BULIN47 · Help
Bulin 47 AI — Privacy
Updated: 10 October 2026
Photos, lyrics and drafts
Choosing a photo and saving a draft are local operations. Only an explicitly enabled upload or generation action sends content to the server and, where applicable, the provider identified for that task. Draft content is not sent to analytics. Other people using the same browser profile can access local drafts.
Accounts and email
Google provides an identifier, name, email and verification status. Email sign-in stores a password hash, never a plaintext password. Sessions and credentials belong to Bulin47’s database. Mail links are encrypted in the outbox and cleared after completion or expiry. Cloudflare processes delivery.
Account visits and security
We retain the first and latest account visit: IP address, approximate country, region or city, timezone, network or ASN and browser information supplied through Cloudflare when available. These records serve security and diagnostics, are available only to administrators and are deleted with the account. Network location is not a verified GPS location.
Visit attribution
Only after you allow analytics do we retain first and latest attribution: accepted UTM, via and ref campaign values, referrer origin and public landing path, without a full query or fragment. Browser storage lasts at most 90 days and is cleared when you withdraw consent. Attribution may be linked to your account when you sign in and is deleted with the account. Advertising click identifiers stay private within Bulin47.
Analytics and payment
Google Analytics and Plausible activate only after you allow analytics. You can decline or withdraw your choice. Google Analytics receives public pages, enumerated actions and only predefined source and medium categories; Plausible receives public pages and the referrer origin. We do not send photos, lyrics, email, names, private IDs, account IP or location records, full queries or fragments. Campaign names and other free-form labels, referral markers and click identifiers stay within Bulin47. Enabled payments are processed by Stripe; full card details are not stored by us.
Retention, sharing and deletion
Server files have expiry dates and cleanup jobs; local drafts must be deleted in the browser. Sharing is optional: anyone with an active link can view the video, and you can revoke it. Request account deletion in your account and cancel subscriptions first. Pending tasks or payments may delay deletion. Necessary financial records and minimal anti-abuse hashes remain; temporary signals and attempts are periodically purged.
Free trial eligibility
To enforce trial eligibility, a necessary security cookie stores only a signed trial eligibility flag and expiry for up to 30 days, without the full referring URL or an anonymous visitor ID. After sign-in, the account eligibility record remains until account deletion, independently of optional analytics.
Trial and checkout steps
If you allow analytics and are signed in, Bulin47 records limited trial, verification, generation and checkout-loading steps and statuses linked to your account for up to 30 days. These records stay private within Bulin47: they contain no photos, lyrics, card details or verification tokens and are not sent to Google Analytics or Plausible. You can withdraw permission in analytics preferences; these records are removed when the withdrawal is synchronized and when your account is deleted. A browser completion signal does not replace a verified payment record.