Baiuv Privacy Policy

Introduction

This Privacy Policy explains how Baiuv collects, uses, stores, shares, transfers, and protects information related to your use of Baiuv.

Baiuv is an AI visual creation service for consumer users. Depending on current feature availability, users may use Image Creation, E-commerce Design, Market, Projects, Assets, History, Credits, billing, and account settings. Baiuv is currently in a development / pre-production stage, so individual features and third-party integrations may still be tested, adjusted, or released in phases.

This Privacy Policy is published by Baiuv Team, which currently operates the service. You may contact us at [email protected].

Baiuv Team is the current product-operations team name and is not the name of a registered legal entity. This document is a pre-production privacy policy draft and does not constitute formal legal advice. Before formal commercial launch, Baiuv will add or update the registered operating entity, registered address, governing law, jurisdiction, third-party service arrangements, and other required operational information.

By using Baiuv, you confirm that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, do not use Baiuv.

1. Scope

This Privacy Policy applies to Baiuv’s websites, account system, Image Creation, E-commerce Design, Market interactions, Projects, Assets, History, Credits or paid features, customer support, safety review, and related backend and storage activities. Features that are unavailable or disabled are not active processing purposes merely because they are named in this policy.

This Privacy Policy does not apply to third-party websites, applications, or services that independently process personal information. Third-party services may have their own privacy policies and data processing rules.

In its first phase, Baiuv is a globally accessible online service and does not conduct localized marketing, targeted campaigns, or region-specific commercial promotion for any particular country or region. If Baiuv later formally promotes the service in a particular country or region, or if applicable law requires region-specific privacy notices, Baiuv will supplement the relevant terms, rights explanations, or compliance mechanisms.

2. Information We Collect

When you use Baiuv, we may collect the following types of information.

2.1 Account information

When you register, sign in, or manage an account, we may collect:

1. email address;
2. password-authentication records, or Google OAuth identifiers and profile fields returned with your authorization;
3. public username, profile fields, and avatar;
4. account creation time, verification state, login method, sessions, settings, and account deletion status;
5. information related to Cloudflare Turnstile or similar human verification, security checks, and abnormal-login or signup-abuse detection.

Baiuv supports email/password authentication and may offer Google OAuth when configured. Registration, Google account creation, and Turnstile checks are controlled by deployment and audited runtime settings. When Turnstile is enabled for sign-in or sign-up, the browser obtains a short-lived verification token and Baiuv validates it with Cloudflare before completing the protected action.

2.2 Content you submit and generate

To provide Image Creation, E-commerce Design, and related asset features, we may process:

1. prompts you enter;
2. reference images you upload;
3. generation parameters you select or adjust;
4. creative conversations, clarification answers, and design canvas state;
5. generation and image-operation task status;
6. generated outputs and reusable image assets;
7. Project names, Creative Briefs, associations, and lifecycle state;
8. History, bookmarks, Likes, referral or reward attribution, daily check-in, notice-read state, and other owner-scoped Market or library interactions;
9. records related to content review, administrator review, or safety management.

These records are stored according to the product lifecycle and retention rules described below so that you can return to conversations, manage reusable work, and review account activity.

2.3 Person Profiles and private person photos

When the People feature is available and you choose to use it, Baiuv processes only the information needed to create and reuse an adult Person Profile:

1. an account-scoped nickname that is not requested or treated as a legal name;
2. one required full-body photo and, if you choose, one supplemental portrait of the same person;
3. your adult confirmation;
4. whether the photos show you or another person whose use you are authorized to request;
5. versioned image-rights and, only when you enable it, commercial-use declarations; and
6. bounded task, revision, deletion, and security evidence needed to run and protect the workflow.

Baiuv does not ask for or store a Person Profile’s height, weight, body-shape label, hairstyle label, gender, race, ethnicity, skin-tone label, exact age, legal name, identity document, or contact details. Before final storage, Baiuv replaces the original filename and removes embedded location, device, text, and other nonessential metadata; a minimal image-orientation value may be rebuilt where needed to display the photo correctly. Baiuv does not create or retain face templates, face embeddings, custom person models, raw provider analyses, confidence scores, identity-cluster tokens, or appearance suggestions for this feature.

Private person photos are used only for the readiness check and generation you request. They are not used by Baiuv for authentication, public search, advertising profiling, or training a Baiuv model. If you submit a photo of another person, you are responsible for having the permissions and rights required to submit the photo and request the intended personal or commercial use.

2.4 Technical and log information

When you access or use Baiuv, we may automatically collect necessary technical information, including:

1. IP address;
2. a first-party device identifier and server-derived hashed or HMAC risk subjects;
3. device, browser, operating system, language, country or region signals, and preference settings;
4. access time, page access records, request identifiers, error logs, and first-party performance measurements;
5. generation request time, status, Credit consumption, and processing result;
6. security events, unusual behavior, risk-control matches, rate-limit evidence, and abuse-detection information;
7. necessary technical records related to CDN, private storage, security protection, human verification, email, or payment services.

Baiuv’s application logs are designed to exclude passwords, cookies, tokens, provider credentials, payment credentials, and full user prompts by default. Some support, safety, or incident investigations may still require access to the underlying owner-scoped business record rather than a redacted log.

2.5 Payment and transaction-related information

Where paid Credits, Plans, or other paid features are available, we process information related to purchases, subscriptions, Credit deductions, refunds, disputes, compensation, accounting reconciliation, and provider-event handling.

Payments are processed through the provider selected for the effective billing region. Global checkout may use Stripe, while China-region checkout uses the currently configured China payment route. Baiuv may receive transaction or subscription identifiers, order status, purchased item, billing region, currency, amount, Credit changes, refund or dispute status, and necessary accounting information. Baiuv does not intentionally collect full card numbers, payment passwords, or complete payment credentials through its own forms.

Baiuv does not support invoice issuance in its first phase. If Baiuv later provides invoice or tax document features, Baiuv will process the relevant information according to applicable law and the payment-page explanation.

2.6 Support and communications

When you contact us through [email protected] or other support channels, we may collect your email address, communication content, issue description, screenshots, attachments, account identifiers, handling records, and follow-up communications.

3. How We Use Information

Where applicable law requires a legal basis, Baiuv processes information as necessary to provide the service requested by you, protect the service and users, comply with legal obligations, or based on consent for optional processing. Optional consent can be withdrawn where the relevant product control is available, without affecting processing already completed lawfully.

Baiuv may process information for the following purposes:

1. creating, logging into, verifying, and managing accounts;
2. receiving and processing prompts, reference images, clarification answers, and generation parameters;
3. calling third-party AI generation or image-operation services to complete your requests;
4. creating, saving, and displaying conversations, design canvas state, Projects, Assets, outputs, and History;
5. managing free, promotional, or paid Credits, Plans, daily check-in, referrals, rewards, or other digital services;
6. processing payments, orders, refunds, compensation, accounting, and disputes;
7. providing account settings, account deletion, and deletion request handling;
8. troubleshooting, fixing errors, and maintaining service stability;
9. conducting safety review, authorized operations review, content management, and risk control;
10. preventing fraud, attacks, safety-system bypass, bulk abuse, and other violations;
11. responding to user inquiries, complaints, rights requests, or support requests;
12. complying with laws, regulations, regulatory requirements, judicial or administrative procedures;
13. improving product experience, performance, and security in an aggregated or de-identified manner.

4. Third-Party Services and Data Sharing

Baiuv may use third-party service providers for Google OAuth, AI generation, private object storage, CDN and edge security, Cloudflare Turnstile, payment processing, transactional email, infrastructure, logs, and monitoring. The provider actually used depends on the enabled feature, environment, billing region, and routing configuration.

To provide the service, we may transmit or provide necessary information to third-party service providers, including:

1. prompts;
2. reference images;
3. generation parameters;
4. necessary technical information;
5. request status and error information;
6. verification tokens or signals needed for human verification and security checks;
7. necessary order, subscription, payment, email, or support information.

Baiuv will use reasonable efforts to select and manage third-party AI service providers and, based on available service terms, data processing terms, or other arrangements, encourage them to process User Content only to the extent necessary to provide the relevant service. If third-party service rules, data processing practices, or availability change, Baiuv may update its explanations, adjust the service, or replace the service provider based on the actual circumstances.

Third-party service providers may be located outside your country or region. As a result, relevant data may be transferred or processed across borders.

5. Cross-Border Transfers and Processing

Because Baiuv may use AI image generation, infrastructure, storage, CDN, security, CAPTCHA or similar verification, email, payment, or technical service providers located in different countries or regions, your information may be transferred to, stored in, or processed in locations outside your country or region.

When cross-border transfer or processing occurs, Baiuv will take reasonable measures to protect your information in accordance with applicable legal requirements and, where necessary, supplement appropriate legal mechanisms, notices, or consent flows.

6. Content Review and Safety Management

To maintain platform safety, compliance, and user rights, Baiuv may review and manage user requests, uploaded content, generated outputs, account activity, and unusual behavior.

Review and management may include automated system detection, risk scoring, rate limits, human review, authorized operations review, log analysis, and content or account restrictions. Automated checks may block or limit registration, rewards, generation, or other actions when the relevant enforcement control is enabled. You may contact [email protected] if you believe an automated or manual restriction was applied incorrectly.

Review access is limited to what is necessary for the relevant purpose and is subject to permission controls and audit records.

We may review or process relevant content and records for purposes such as:

1. determining whether content is illegal, infringing, or violates platform rules;
2. preventing risks related to sexual content involving minors, non-consensual sexual content, explicit pornography, hate and harassment, extreme violence, terrorism, scams, malicious deception, impersonation, privacy violations, and misleading deepfakes;
3. identifying attempts to bypass safety systems, bulk abuse, malicious attacks, or abnormal requests;
4. handling requests from rights holders, users, competent authorities, or other lawful requesters;
5. preserving necessary evidence for dispute handling, security audits, and compliance obligations.

7. Retention

Active conversations, Projects, Assets, History, uploaded content, and generated outputs are retained according to their product lifecycle while the account exists. Items placed in trash or another deletion lifecycle may remain recoverable for the displayed recovery period before final purge.

A Person Profile remains available until you delete it. Deleting it starts permanent purge of its private reference photos and lets you choose separately whether linked generated results are also deleted. If you retain a result, its Person Profile link and person snapshot are replaced by a fixed deleted-person label, so the result can be viewed but not used to generate another result. Baiuv may retain a minimal deletion task or tombstone that does not contain the nickname, photos, rights basis, or biometric data when needed to reconcile deletion, security, or audit obligations.

An account deletion request starts a 7-day cancellation window. Baiuv revokes active sessions and blocks ordinary account use during that window. If the request is not cancelled, finalization deletes or anonymizes active account identifiers and content according to the account lifecycle. A canonical deleted-email tombstone and necessary payment, Credits, referral or reward, ledger, security, generation, provider-event, and audit evidence may remain where required for account-reuse prevention, accounting, security, dispute handling, or legal obligations.

After you delete your account or request deletion of related personal information, related account content will be removed from active services. However, Baiuv may retain certain records for a period of time where required or reasonably necessary for:

1. legal compliance;
2. security protection and abuse prevention;
3. audits and internal controls;
4. accounting, orders, refunds, and tax records;
5. dispute handling, complaint handling, or rights requests;
6. backup rotation;
7. technical limitations or system integrity needs.

We will delete or de-identify information when it is no longer needed and there is no legal, compliance, security, accounting, or dispute-related reason to retain it.

8. Account Deletion, Deletion Requests, and Data Export

You may request account deletion through Settings > Profile. The confirmation requires you to type the current account email, revokes active sessions, and begins a 7-day cancellation window. During that window, signing in routes you to the deletion-pending page, where you may cancel the request. You may also contact [email protected] about deletion of specific personal information or other privacy rights.

Before processing an account deletion or deletion request, we may need to verify your identity to prevent unauthorized deletion or access.

After final deletion, related content is removed from active user-facing services or anonymized according to the applicable lifecycle. Records needed for legal compliance, security, account-reuse prevention, audits, accounting, dispute handling, backup rotation, or technical limitations may be retained for the necessary period.

Baiuv does not commit to providing a complete self-service data export feature in its first phase. If Baiuv offers data export in the future, Baiuv may separately explain the export scope, format, limitations, and process.

9. Your Rights and Choices

Depending on applicable law, you may have one or more of the following rights:

1. to request access to personal information related to you;
2. to correct inaccurate or incomplete information;
3. to request deletion of personal information;
4. to request account deletion;
5. to withdraw consent;
6. to object to or restrict certain processing activities;
7. to receive information about third-party sharing, cross-border transfers, or automated processing;
8. to file a complaint or seek help from a regulatory authority.

You may submit requests through in-product entries or by contacting [email protected]. We will process requests based on applicable law, identity verification results, technical feasibility, and necessary retention obligations.

Deleting certain information may affect your ability to use Baiuv, such as your ability to view projects, generation history, or saved generated outputs.

10. Minors

Baiuv is available only to users who are at least 18 years old. Individuals under 18 may not use Baiuv.

If we discover that an individual under 18 is using Baiuv, or that someone is using Baiuv to generate, upload, distribute, or request sexual content involving minors or other illegal or prohibited content, Baiuv may delete content, restrict features, suspend or terminate the account, preserve evidence, and cooperate with competent authorities or rights holders where necessary.

11. Cookies, Verification, and Similar Technologies

Baiuv uses cookies and similar technologies for Better Auth sessions, locale selection, the server-owned billing-market preference, and security controls. Local storage or equivalent browser storage may remember theme, announcement dismissal, guidance, and other local interface preferences. First-party identifiers and request metadata may also support rate limits, abuse prevention, performance measurement, and troubleshooting.

In its first phase, Baiuv does not use advertising cookies, third-party analytics cookies, tracking pixels, or remarketing tracking technologies.

When enabled for sign-in or sign-up, Cloudflare Turnstile runs browser-side checks and returns a short-lived token that Baiuv validates server-side. Depending on Cloudflare and site configuration, related security cookies or browser signals may also be processed.

You may manage some cookies or local storage through your browser settings. However, disabling certain necessary technologies may prevent Baiuv’s login, generation, security verification, or other features from working properly.

12. Information Security

Baiuv takes reasonable technical and organizational measures to protect your information, such as owner-scoped authorization, private asset storage and short-lived delivery URLs, session validation and revocation, access controls, audit records, redacted logs, anomaly detection, and necessary data protection measures.

However, no internet service can be guaranteed to be absolutely secure. You should also keep your account and password safe, avoid sharing login credentials, and contact us promptly if you notice abnormal access or account security issues.

13. Changes to This Privacy Policy

Baiuv may update this Privacy Policy based on product development, laws and regulations, third-party service rules, technical solutions, or operational arrangements.

If material changes are made, Baiuv will provide notice in a reasonable manner, such as through in-product notices, page updates, or notifications. The updated Privacy Policy will take effect on the stated effective date.

If you continue to use Baiuv after this Privacy Policy is updated, you confirm that you have read and understood the updated policy.

14. Contact

If you have questions about this Privacy Policy, personal information processing, account deletion, data deletion, content review, third-party services, or cross-border transfers, you may contact Baiuv at:

Email: [email protected]