Privacy Policy

Last updated: October 12, 2026

Independent Fan Tool Disclaimer
Independent fan tool. Not affiliated with Drake, OVO Sound, or their labels. All product names, trademarks, music rights, and brand assets referenced herein are the property of their respective holders and are mentioned solely for descriptive, nominative identification.

1. Introduction and Data Controller

This Privacy Policy explains how Drake Burning Bridges AI ("we", "us", or "our") collects, uses, stores, shares, and protects your personal data when you visit and use our web application at drakeburningbridgesai.app (the "Service").

We are committed to transparent data practices and respect your privacy. For inquiries regarding this policy or our data handling practices, our designated contact is support@drakeburningbridgesai.app.

2. Personal Data We Collect

We collect only the minimum personal data necessary to operate our single-scene AI video recreation service, maintain user accounts, and process transactions:

Special Category Data: We do not request, require, or intentionally collect sensitive personal data (e.g., biometric templates, racial or ethnic origin, political affiliations, religious beliefs, genetic or health records). Please do not submit images containing sensitive documentation or private personal records.

3. How Your Photographs and Videos Are Processed

The Service is designed with a specialized, single-purpose generation pipeline:

1. Client-Side Preparation & Secure Transmission: Your chosen photograph is validated in your browser and transmitted securely over encrypted TLS/HTTPS connections to our cloud storage hosted on Cloudflare.
2. Third-Party AI Video Generation: To transform your photograph into an approximately 18-second video set in the fixed party environment, the image is passed via secure API endpoints to vetted third-party AI video providers (utilizing Seedance 2.5 architecture).
3. Automated Safety Screening: Before rendering begins, the source photograph is screened by automated computer vision filters to detect and block prohibited material (including depictions of minors, sexually explicit content, public figures, and violence). If content is flagged and blocked, processing terminates immediately, and reserved credits are automatically restored to your balance.
4. Final Assembly & Delivery: The AI-synthesized motion sequence is paired with the fixed reference soundtrack into an MP4 container, delivered back to our secure Cloudflare storage, and displayed privately in your account generation history.
5. No AI Model Training: We do not use your uploaded photographs or generated videos to train, fine-tune, or calibrate public foundational machine learning models, nor do our contractual agreements authorize our third-party AI providers to use your media for such training without explicit consent.

4. Third-Party Service Providers (Subprocessors)

We engage trusted third-party service providers who process data strictly under our contractual instructions:

• Cloudflare (Cloudflare, Inc.): Cloud infrastructure, DNS, DDoS protection, edge caching, and object storage (Cloudflare R2).
• Third-Party AI Video Providers: Specialized AI generation infrastructure providers (including APIs powered by Seedance 2.5 technology) for automated video rendering.
• Waffo: Payment processing gateway and checkout services. Payments are processed by our payment provider, Waffo. Payment data is captured directly by Waffo under PCI-DSS compliance standards.
• Authentication & Transactional Email Providers: For secure login authentication via email magic-link sign-in, and critical account service notices.

We do not sell, rent, monetize, or trade your personal data or uploaded media to third-party advertisers or data brokers.

5. Data Retention and Deletion Schedule

We follow strict data minimization and scheduled data purging policies:

[User Uploads Photo] ───────> Deleted from storage within 24 hours
[Generated 18s Video] ─────> Automatically purged after 30 days
[Account Deletion] ─────────> Triggers immediate purge of all active user media
[Accounting Records] ───────> Retained for statutory tax/financial compliance periods

• Uploaded Source Photographs: Source images are temporarily retained only as long as necessary to complete the rendering task and conduct essential safety verification. Source photos are permanently deleted within 24 hours of upload.
• Generated Video Files: Finished MP4 videos remain accessible in your private account history for 30 calendar days, enabling you to preview and download your video. After 30 days, the files are automatically and permanently purged from our storage systems.
• User-Initiated Deletion: You can manually delete any generated video or uploaded asset from your account dashboard at any time prior to the 30-day automated purge.
• Account Termination: Deleting your account from your settings triggers an immediate deletion request for all associated media assets and credentials.
• Transactional Records: Invoices, transaction identifiers, and credit logs are retained for statutory retention windows required under applicable commercial, corporate, and tax regulations.

6. Children's Privacy and Protection (Zero Tolerance)

The Service is strictly restricted to adults aged 18 and older.

• We do not knowingly collect personal information from individuals under the age of 18.
• Uploading images of children, adolescents, or any minor under 18—even if uploaded by a parent, relative, or guardian—is strictly prohibited under our Acceptable Use Policy.
• Any detected or reported image involving a minor will be deleted immediately upon confirmation (within 24 hours maximum), the offending account will be permanently banned with total credit forfeiture, and any instances of Child Sexual Abuse Material (CSAM) or child sexual exploitation will be immediately escalated and reported to the National Center for Missing & Exploited Children (NCMEC) and competent law enforcement agencies.

7. Security Measures

We implement multi-layered administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, alteration, or disclosure:

• Encryption in Transit: All network traffic between your device and our servers is encrypted using modern Transport Layer Security (TLS 1.2/1.3 / HTTPS).
• Secure Storage & Access Control: Media assets in Cloudflare storage are shielded behind non-public, randomized object paths accessible only via temporary, authenticated presigned URLs or authenticated session credentials.
• Credential Protection: Account access uses email magic-link sign-in.
• System Isolation: Access to internal server controls and administrative databases is restricted to authorized personnel under least-privilege principles.

8. Your Data Protection Rights

Depending on your geographic location and residency (including under the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act / CPRA), you may possess specific legal rights regarding your personal information:

• Right of Access: Request confirmation of whether we process your data and receive a copy of your personal data.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to Be Forgotten"): Request the permanent deletion of your personal data, subject to statutory retention obligations.
• Right to Restriction of Processing: Request that we restrict data processing under specific conditions.
• Right to Data Portability: Request transfer of your data in a structured, commonly used, and machine-readable format.
• Right to Object / Withdraw Consent: Object to data processing based on legitimate interests or withdraw consent at any time.

To exercise any of these rights, please submit a written request to support@drakeburningbridgesai.app. We review and respond to verifiable requests within thirty (30) days (or within statutory deadlines prescribed by applicable local law). You also have the right to lodge a complaint with your local supervisory data protection authority.

9. International Data Transfers

Our servers, third-party AI processing providers, and CDN nodes are distributed globally across secure cloud networks. Consequently, your data may be transferred to, stored, and processed in jurisdictions outside of your country of residence, where data protection standards may differ. When transferring data internationally, we implement appropriate transfer safeguards, including standard contractual clauses and strict subprocessor vetting.

Nothing in these terms limits rights you have under applicable consumer protection law.

10. Revisions to This Privacy Policy

We may modify this Privacy Policy from time to time to accommodate product updates, emerging regulatory requirements, or changes in third-party vendor arrangements. The revised version will be published with an updated "Last updated" date. Material changes will be communicated via prominent notifications on the site or via direct email to registered users where appropriate.

11. Privacy Contact and Inquiries

If you have questions, feedback, or privacy-related requests concerning this Privacy Policy, please contact our privacy desk:

• Service: Drake Burning Bridges AI
• Service Website: https://drakeburningbridgesai.app
• Email: support@drakeburningbridgesai.app