical, and physical safeguards—including SSL/TLS encryption in transit, encrypted object storage, access tokens, and role-based permissions—to protect your personal information against unauthorized access, loss, or disclosure.

11. Children's privacy

Bulin 47 AI is not intended for or directed to children under the age of 13 (or under 16 in certain European jurisdictions). We do not knowingly collect personal information or photographs from children. If you become aware that a child has provided us with personal information without parental consent, please contact support@bulin47-ai.net immediately so we can promptly delete the data.

12. Updates to this policy

We may periodically revise this Privacy Policy to reflect technical improvements, legal obligations, or service changes. The date at the top of this document indicates the effective date of the latest version. Material updates will be communicated through site notifications or email where required by law.

For any questions regarding this Privacy Policy, please reach out to support@bulin47-ai.net.