Privacy Policy
How Burning Bridges AI collects, uses, and protects your data
Scope and Controller
This Privacy Policy explains how Burning Bridges AI ("Burning Bridges AI", "we", "us", or "our") processes personal data when you use our websites, apps, APIs, billing flows, and related services (collectively, the "Service").
Data controller contact:
- Company: Burning Bridges AI
- Email: support@burningbridgesai.com
Google Sign-In Data
When you choose Google Sign-In, Burning Bridges AI requests the basic openid, email, and profile permissions. We receive your Google account identifier, name, email address, email verification status, and profile picture when available. We use these details to create or recognize your account, sign you in, display your profile, and associate your credits, purchases, generation history, and service communications with your account.
Google Sign-In does not grant us access to your Gmail messages, Google Drive files, Google Photos library, contacts, or calendar. Photos, videos, and prompts used for generation are supplied separately by you; signing in does not import them from Google.
We store account details and authentication records, which may include Google-issued tokens and their expiry information, in our service database. Access is restricted to service operations and authorized personnel, and data is protected in transit. Hosting and database providers process these records on our behalf. Your name or email may also be used by our payment, email, and support providers where needed to provide the services described in this policy. We do not sell Google Sign-In data, use it for targeted advertising, or use it to train AI models.
Google Sign-In data follows the account retention and deletion rules below. You can remove Burning Bridges AI's connection in your Google Account settings to revoke access. Removing the connection does not by itself delete your Burning Bridges AI account or existing records. To request their deletion, contact support@burningbridgesai.com; legally required records and the exceptions described below may be retained.
Information We Collect
We collect data needed to operate, secure, and improve the Service:
- Account data: name, email, sign-in method, and profile settings.
- Billing and payment data: customer ID, plan or credit-package details, payment status, invoice or order IDs, billing country, and tax-related fields where required. Full card data is processed by payment providers and is not stored by us.
- Generation data: prompts, portrait uploads, reference videos, model selections, quality and orientation settings, task metadata, and generated outputs.
- Support data: messages, screenshots, and files you send to support.
- Technical and security data: IP address, device/browser information, timestamps, request logs, rate-limit events, and anti-abuse signals.
- Cookie and similar data: session cookies, locale preferences, analytics identifiers, and other operational cookies described in our Cookie Policy.
How We Use Information
We use personal data to:
- Provide and maintain the Service, including motion transfer generation workflows.
- Process payments, manage subscriptions, track credits, and issue eligible failed-task credit reversals.
- Operate uploads, storage, result delivery, and My Videos history.
- Detect abuse, fraud, security incidents, unauthorized content use, and policy violations.
- Provide customer support and service notices.
- Improve quality, reliability, performance, and provider orchestration.
- Comply with legal obligations and enforce our Terms.
Legal Bases (EEA/UK/CH)
Where applicable, we rely on one or more of the following legal bases:
- Contract performance.
- Legitimate interests, including security, fraud prevention, product operations, and support.
- Consent, where required for optional marketing or certain cookies.
- Legal obligations.
How We Share Information
We do not sell personal information. We share data only as needed with:
- Infrastructure and hosting providers, including storage and CDN vendors.
- Payment processors and billing providers.
- Email, support, and analytics vendors enabled by our configuration.
- AI and model-processing providers needed to run generation requests.
- Legal, compliance, or safety recipients when required by law or reasonably necessary to protect rights and security.
- Corporate transaction parties in the event of a merger, acquisition, financing, or asset sale, with notice where required.
Analytics and your choices
We use Google Analytics 4 to measure traffic and usage, Microsoft Clarity to understand interactions, and Plausible to measure page visits and referral sources. These services follow our regional analytics consent settings. Open Privacy choices in the footer to review or withdraw your choice.
Our analytics events do not include your prompts, uploaded files, generated files, email address, or internal task identifiers. We mask generation workspaces in Clarity. We limit page URLs sent to Google Analytics and Plausible to the page path and permitted campaign parameters; this URL filtering does not apply to Clarity. Burning Bridges AI does not currently enable account-linked low-credit offer measurement or payment-source attribution.
Data Retention
We retain data only for as long as needed for the purposes above:
- Account and billing records are retained while your account is active and for additional periods required by law, tax, accounting, or fraud-prevention needs.
- Generation records, including prompts, portrait uploads, reference videos, and outputs, are retained according to product settings and operational needs.
- Generated result files may be retained for a limited window so you can access them in My Videos, after which they may be deleted or replaced by unavailable links.
- Logs are retained for reliability, auditing, and security needs.
You may request deletion of your account and associated personal data, subject to legal exceptions and required record retention.
Contact support@burningbridgesai.com to request account deletion. The account deletion link in Settings opens an email to our support team. We may need to verify account ownership before processing the request. Payment-provider billing records, support correspondence, security logs, and backups may still be retained for the purposes described above.
International Transfers
Your data may be processed in countries other than your own. Where required, we implement appropriate safeguards for cross-border transfers.
Your Rights and Choices
Depending on your location, you may have rights to:
- Access, correct, or delete personal data.
- Object to or restrict certain processing.
- Request portability of applicable data.
- Withdraw consent where processing is based on consent.
- Appeal or file a complaint with a competent data protection authority.
You can also:
- Manage account details in settings.
- Manage cookies through browser controls.
- Contact us to request deletion or other privacy assistance.
To submit a privacy request, contact support@burningbridgesai.com.
Children
The Service is not directed to children under 13, or any higher minimum age required by local law. If you believe a child provided personal data to us, contact support@burningbridgesai.com so we can investigate and remove the data where appropriate.
Security
We use technical and organizational safeguards such as access controls, encryption in transit, and logging. No system is perfectly secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this Policy from time to time. Material changes will be posted on this page with an updated date.
Contact
For privacy questions or requests:
- Email: support@burningbridgesai.com
- Terms of Service: Terms of Service
- Refund details: Refund Policy
Stripe
Payments are processed by Stripe, which receives the payment and billing information needed to process transactions, manage subscriptions and prevent fraud. We do not store full card numbers. See Stripe’s Privacy Policy.