Privacy Policy — Bulin 47 AI

Version 1.0 · Effective 12 October 2026

Data controller

Bulin 47 AI at bulin47-ai.video is operated by YANG YANG, an individual operator based in China. Privacy questions and requests: support@bulin47-ai.video.

Data we process

• Account details: name, email, verification status, hashed password information for email/password accounts, and Google profile/sign-in details where you choose Google login. We do not receive your Google password.
• Creative content: your uploaded photo, generated video, the fixed reference used for processing, and relevant task and provider-review identifiers and outcomes.
• Purchase records: order reference, payment status, amount, currency, purchased and used video allowances. Checkout may collect an email and billing details through Waffo Pancake; we do not store full card numbers.
• Browser and technical data: a secure browser session identifier, request times, IP/browser information available in infrastructure logs, and errors needed to operate and protect the service.
• Support and safety records: emails, attachments, reports, and the information needed to investigate a request or dispute.

An account is required for purchases, uploads, and generation. Only upload an authorized adult photo; do not submit identity documents or other unnecessary sensitive information.

Purposes and processing grounds

We process account, photo, session, and purchase data to deliver your requested video and perform the purchase agreement. Billing records may also be processed to meet legal obligations. Necessary security, provider safety checks, fraud prevention, and diagnostics serve legitimate operational interests, subject to applicable law. Where processing requires consent, we rely on that consent and explain the consequences of withdrawing it.

We do not sell your personal information, send marketing campaigns, or operate our own model-training program on uploaded content. We do not publish customer uploads or videos as community examples without separate permission.

Cookies and browser storage

Authentication cookies maintain your signed-in session and security. Language preferences and short-lived checkout-status information may use cookies or browser storage. Clearing this data may sign you out or reset preferences; your account purchases remain available after signing in again. Keep passwords and session cookies private.

Providers and international processing

• APIMart and its AI providers receive photos and reference assets for portrait review and Seedance video processing. Provider generation safety checks are enabled; we do not currently run a separate independent frame-by-frame output review.
• Cloudflare hosts the application, D1 records, R2 media, and operational logs. Cloudflare Email Routing forwards messages sent to the support address to the operator’s Gmail inbox.
• Google processes optional Google sign-in and the basic profile details you authorize. Gmail receives and stores forwarded support messages and attachments for support handling.
• Resend sends transactional account-verification and password-reset emails.
• Waffo Pancake, the Merchant of Record, processes payment, tax, and required checkout/billing data under its own policies. Full card details do not pass through our application server.

We share information needed for these functions, lawful requirements, or protecting users and the service. Providers may process data outside your country; applicable privacy and transfer safeguards apply. External providers maintain their own policies and records. Do not upload material you lack authority to share with them.

Storage and retention

Our Cloudflare R2 copies of uploaded photos are scheduled for automatic deletion after 7 days from upload. Our R2 copies of completed videos are scheduled for deletion after 30 days from creation. Lifecycle deletion can take processing time; download completed videos promptly. These periods describe our R2 storage, not a promise about APIMart or other providers’ copies, which follow their policies.

Account, access, and allowance records are retained while needed to honor purchases. D1 billing, transaction, and relevant safety records may be retained longer for accounting, legal duties, fraud prevention, or ongoing disputes. Deleting a photo or video does not delete the payment ledger or expire an unused allowance. Support, infrastructure, and email providers may retain their own operational records under their policies.

Your rights and requests

Depending on applicable law, you may request access, correction, export, deletion, restriction or objection, and withdraw consent where we rely on it. You may also complain to the competent privacy authority. Contact support@bulin47-ai.video with the relevant order or task reference; do not send passwords or session cookies.

We verify that you are entitled to the data before releasing or changing it. We normally respond within 30 calendar days and explain any lawful extension or required retention. Non-required information is removed or anonymized when a deletion request is fulfilled. Records that must remain for legal duties or a live dispute are handled separately. Withdrawing consent does not affect earlier lawful processing and may prevent us from completing a requested generation.

Children and security

This service is for people aged 18 or older and accepts adult photos only. We do not knowingly provide the service to children. If a child has supplied personal data, contact support so we can investigate and remove it where appropriate.

We use HTTPS, server-side session checks, and access controls. Anyone who receives a shared file link may be able to view that file; only share content you intend others to receive. No online system guarantees absolute security. Report suspected incidents to support; we investigate and notify where required by applicable law.

Changes and contact

We record material policy changes with an updated effective date and give notice where required. Questions and requests: support@bulin47-ai.video. See also the Terms of Service.