WEBSITE PREVIEW · POLICY DRAFT

Privacy notice

Who to contact

Burning Bridges AI is the project brand. The service is operated by Dylan Zou, based in San Francisco, California, USA. Contact: zoumouou@gmail.com.

Information used by the service

When you create or use an account, the service processes your email address and authentication records to provide sign-in, account confirmation and password recovery. If you contact support, we process the information you provide to investigate and respond. Historical test orders, credit transactions, job status and private media may remain in the service; browsing this preview does not create a purchase or generation job. Account sessions use an essential HttpOnly cookie. The backend keeps hashed IP-based rate-limit keys to help prevent abuse; hosting and infrastructure providers may process connection and diagnostic information.

Your photo and generated media

In the current preview, selecting a photo decodes and displays it locally in your browser. This selection does not upload the photo, start a generation or use a credit. The preview does not save selected photos to browser storage; refreshing clears the selection. Purchases and generation are unavailable. If generation is enabled in a future version, submitting a job is designed to upload the portrait to private Supabase storage and send Kie a time-limited image URL and fixed prompt. A separately supplied music track may also be sent as an audio reference when configured; generated audio is removed and the supplied track is added during finishing. The reference video shown on the page is not uploaded to the generation API.

Optional Google sign-in

Where enabled, Continue with Google lets Supabase authenticate your Google account using your email address and basic profile information. This option does not request access to your Gmail messages or contacts. Email and password sign-in remains available. Google has its own privacy terms; review the authorization screen before continuing.

Service providers and access

Supabase supports authentication, application data and private storage. Kie is the planned generation provider, but no new generation is submitted by this preview. Waffo Pancake was used for test checkout; purchases are currently disabled. If checkout becomes available later, payment details will be entered on the payment provider checkout, not collected by this application. Access to existing completed works requires an authenticated owner check before a short-lived link is issued. A person who receives a valid signed link may use it until it expires, so do not share it unintentionally.

Content safety checks

Generation remains unavailable in this preview. Selecting a photo locally does not send it to a content-review provider. The prepared generation workflow checks its prompt through Waffo Prompt Sift and, when provider configuration is verified, sends a resized portrait and sampled video frames to Google Cloud Vision SafeSearch before generation or delivery respectively. The video check samples 15 frames, approximately one per second; it does not inspect every video frame or determine consent, identity or copyright ownership. Restricted operational records contain decisions, category likelihoods, content hashes, policy versions and usage counts rather than additional raw images or prompts. Provider configuration and live validation must be completed before activation. See Google Cloud privacy information.

Retention and requests

Media associated with completed or confirmed-failed jobs is scheduled for automatic cleanup 30 days after the job ends. Expired media links stop working. Cleanup runs hourly while the application server is running and retries after failures; server downtime may delay physical deletion. Active jobs, uncertain submissions, audio-retry jobs, shared files and uploads without an associated finished job are held for review to avoid deleting material still in use. Encrypted recovery backups are retained separately under the backup rotation rules; deletion from active storage does not mean every backup copy disappears immediately. Order, credit and account records have separate retention rules; media cleanup does not automatically delete your account. Contact zoumouou@gmail.com to request access, correction or deletion review; do not email passwords, card numbers or unnecessary identity documents. Requests require verification and may involve provider records or records that must be retained. No automatic deletion deadline is promised in this draft.

Providers have their own processing and retention practices. See Supabase privacy information and Kie service documentation. This draft does not promise that providers never retain inputs or use them for training.

Optional website analytics

With your permission, the website uses Google Analytics to understand visits and basic interactions. Analytics stays off until you accept. You can decline or change your choice using Analytics choices on the home page. We do not send your email address, photos, videos, filenames or confirmation tokens as analytics event data. Google processes browser and connection information for its service. The public website and private preview use separate analytics properties. Test payments are not recorded as public-site revenue.

Service monitoring

Better Stack checks service availability and scheduled-job completion. Alerts contain operational status rather than customer media or payment payloads.

Before public launch

Relevant jurisdictions, retention of account and financial records, handling of unassociated uploads, request procedures and any additional analytics or cookie disclosures must be confirmed. This page describes development behavior and is not a finalized launch policy.