Last updated: October 15, 2026.
Yongjin Ding (“we”), an individual operating BridgeCast AI, respects your privacy. This Privacy Policy explains how we collect, use, store, and share personal information when you use BridgeCast AI at https://theburningbridges.com (the “service”), and the rights you have.
Read this policy before you use the service. Using the service means you have read it. If we make a material change, we will email the address on your account at least 15 days before it takes effect, and we will change the date above.
1. Who controls the data
The controller of personal information for this service is:
- Name: Yongjin Ding, operating BridgeCast AI
- Website: https://theburningbridges.com
- Privacy email: support@theburningbridges.com
- Support email: support@theburningbridges.com
- Data protection officer: not appointed
- Postal address: sent on request to the privacy email above
2. Information we collect
Information you give us
- Account. Name, email address, and a hashed password if you sign in with email. We do not store the password in readable form.
- Google sign-in. If you choose Google, we receive the name and email address Google shares for that sign-in.
- Photos and prompts. The photo you upload and the prompt that describes the performance. The photo is the first frame of the video.
- Payments. Order amount, currency, credits purchased, and whether the payment succeeded. We do not store your full card number. Card data is handled by the payment processor in section 5.
- Support messages. The email you send us and the address you send it from.
Information collected automatically
- Device and network. IP address, device type, operating system, browser type, and time zone.
- Use of the studio. Pages you open, videos you start, generation status, and session length.
- Logs. Request time, error logs, and the records needed to return credits when a generation fails.
We do not collect your precise location. We do not buy personal information from data brokers.
3. How we use it
| Purpose | Legal basis |
|---|---|
| Sign you in, run the studio, and show your videos | Contract |
| Add credits and process a purchase | Contract |
| Reply to support email | Contract and legitimate interests |
| Send billing, security, and policy notices | Legitimate interests |
| Prevent fraud and abuse | Legitimate interests |
| Fix errors and understand whether the studio works | Legitimate interests |
| Keep accounting, tax, and other legal records | Legal obligation |
We do not send marketing email. A notice about a payment, a security event, or a change to these terms is not marketing, and it is not something you can switch off while the account is open.
We may use aggregated or de-identified data for statistics. That data does not identify you.
4. Cookies
| Type | Use | Can you turn it off? |
|---|---|---|
| Strictly necessary | Keep you signed in and remember the language of the site | No, if you want the studio to work |
| Functional | None beyond the language cookie | Yes, in your browser |
| Analytics | We do not use analytics cookies | Not in use |
| Marketing | We do not use advertising cookies | Not in use |
The sign-in cookie is set by the authentication system. A language cookie remembers whether the site is shown in English. You can block cookies in the browser. Blocking the sign-in cookie signs you out.
5. Who receives it
We do not sell your personal information, including a “sale” as the California Consumer Privacy Act uses that word.
We share information only in these cases:
- Video generation. Your photo and prompt are sent to KIE (https://kie.ai), which runs ByteDance Seedance 2.5 (
bytedance/seedance-2-5) and MiniMax H3 (minimax-h3/reference-to-video). - Payments. Card data is processed only by Waffo Pancake, our PCI-DSS payment processor. It is not stored on our servers. We keep the order amount, the credits purchased, and the payment status.
- Sign-in. If you use Google, Google processes that sign-in under its own policy: https://policies.google.com/privacy.
- Hosting. The site runs on Cloudflare. Cloudflare processes technical logs needed to deliver the site.
- Law. We share information if a law, a court order, or a lawful request requires it, or if we need it to protect the service, our users, or other people.
- A sale of the service. If the service is transferred, we will email you first, and the recipient must keep protecting the information.
- Your consent. We share it for another purpose only with your prior consent.
Finished videos stay in Personal Space until you delete them. Deleting a finished video removes it from your library and does not return credits already spent. Cancelling a video that is still generating returns the 50 credits for that attempt.
6. Security
- The site is served over HTTPS.
- Passwords are stored as a hash, not as readable text.
- Full card numbers are not stored on our servers.
- Access to production account data is limited to the operator of the service.
If a security incident is likely to affect your rights, we will notify you and the relevant authority within 72 hours after we become aware of it, where the law requires that notice. Keep your sign-in details private.
7. How long we keep it
| Data | Retention | Then |
|---|---|---|
| Account details | While the account is open, then 90 days after you ask us to delete it | Delete or anonymize |
| Photos, prompts, and videos | Until you delete them, or 90 days after the account is deleted | Delete |
| Payment and credit records | 7 years, for accounting and tax | Delete or archive |
| Support email | 2 years | Delete |
| Security and error logs | 12 months | Delete |
8. Your rights
Email support@theburningbridges.com to use these rights. We respond within 30 calendar days.
| Right | What it means |
|---|---|
| Know | Ask what we collect and why |
| Access | Ask for a copy of your personal information |
| Correct | Ask us to fix information that is wrong |
| Delete | Ask us to delete information where the law allows |
| Restrict | Ask us to pause processing in the cases the law allows |
| Portability | Ask for your information in a machine-readable format |
| Object | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw consent where processing was based on consent |
If you believe we handled a request badly, you can complain to the data protection authority where you live.
9. Marketing
We do not send promotional email, text messages, or in-app marketing. Payment receipts, security alerts, and policy updates are service messages. They continue while the account is open.
10. International transfers
Our host and providers can process information in the United States and in the other countries where Cloudflare, Google, KIE, ByteDance, MiniMax, and Waffo Pancake operate.
When personal information is transferred from the European Economic Area or the United Kingdom, we use a lawful safeguard. That includes the European Commission’s standard contractual clauses where they are required, or a transfer to a recipient in a country with an adequacy decision.
11. Children
The service is for people who are at least 18 years old. We do not knowingly collect personal information from anyone younger. If you believe a child has given us information, email support@theburningbridges.com and we will delete it.
12. Other sites
The studio may link to a payment page or a sign-in page we do not control. This policy covers information we collect. Read the other party’s policy before you use their page.
13. Changes
A material change is emailed to the address on your account at least 15 days before it takes effect. The date at the top of this page is updated at the same time. Using the service after that date means you accept the updated policy.
14. Contact
- Privacy: support@theburningbridges.com
- Support: support@theburningbridges.com
- Name: Yongjin Ding, operating BridgeCast AI
- Website: https://theburningbridges.com
- Replies: within 2 business days
The rules for credits, refunds, and generated videos are in the Terms of Service.