YOUR DATA
Privacy Policy
Effective October 14, 2026
This policy covers Burning Bridges AI at burningbridgessi.com. Contact the service operator at [email protected] for privacy questions, access requests or deletion requests.
1. Information we process
- Google sign-in: your Google account identifier, verified email and display name, used to associate your account, videos, purchases and remaining generations. We do not request Gmail, Drive or Calendar access.
- Generation: your main portrait and supporting portraits, resolution and format, permission confirmation, task identifiers, status, timestamps, errors and generated videos.
- Payments: product, amount, currency, order and PayPal transaction references, status and allowance records. PayPal handles payment credentials; we do not receive or store your full card number or PayPal password.
- Support: information you email us, including your account email, order reference and problem description.
- Technical information: hosting and service providers may process IP addresses, browser information, request timestamps and errors for delivery, security, troubleshooting and abuse prevention.
2. How we use information
We use information to sign you in, submit and track generation, deliver downloads, confirm payments, maintain allowances, investigate failures, respond to requests, prevent misuse and meet applicable obligations. Faces are visual references for the requested video; our application does not create a facial recognition database to identify visitors.
We do not sell customer portraits or videos, publish them as examples without separate permission, or use them to train our own AI models. This statement does not replace upstream model providers' independent policies.
3. Providers and sharing
- Cloudflare: hosts our site and server functions, stores account and task records in D1, and stores our media copies in private R2 storage.
- Google: provides authentication. See Google's Privacy Policy.
- PayPal: processes checkout and payment notifications. See PayPal's Privacy Statement; the version for your country may differ.
- reAPI and its upstream model service: receive portraits and generation instructions to render the video. Our server supplies temporary signed input links. reAPI's published policy describes request metadata retention and mirrored outputs retained for 30 days, accessible to anyone possessing their output URL. Deleting a video here does not automatically delete upstream copies. See reAPI's Privacy Policy.
Providers may process data outside your country. We may disclose information when required by law or needed to investigate abuse or protect people's rights. Contact us before uploading if you need further information about provider processing or international transfers.
4. Retention and deletion
| Information | Retention and controls |
|---|---|
| Uploaded portraits | Expire 24 hours after upload; expired files stop being available through our media endpoints and are removed by scheduled cleanup. |
| Generated video files | Expire 7 days after successful generation. Download access ends at expiry. Use Delete in My Videos to remove our copy earlier. |
| Account, task and payment records | Media expiry does not remove these records. We retain them to operate accounts, reconcile purchases and failures, prevent abuse and meet applicable obligations. We currently have no automatic fixed deletion period for these records. Request account deletion by email; records needed for outstanding payments, disputes or legal obligations may remain. |
| Support messages | Retained to address your request and record its resolution. Ask us to delete messages no longer needed. |
Physical removal runs on a schedule and may be delayed by processing or service interruptions. Delete hides the video and triggers associated media cleanup; it does not cancel an already submitted upstream task. Provider retention and lawful record preservation may continue independently.
5. Cookies and browser storage
We use a secure, HTTP-only sign-in cookie, with sessions valid for up to 30 days, and short-lived security cookies during Google sign-in. Logging out ends the current session; it does not delete your account.
During a sign-in redirect, this browser may store selected photos and settings in IndexedDB. The draft is valid for 30 minutes and removed when retrieved on return. An abandoned draft can remain until read or until you clear site data. The photos are not sent to Google as part of sign-in. Checkout uses session storage to avoid duplicate orders.
Our application does not currently install advertising trackers or marketing analytics cookies. Hosting, authentication and payment providers may use their own security or checkout technologies.
6. Security
Our stored media uses a private bucket. Account media access is checked on the server; model inputs use temporary signed links. Anyone possessing a valid signed link can access its file while permitted, so do not share private media links. No internet service can promise absolute security; avoid uploading unnecessary sensitive information.
For abuse prevention, we keep short-lived request counters tied to your account or a keyed hash of your network address. Counters expire within an hour and are removed by scheduled cleanup. Operational alerts use task or order references and error categories, without portraits, payment credentials or private media links. Sent alert records are removed after 30 days by scheduled cleanup.
7. Your choices and rights
You can browse without signing in, choose not to upload, download available videos and delete videos in My Videos. Email us from your account address to request access, correction, export or account deletion, or raise a privacy concern. We may verify ownership. Depending on applicable law, you may also have rights to object, restrict processing, withdraw consent or complain to your local data protection authority. We assess requests under applicable law; withdrawal does not undo processing already performed.
8. Age and permission
The service is for adults aged 18 or older. Do not upload anyone under 18. You must have rights to each photo and permission from everyone depicted. Report unauthorized images or images of children using the privacy and abuse instructions.
9. Changes
We publish changes here with a new effective date and provide additional notice where required by law. Changes do not authorize new uses of portraits without any consent required by law.