1. Operator and scope
BurningBridgesAI team, based in the United States, operates Burning Bridges AI at burningbridges-ai.com and is responsible for the personal information we process to operate the service. This notice covers the website, generation service, and messages you send us.
This policy explains our practices. Using the site does not replace consent required by law. The Terms of Service describe eligibility, payments, and content permissions.
2. Information we process
- Account and authentication: email address, name and profile image supplied by Google, Google account identifiers and authorization data, email-login verification records, and session identifiers.
- Inputs and intermediate files: uploaded photos or seven-view sheets, generated reference and continuity images, video segments, and audio, face-tracking, and quality-check files used to finish your video. Uploads may contain embedded metadata; we do not promise to strip all metadata.
- Results and task records: completed videos, task identifiers, status, timestamps, model settings, errors, file links, and allowance usage.
- Transactions: pack, price, currency, PayPal order and capture identifiers, payment/refund status, and allowance expiry. PayPal handles payment credentials; we do not store your card number or PayPal password.
- Technical data: security and request logs that may include IP addresses, browser details, requested pages, and timestamps; website traffic and performance statistics.
- Communications: messages, contact details, and evidence supplied for support, privacy requests, payment disputes, and content complaints.
3. Purposes and legal bases
We use information to sign you in, generate and deliver videos, and manage payments and allowances. It also helps us recover task status, send login and service messages, answer requests, and prevent abuse. Website statistics help us understand and maintain the service.
Where EU or UK data-protection law applies, we need a legal basis for each use of personal information. The relevant bases are:
- Contract: to provide account functions and the paid service you request.
- Legitimate interests: for proportionate security, fraud prevention, support, and service measurement, where your rights do not override those interests.
- Legal obligations: to keep required records and make disclosures required by law.
- Consent: where the law requires your permission for a particular use.
Permission to upload another person’s photo does not replace the legal basis needed to process their information.
We do not sell personal information, use uploads for advertising profiles, or send promotional emails without permission required by law.
4. Photos and AI processing
A selected photo stays in your browser until submission. Submission creates a temporary stored copy so our systems and AI providers can read it. A normal photo may be converted into a seven-view reference sheet; an existing sheet can be used directly. Reference images and intermediate media are then processed to generate and finish your video.
We do not use private uploads or results to train our own AI models, verify identity, or build a face-recognition database. Marketing use requires separate permission. Processing may locate faces or match appearance for generation; the service does not verify who a person is.
Provider limits: Kie.ai and its underlying model providers receive images and intermediate video/audio needed for processing. We have not established a contractual no-training guarantee for every downstream provider and cannot promise their practices match ours. Providers may apply safety checks. Do not upload confidential material or another adult’s likeness without the necessary permissions.
Our personnel may access relevant content to investigate support, infringement, abuse, or legal requests. Such access is limited to that purpose and does not authorize advertising use.
5. Providers and sharing
- Kie.ai and underlying AI model providers: generation processing. Privacy Policy and Terms of Use.
- Cloudflare: R2 stores temporary media and retained completed videos; Email Routing forwards support/privacy messages when configured. Turnstile processes browser and device signals to prevent automated abuse of email and Google sign-in. Privacy Policy.
- Neon: database hosting for accounts, task records, and transactions. Privacy Policy.
- Google: authentication if you choose Google sign-in, and receipt of forwarded support/privacy messages in our Gmail inbox. Privacy Policy.
- Brevo: delivery of email login links and service messages. Privacy Policy.
- PayPal: payments when checkout is available. Privacy Statement.
- Vercel Web Analytics and Speed Insights: traffic and performance measurement where enabled. Plausible may also be enabled for aggregate website statistics. Vercel data practices and Plausible Data Policy.
Hosting infrastructure also processes technical data needed to deliver and secure the website. Support mail is processed by our receiving email provider. We may disclose information where required by law or necessary to investigate fraud, enforce our terms, or protect rights and safety. Relevant records may transfer to a business successor, subject to applicable law and notice requirements.
6. Retention and deletion
Photos and intermediate files
We do not keep a permanent photo library. Our copies of uploads, reference images, continuity images, and intermediate processing files are deleted when the task completes or fails. Uploads not attached to an active task are removed by scheduled cleanup after 24 hours. Inputs shared by active tasks are kept until those tasks no longer need them. Temporary service or storage failures can delay deletion; scheduled cleanup retries failed removals.
Completed videos
Completed videos are retained for three calendar months from completion. At expiry, playback and download through the service stop, and scheduled cleanup deletes our stored copy. Download videos you want to keep. This storage period is separate from a pack’s 365-day allowance validity.
Library removal and erasure requests
“Remove from My Videos” hides a record; it does not immediately erase the stored video, provider copies, or your account. For earlier file deletion or account erasure, email privacy@burningbridges-ai.com with your account email and task IDs. Do not send passwords or payment credentials.
Other records and provider copies
Account records remain while your account is active. Task metadata, transaction records, logs, and correspondence may remain as needed for account administration, billing, disputes, security, or legal obligations. We assess erasure requests against these purposes and explain any applicable exception. There is no single automatic deletion period for all such records.
Our deletion does not automatically erase provider copies, backups, or files others downloaded. Kie currently publishes a 14-day retention period for generated media and two months for logs in its API guide; this does not establish retention for every input or downstream model. We request provider deletion where available and applicable and explain the limits. Lawfully retained backup or legal copies are restricted to those purposes.
8. Your choices and rights
You can browse without an account, choose whether to upload, download results during their storage period, and request account closure.
Depending on applicable law, you may have the right to access, correct, or erase your information, or receive a portable copy. You may also be able to restrict or object to processing, withdraw consent, and complain to a data-protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.
Email privacy@burningbridges-ai.com, including if another user uploaded your likeness. We may request proportionate information to verify your identity and locate data. We respond within applicable legal deadlines and explain lawful restrictions or refusals. We do not penalize you for exercising rights. If an appeal right applies, request review through the same address.
Account erasure does not automatically determine a refund. Billing is handled under the payment terms, without limiting mandatory rights.
9. Security and international processing
We use account authentication, encrypted network connections, and infrastructure administration access controls. No system is completely secure. Media URLs are not protected by account login: anyone who obtains a URL may be able to open it. Treat links as sensitive and do not upload material requiring confidential storage.
We operate in the United States. Our providers may process information there or in other countries, where privacy laws may differ from those where you live.
Where the law requires safeguards for an international transfer, that transfer must use an appropriate legal mechanism. We do not claim that every supplier has signed a particular agreement. Using the site does not provide blanket consent to every international transfer.
10. Children and other people’s photos
Users must be 18 or older, or the age of legal majority where higher. Do not upload images of minors. Obtain photo rights and the necessary adult subject’s permission for AI processing and intended publication. Contact our privacy address if you believe we processed a minor’s image or your likeness without permission.
11. Changes and contact
We update this page’s date when practices change. Material changes are notified through the service or email as appropriate; consent is obtained where required. A revision does not retroactively authorize new uses of private content.
BurningBridgesAI team, United States. Privacy and deletion: privacy@burningbridges-ai.com. General support: support@burningbridges-ai.com.
