Privacy Policy

Effective 11 October 2026

First-purchase offers

We store a random first-party browser identifier, its first-visit time, account associations, purchase eligibility and bonus records to display recurring offer rounds and deliver one reward per account. We also record offer-button selections, checkout starts and verified payments on our server to check offer delivery. These records are not sent to an advertising or analytics provider. Clearing browser storage can remove the browser association; account purchase and reward records still prevent duplicate rewards.

Controller

Bulin 47 AI is operated by 深圳织流科技有限公司 (China). Privacy requests: support@bulin47ai.fun.

Information used

We store your sign-in email and name, a hashed session identifier, private uploads, generation requests and results, credit usage and minimum payment audit records. Google OAuth credentials remain on the server; Google access tokens are used during sign-in and are not retained as account records.

AI processing and file handling

When you submit a generation, the server sends the prompt and required references to APIMODELS and the selected model provider. APIMODELS reference-file URLs are publicly readable to anyone who obtains the URL and are retained by the provider for up to 30 days. Do not submit sensitive material. We do not expose those reference URLs in the browser API or routine logs.

Completed media is downloaded to private local storage for your account. Browser drafts stay in this browser until a generation is submitted. You can remove drafts and uploads; deleting a creation removes it from your library. Provider retention and processing are subject to its own policy.

PayPal

PayPal receives the selected product, amount, currency, merchant reference and checkout details. We retain order/capture/subscription/sale/refund identifiers, status, consent version, timestamps and credit entitlements. We do not store card numbers, buyer funding details, raw webhook bodies or buyer payment profiles. Prompts, uploaded files and generated content are not included in PayPal purchase descriptions.

OxaPay

For cryptocurrency checkout, OxaPay receives the pack description, amount, currency, invoice reference and payment callback address. It processes the cryptocurrency transaction and payment-page information under its own privacy policy. We retain the invoice reference, confirmed status, consent record and credit entitlement. We do not send your creative uploads, prompts or account email to OxaPay, and we do not retain raw payment notifications or wallet funding details.

Cookies and analytics

An essential HttpOnly cookie maintains sign-in. Browser storage keeps your drafts and optional privacy choices. We measure page views and product actions on our own server, without third-party analytics or advertising trackers. We use a server-secret hash of the network address and browser information that changes each day to estimate daily visitors; raw IP addresses and full browser identifiers are not retained in analytics. Statistics contain page paths, broad referral categories, device categories and allowed action labels, not photos, prompts, full referral URLs or payment parameters. Signed-in activity may be associated with the internal account ID. Browser events are kept for 90 days; minimal verified signup, login, generation and payment counts are retained with business records. Optional event collection is on unless disabled in Privacy choices, and respects Do Not Track and Global Privacy Control. Necessary account, generation and payment records remain available to operate the service.

Retention and requests

Payment audit records may be retained after deletion of private creative content to support reconciliation and legal obligations. Request access, correction or deletion through support@bulin47ai.fun. We do not sell personal information.