Legal
Privacy Policy
Last updated: March 29, 2026
1. Information We Collect
Account Information: When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign in with Google, we receive your name, email, and profile image from Google.
Payment Information: Payment transactions are processed by our third-party payment provider (Fanbasis). We do not store your credit card number, CVV, or full billing details. We retain transaction IDs, amounts, and subscription status for billing records.
Uploaded Content: Images you upload as model references are stored on our servers to provide the generation service. These images are associated with your account.
Generated Content: Images and videos generated through the Service are stored and associated with your account for access via your gallery.
Usage Data: We collect basic usage data including pages visited, features used, generation prompts, and timestamps to improve the Service.
2. How We Use Your Information
- To provide, maintain, and improve the Service.
- To process your transactions and manage your subscription.
- To send you transactional emails (receipts, account verification, billing notifications).
- To enforce our Terms of Service and detect abuse.
- To respond to your support requests.
3. How We Share Your Information
We do not sell your personal information. We may share information with:
- Service Providers: Third-party services that help us operate the platform (payment processing, email delivery, cloud storage, AI inference). These providers only receive the data necessary to perform their function.
- Legal Requirements: If required by law, court order, or governmental authority, we may disclose your information.
4. Data Storage & Security
Your data is stored on secure servers. We use industry-standard security measures including:
- Encrypted data transmission (HTTPS/TLS).
- Secure password hashing (bcrypt).
- JWT-based session authentication.
- HMAC request signing for internal API calls.
While we take reasonable steps to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
We retain your account data and generated content for as long as your account is active. Uploaded reference images used for content generation are automatically cleaned up after 2 days.
If you delete your account, we will delete your personal data and generated content within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to or restrict certain processing of your data.
- Export your data in a portable format.
To exercise any of these rights, contact us at support@bopgpt.xyz.
7. Third-Party Services
The Service integrates with the following third-party providers:
- Fanbasis — Payment processing.
- Google — OAuth authentication.
- Vercel — Hosting and image storage.
- Neon — Database hosting.
- Resend — Transactional email delivery.
Each provider operates under their own privacy policy. We encourage you to review them.
8. Children’s Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised date. Continued use of the Service constitutes acceptance of the updated policy.
10. Contact
For privacy-related inquiries, contact us at support@bopgpt.xyz.
bopGPTAI-powered content generation built for creators who demand quality, speed, and creative control.
© 2026 bopGPT. All rights reserved.
BOPGPT