Baiuv Privacy Policy

Introduction

This Privacy Policy explains how Baiuv collects, uses, stores, shares, transfers, and protects information related to your use of Baiuv.

Baiuv is an AI image creation tool for consumer users. Users may enter prompts, upload reference images, generate AI images, manage projects, and view generation history. Baiuv is currently in a development / pre-production stage. Certain features, credits, plans, account settings, account deletion flows, administrator review, content management, and paid features may still be tested or adjusted.

This Privacy Policy is published by Baiuv Operations Team. You may contact us at [email protected].

This document is a product privacy policy draft and does not constitute formal legal advice. Baiuv’s formal operating entity, governing law, jurisdiction, third-party vendor list, and certain data retention periods may be further updated before public launch.

By using Baiuv, you confirm that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, do not use Baiuv.

1. Scope

This Privacy Policy applies to Baiuv’s AI image creation service and related websites, applications, backend features, account system, project management, generation history, credits or paid features, customer support, safety review, and content management activities.

This Privacy Policy does not apply to third-party websites, applications, or services that independently process personal information. Third-party services may have their own privacy policies and data processing rules.

2. Information We Collect

When you use Baiuv, we may collect the following types of information.

2.1 Account information

When account registration or login is available, we may collect:

1. email address;
2. password or password authentication-related information;
3. system-assigned public username;
4. account creation time, login status, account settings, and account deletion status;
5. information related to CAPTCHA or similar verification, security checks, or abnormal login detection.

Baiuv’s account system uses email and password authentication. When registration opens in the future, Baiuv may use CAPTCHA or similar verification tools to prevent bot registration, malicious attacks, and bulk abuse.

2.2 Content you submit and generate

To provide AI image creation features, we may process:

1. prompts you enter;
2. reference images you upload;
3. generation parameters you select or adjust;
4. generation task status;
5. generated outputs;
6. project content;
7. generation history;
8. records related to content review, administrator review, or safety management.

User projects, generation history, uploaded content, and generated outputs are retained while the account exists, so that you can continue to view, manage, and use them.

2.3 Technical and log information

When you access or use Baiuv, we may automatically collect necessary technical information, including:

1. IP address;
2. device, browser, operating system, and language settings;
3. access time, page access records, request records, and error logs;
4. generation request time, status, credit consumption, and processing result;
5. security events, unusual behavior, risk-control matches, and abuse detection information;
6. necessary technical records related to CDN, storage, security protection, CAPTCHA or similar verification, email, or payment services.

2.4 Payment and transaction-related information

If Baiuv offers paid credits, plans, or other paid features, we may process information related to purchases, credit deductions, refunds, compensation, accounting reconciliation, and dispute handling.

Payments may be processed by third-party payment service providers. Baiuv may receive transaction status, order number, purchased item, credit changes, payment result, and necessary accounting information. Baiuv generally does not directly process full card numbers or sensitive payment account credentials, subject to the actual payment flow and the rules of the payment service provider.

2.5 Support and communications

When you contact us through [email protected] or other support channels, we may collect your email address, communication content, issue description, screenshots, attachments, account identifiers, handling records, and follow-up communications.

3. How We Use Information

Baiuv may process information for the following purposes:

1. creating, logging into, verifying, and managing accounts;
2. receiving and processing prompts, reference images, and generation parameters;
3. calling third-party AI image generation services to complete your generation requests;
4. creating, saving, and displaying projects, generated outputs, and generation history;
5. managing free credits, promotional credits, paid credits, plans, or other digital services;
6. processing payments, orders, refunds, compensation, accounting, and disputes;
7. providing account settings, account deletion, and deletion request handling;
8. troubleshooting, fixing errors, and maintaining service stability;
9. conducting safety review, administrator review, content management, and risk control;
10. preventing fraud, attacks, safety-system bypass, bulk abuse, and other violations;
11. responding to user inquiries, complaints, rights requests, or support requests;
12. complying with laws, regulations, regulatory requirements, judicial or administrative procedures;
13. improving product experience, performance, and security in an aggregated or de-identified manner.

By default, Baiuv does not use your uploaded content, prompts, or generated outputs to train Baiuv’s own foundation models or third-party foundation models, unless Baiuv separately informs you and obtains express consent where required by applicable law.

4. Third-Party Services and Data Sharing

Baiuv may call third-party AI image generation services on the backend. Baiuv may also use third-party infrastructure, storage, CDN, security, CAPTCHA or similar verification, email, and payment services.

To provide the service, we may transmit or provide necessary information to third-party service providers, including:

1. prompts;
2. reference images;
3. generation parameters;
4. necessary technical information;
5. request status and error information;
6. necessary information related to payment, email, security verification, or risk control.

We provide information to third parties only to the extent needed for the relevant functions, and we use reasonable efforts to require third parties to process information in accordance with applicable data protection requirements.

Third-party service providers may be located outside your country or region. As a result, relevant data may be transferred or processed across borders.

5. Cross-Border Transfers and Processing

Because Baiuv may use AI image generation, infrastructure, storage, CDN, security, CAPTCHA or similar verification, email, payment, or technical service providers located in different countries or regions, your information may be transferred to, stored in, or processed in locations outside your country or region.

When cross-border transfer or processing occurs, Baiuv will take reasonable measures to protect your information in accordance with applicable legal requirements and, where necessary, supplement appropriate legal mechanisms, notices, or consent flows.

6. Content Review and Safety Management

To maintain platform safety, compliance, and user rights, Baiuv may review and manage user requests, uploaded content, generated outputs, account activity, and unusual behavior.

Review and management may include automated system detection, human review, administrator review, risk rules, log analysis, and content removal.

We may review or process relevant content and records for purposes such as:

1. determining whether content is illegal, infringing, or violates platform rules;
2. preventing risks related to sexual content involving minors, non-consensual sexual content, explicit pornography, hate and harassment, extreme violence, terrorism, scams, malicious deception, impersonation, privacy violations, and misleading deepfakes;
3. identifying attempts to bypass safety systems, bulk abuse, malicious attacks, or abnormal requests;
4. handling requests from rights holders, users, competent authorities, or other lawful requesters;
5. preserving necessary evidence for dispute handling, security audits, and compliance obligations.

7. Retention

User projects, generation history, uploaded content, and generated outputs are retained while the account exists.

After you delete your account or request deletion of related personal information, related account content will be removed from active services. However, Baiuv may retain certain records for a period of time where required or reasonably necessary for:

1. legal compliance;
2. security protection and abuse prevention;
3. audits and internal controls;
4. accounting, orders, refunds, and tax records;
5. dispute handling, complaint handling, or rights requests;
6. backup rotation;
7. technical limitations or system integrity needs.

We will delete or de-identify information when it is no longer needed and there is no legal, compliance, security, accounting, or dispute-related reason to retain it.

8. Account Deletion, Deletion Requests, and Data Export

You may request account deletion or deletion of related personal information through the in-product account deletion entry, or by contacting [email protected].

Before processing an account deletion or deletion request, we may need to verify your identity to prevent unauthorized deletion or access.

After account deletion or deletion is completed, related account content will be removed from active services. However, records needed for legal compliance, security, audits, accounting, dispute handling, backup rotation, or technical limitations may be retained for a period of time.

Baiuv does not currently commit to providing a self-service data export feature. If Baiuv offers data export in the future, Baiuv may separately explain the export scope, format, limitations, and process.

9. Your Rights and Choices

Depending on applicable law, you may have one or more of the following rights:

1. to request access to personal information related to you;
2. to correct inaccurate or incomplete information;
3. to request deletion of personal information;
4. to request account deletion;
5. to withdraw consent;
6. to object to or restrict certain processing activities;
7. to receive information about third-party sharing, cross-border transfers, or automated processing;
8. to file a complaint or seek help from a regulatory authority.

You may submit requests by contacting [email protected]. We will process requests based on applicable law, identity verification results, technical feasibility, and necessary retention obligations.

Deleting certain information may affect your ability to use Baiuv, such as your ability to view projects, generation history, or saved generated outputs.

10. Minors

Baiuv is available only to users who are at least 18 years old. Individuals under 18 may not use Baiuv.

If we discover that an individual under 18 is using Baiuv, or that someone is using Baiuv to generate, upload, distribute, or request sexual content involving minors or other illegal or prohibited content, Baiuv may delete content, restrict features, suspend or terminate the account, preserve evidence, and cooperate with competent authorities or rights holders where necessary.

11. Cookies, Verification, and Similar Technologies

Baiuv may use cookies, local storage, log identifiers, CAPTCHA or similar verification, security tokens, or similar technologies to maintain login sessions, protect security, identify risk, optimize service performance, troubleshoot errors, and operate essential features.

When registration opens in the future, Baiuv may use third-party CAPTCHA or similar verification services to identify bots, bulk registration, malicious attacks, or abnormal requests.

You may manage some cookies or local storage through your browser settings. However, disabling certain necessary technologies may prevent Baiuv’s login, generation, security verification, or other features from working properly.

12. Information Security

Baiuv takes reasonable technical and organizational measures to protect your information, such as access controls, log monitoring, security review, permission management, anomaly detection, and necessary data protection measures.

However, no internet service can be guaranteed to be absolutely secure. You should also keep your account and password safe, avoid sharing login credentials, and contact us promptly if you notice abnormal access or account security issues.

13. Changes to This Privacy Policy

Baiuv may update this Privacy Policy based on product development, laws and regulations, third-party service rules, technical solutions, or operational arrangements.

If material changes are made, Baiuv will provide notice in a reasonable manner, such as through in-product notices, page updates, or notifications. The updated Privacy Policy will take effect on the stated effective date.

If you continue to use Baiuv after this Privacy Policy is updated, you confirm that you have read and understood the updated policy.

14. Contact

If you have questions about this Privacy Policy, personal information processing, account deletion, data deletion, content review, third-party services, or cross-border transfers, you may contact Baiuv at:

Email: [email protected]

Pre-launch items to confirm

Before Baiuv’s public launch, the operator, legal, compliance, payment, and technical teams should confirm:

1. Baiuv’s formal operating entity, registered address, company information, and role as personal information processor / controller;
2. target launch countries or regions and applicable data protection requirements;
3. whether a separate Cookie Policy, cookie banner, or consent management mechanism is needed;
4. the list of third-party AI image generation, infrastructure, storage, CDN, security, CAPTCHA or similar verification, email, and payment service providers;
5. specific retention periods for each category of personal information and User Content;
6. deletion workflow, backup rotation period, and log retention period after account deletion;
7. legal mechanisms, notice language, and required consent flows for cross-border transfers;
8. whether self-service data export, access, correction, deletion, or appeal tools will be provided;
9. trigger conditions, access controls, and audit mechanisms for administrator review, human review, and automated review;
10. processing boundaries for payment, order, refund, invoice, tax, and accounting information;
11. whether regional addenda are needed for GDPR, CCPA / CPRA, China’s Personal Information Protection Law, or other target-market privacy laws;
12. age assurance, age declaration, and violation handling mechanisms for minors;
13. notice, consent, opt-out, and vendor restriction mechanisms related to model training.