Privacy policy
zhongyao
2026-10-13
This policy explains the website’s current infrastructure and support data handling, and distinguishes the proposed account, payment and generation workflows that are not yet enabled.
Operator and privacy contact
zhongyao, an individual based in China, operates Bulin 47 Generator and is responsible for this website’s data handling. Contact support@bulin47generator.com for privacy, access, correction or deletion requests. The site does not ask you to submit identity documents, card details or API credentials.
Data used and purposes
Hosting and security services receive request and network data needed to serve and protect the website. If enabled and used, account/session information supports sign-in and private access; an uploaded photo and saved request support generation and review; generated video supports delivery; payment references support reconciliation and refunds; limited moderation and security records support safety and appeals. Support email includes the information you choose to send. The account is required to retrieve a private result. Optional analytics, advertising and marketing email are disabled.
Local photo draft and necessary state
Before sign-in, a selected photo is previewed locally. A same-browser IndexedDB draft can keep it through sign-in with a 24-hour access expiry; browser restrictions may prevent recovery. Authentication uses necessary session cookies when enabled. Clearing browser site data removes local state but does not itself delete server-side account, order or private-file records. After you continue through an enabled signed-in workflow, the photo is uploaded to private storage. No public user gallery is enabled.
Current hosting, storage and support services
Vercel hosts the deployed application. Neon provides the site’s independent PostgreSQL database for account, request, payment-reference and review records when those workflows are used. Cloudflare provides DNS, private R2 file storage and support email routing. Support messages are forwarded to the operator’s Tencent QQ Mail mailbox; the private destination address is not published. Private storage does not have a public bucket endpoint. The configured services do not mean that paid generation or customer delivery is currently enabled.
Planned sign-in, payment and generation services
Google is the proposed sign-in service; when enabled, it supplies account information needed for authentication. Waffo Pancake is the selected payment platform and currently holds the merchant application/store information, not live customer payments from this website. Kie using bytedance/seedance-2-5 is the proposed generation processor; generation and live checkout remain disabled. When enabled for a reviewed request, the supplier would receive the photo and generation instructions needed for that request, and the payment platform would process checkout details and return order references. This application does not store raw payment-card data. No unverified provider-side training, retention, certification or commercial-rights guarantee is made.
Sharing and international processing
Data is shared with the described services only as required for the relevant enabled workflow, support handling or a lawful requirement. Cloud services and support providers may process data outside your country, and the operator is based in China. This website does not operate a public gallery or a personal-data sales feature. We do not claim a particular transfer certification, provider contract or compliance approval that has not been verified. Provider-held copies require separate handling under the provider’s actual terms.
Retention and deletion
The configured proposed output-access period is 30 days from the first output archive attempt. Unpaid server photo drafts expire after 24 hours; terminal input photos wait 24 hours before bounded cleanup. Uncertain paid or provider requests retain references until reconciliation. Expired or deleted assets cannot receive fresh customer links; physical deletion can be delayed by storage errors and retried. Account, payment/idempotency, moderation and support records are separate from media; no automatic retention-expiry schedule is currently implemented for those records. We do not promise that every record or provider-held copy is erased after 30 days. Contact support about necessary retention and deletion requests; operational retention rules must be reviewed before sales open.
Review, security and private links
The required launch workflow uses authorized administrator review of inputs and complete video/audio outputs. Decisions retain an asset fingerprint, rule version, administrator and limited reason code. File storage is private and customer link issuance is owner-only. Issued previews and downloads are time-limited bearer links: anyone you share a link with can use it until expiry, and an issued link cannot be instantly recalled. Do not publish those links or share your account credentials. Security controls reduce risk but are not a guarantee against all unauthorized access.
Your privacy requests
Contact support to request access, correction, a copy, restriction or deletion of your data, or to withdraw permission for future processing where applicable. Provide an account email or request reference, not identity documents by default. The operator may need an appropriate ownership check and must distinguish your request from another person’s data. Deletion or withdrawal can prevent future delivery but does not necessarily erase records needed for unresolved orders, security or mandatory legal obligations. No automatic deletion endpoint or response deadline is promised; any applicable statutory requirements remain in force.
Adults only, policy changes and complaints
This service is intended only for adults aged 18 or older. Do not upload children’s photos. Report suspected child content or another privacy concern to support. Updated processing practices will be described on this page and must be reviewed before new services or optional tracking are enabled. You may raise a complaint with an appropriate authority where available; these notices do not remove mandatory privacy rights.