Privacy Policy

BopFrame is operated by the BopFrame operations team. We provide a portrait photo-to-video service at bopframe.example: choose a template, upload your photo and use credits to generate a short AI video. Our contact address for privacy matters is support@bopframe.example.

This policy covers our website, account services, photo uploads, video generation, credit purchases and support. You can read our public pages without signing in. Account features require Google sign-in. Services you visit independently, such as Google or Stripe, also have their own privacy policies.

Account and authentication information: Google account identifier, email address and verification status, name and profile image, together with account timestamps, authorization tokens and session information needed to support sign-in. Session and security records may include your IP address, browser or user agent and device identifiers.

Content and generation records: photos you choose to upload, their file type and size, selected template and settings, generated videos, task identifiers, progress, errors, timestamps and related credit transactions. Photos may contain personal information in their background or file metadata; avoid uploading details you do not want processed.

Purchase and support information: order and payment identifiers, package, amount, currency, payment or refund status, payment-service customer identifiers and billing email, plus messages, attachments and account details you choose to send when asking for help.

Visit and acquisition information: access and diagnostic records, referring website hostname, campaign parameters, first landing page and first-visit time. A new account's acquisition record can be linked to that account and its purchases so we can understand how users find the service.

We request the basic OpenID Connect permissions openid, email and profile. They allow us to identify your Google account, confirm your email and display your name and avatar. We do not request access to Gmail messages, Google Drive files, contacts or your Google Photos library, and we never receive your Google password.

We use Google account data to create and authenticate your BopFrame account, display your profile, associate your videos and credits with you, provide account support and protect against abuse. Your account email may also be supplied to Stripe to associate a checkout with you. Necessary account and authorization records are stored with our hosting provider. Your Google profile, email and authorization tokens are not submitted as video-generation inputs.

We do not sell Google account data, use it for advertising targeting, or use it to train general-purpose AI or machine-learning models. Access by our team is limited to purposes such as account support, security and meeting applicable obligations.

You can remove BopFrame's connection in your Google Account using the link below. Removing this connection can prevent future Google access but does not by itself delete information already held by BopFrame or necessarily end an existing BopFrame session. Sign out and contact us if you also want to close your account or request deletion.

We process information to authenticate users; submit, monitor and deliver video jobs; provide previews and downloads; manage credits, purchases, refunds and disputes; answer support requests; and troubleshoot the service.

We also use limited usage, account and transaction information to measure acquisition, maintain reliability, detect fraud and misuse, enforce service rules and respond to legal requirements. Automated security checks or generation-provider reviews may block a request; contact us if you believe a restriction is incorrect.

Where applicable law requires a legal basis, the basis depends on the activity: providing the service you request, meeting legal obligations, pursuing permitted interests in security and service operation, or your consent where required. If we rely on consent, you can withdraw it for future processing by contacting us; this does not invalidate processing already carried out.

Choosing a photo can save a local draft in your browser so it survives navigation or sign-in. Submitting a generation job uploads your photo to our storage and sends the required image, template references and generation settings to the video provider. The current generation channel uses RayCraft and Seedance models. The channel and its upstream model service process these materials for asset review and generation.

Your uploads and results are not automatically added to our public template showcase. Playback and downloads require the owning account. The provider receives a limited signed link to retrieve generation inputs.

Upload only portrait photos you are entitled to use. Use a single authorized adult photo. Do not upload children, identity documents or other private material. Do not use the service to create sexual content or non-consensual intimate imagery. Generated videos are synthetic and may be inaccurate. Provider-held copies have separate retention arrangements, explained below.

Credit purchases are processed through Stripe Checkout. Stripe receives the payment and billing details you enter and processes them under its own terms and privacy policy. BopFrame does not directly collect or store your full card number or card security code.

We receive and retain information needed to reconcile a payment, grant credits, provide support and handle refunds or disputes. This includes order and customer identifiers, billing email, amount, currency, payment status and payment-event records. Transaction records may need to remain after account closure for accounting, dispute handling or legal obligations.

Cloudflare provides website and API hosting, database and file storage, and network delivery. It processes account and session records, uploaded media, generated videos and technical request information needed to run the service. Google provides sign-in. Stripe processes payments. RayCraft and the upstream Seedance service process the content needed for video review and generation.

Members of the BopFrame operations team may access relevant information when necessary to support you, investigate failures or abuse, administer payments or handle a privacy request. Information you email us is also processed by the email service used for that conversation. We aim to limit each disclosure to the information required for its purpose.

We do not sell your personal information. We may disclose information when required by applicable law, a valid legal request, or where necessary to investigate fraud or protect users and the service. Third-party services may also process certain information under their own policies; links to Google, Cloudflare and Stripe policies appear below.

Photos and raw video: retained for 7 days after a task completes or fails, then removed from BopFrame storage by scheduled cleanup. Tasks still processing are excluded. Batch limits or processing delays can affect the exact deletion time.

Finished videos: retained for 30 days after completion, then removed from storage and made unavailable for download. Download videos you want to keep before they expire. Necessary task status, hashes, account, credit and order records may remain for service operation, accounting, support, disputes or legal obligations.

Support, diagnostic and security records are retained as needed to resolve issues, protect the service or meet applicable obligations. Where information is no longer needed and no retention obligation applies, we delete it or remove its association with you.

Provider copies, browser drafts and downloaded files are separate. Our cleanup does not confirm deletion by the video provider. Provider retention and deletion depend on its rules and available procedures. Contact us for assistance. Removing a file from BopFrame does not delete copies you or others have downloaded or shared.

To request access, correction, a copy of your data, account closure or deletion, email support@bopframe.example, preferably from the address associated with your account. Tell us the requested action and, for particular media or orders, the relevant task or order identifier. Do not send your Google password, full card details or authorization tokens.

Our account-closure process marks the account as closed and ends its server-side sessions. It does not immediately erase every profile or authorization record, photo, video, order or credit entry. Please explicitly request personal-data and media deletion if that is what you want, including help with provider-held copies where relevant.

We may ask for proportionate information to verify that the request concerns your account. We will review the request, explain the outcome and any records that must remain, and respond within deadlines required by applicable law. Necessary retention for legal obligations, payment disputes, fraud prevention or the rights of others may limit a deletion request. We cannot guarantee erasure of copies outside our control.

We use cookies and browser storage to maintain sign-in, remember language or theme preferences, preserve selected templates and carry photo drafts across navigation. Session cookies support authentication. Local storage and IndexedDB can remain until the app replaces or clears the data, or you clear site data in your browser.

We also record first-visit referral and campaign information in browser storage and, for new accounts, associate it with the account to understand acquisition and purchases. This first-party measurement operates separately from Google sign-in and does not send your photos as analytics events.

As of this policy's update, Google Analytics and embedded live-chat tracking are not enabled on the production site. If we introduce additional tracking, we will update the relevant information and provide choices or request consent where required. You can block or clear cookies and site data in your browser; doing so may sign you out, remove local drafts or affect some functions, but does not delete data already stored on our servers.

We use HTTPS for data in transit, authenticated account operations and restricted infrastructure access. Photos and videos are stored in a non-public bucket. Playback and download requests require the owning account. The video provider receives a limited signed link to retrieve the inputs needed for generation.

No online service can guarantee absolute security. Protect your Google account and shared devices. Contact support@bopframe.example if you suspect unauthorized access. We will investigate and provide notices when required by applicable law.

BopFrame uses cloud infrastructure and third-party services that may process information outside your country or region. The processing location can depend on the service and its infrastructure; we do not promise that all account or media data remains in one country.

Where applicable law requires safeguards for an international transfer, those requirements apply to the transfer. Contact us for information about the providers handling your request and any applicable transfer arrangements.

Depending on the law that applies to you, you may have rights to access, correct, delete or obtain a portable copy of personal information, restrict or object to certain processing, withdraw consent, or complain to a data-protection authority. These rights can be subject to conditions and exceptions.

You can choose not to sign in or upload content and continue using public pages. Google connection settings and browser controls offer additional choices described above. To exercise rights concerning information held by BopFrame, contact support@bopframe.example. For information held independently by Google, Stripe or another service, you may also need to use that provider's privacy request process.

This service is for adults. Do not create an account or upload content if you are under 18. Do not upload photos of anyone under 18. If you believe a minor has provided personal information to BopFrame, contact support@bopframe.example. We will investigate and arrange appropriate restrictions and deletion, subject to applicable retention requirements.

We may update this policy as the service, providers or applicable requirements change. The date at the top identifies the latest revision. For material changes affecting how we handle your information, we will provide an appropriate notice through the website or account contact channel, and request consent where required before using information for a new purpose.

Operator: BopFrame operations team. Website: bopframe.example. Privacy and support email: support@bopframe.example.

For an account-specific request, include the email used for BopFrame and a brief description of what you would like us to do. This policy is available publicly without a BopFrame account.