This Privacy Policy describes how Borbytes Image Dreamer ("the Application", "we", "our") collects, uses, and stores information when you use our AI image and video generation service. By using the Application, you agree to the practices described here.
1 Information We Collect
We collect only the minimum information necessary to operate the Application:
- Google Account Information: When you sign in, we receive your email address, display name, and profile picture from Google. Your email is used to identify your account and verify authorization.
- Generated Content: Images and videos you generate are stored in Firebase Storage under your account.
- Generation History: Prompts and metadata (resolution, type, timestamp) for recent generations are stored in Firestore. History items older than 24 hours are eligible for automatic deletion.
- Gallery Preferences: Your hidden gallery selections are stored in Firestore to persist your privacy preferences across sessions.
- Session Data: A server-side session is created upon sign-in and expires after 7 days.
2 Authentication
The Application uses server-side Google OAuth 2.0 for authentication. When you sign in:
- You are redirected to Google's sign-in page — no passwords are handled by us.
- Google returns your basic profile information to our server.
- Your email is verified against an authorized-users list. Unauthorized accounts are denied access.
- A secure session cookie is issued, valid for 7 days.
We do not use Firebase client-side authentication or store any Google OAuth tokens beyond what is needed to complete the sign-in flow.
3 How We Use Your Information
- To authenticate and authorize your access to the Application.
- To store and retrieve your generated images and videos in your personal gallery.
- To track recent generation history so you can revisit past creations.
- To maintain your gallery preferences (e.g., hidden items).
- To enforce usage credits and prevent abuse.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
4 Third-Party Services
The Application relies on the following third-party services:
-
Google OAuth 2.0 (Google LLC): Handles user sign-in. Subject to
Google's Privacy Policy.
-
Firebase Storage & Firestore (Google LLC): Stores your generated media files, generation history, and preferences. Data is stored within Google Cloud infrastructure.
-
BytePlus Seedream & Seedance APIs (BytePlus / ByteDance): Your prompts, generation parameters, and reference images are sent to BytePlus to generate images and videos. We do not control how BytePlus processes or retains this data. We recommend reviewing the
BytePlus Privacy Policy.
Reference images you upload and prompts you submit are transmitted to the BytePlus API for generation. Avoid uploading sensitive or personally identifying content as reference images.
5 Data Retention
- Gallery files: Stored indefinitely in Firebase Storage until you delete them.
- Generation history: Automatically eligible for deletion after 24 hours.
- Hidden gallery list: Stored until you unhide items or delete your data.
- Session data: Expires after 7 days of inactivity.
You can delete individual gallery items or your full history at any time from within the Application.
6 Data Security
All communication between your browser, our server, and third-party APIs is encrypted using TLS/HTTPS. Firebase Storage files are accessed via short-lived signed URLs (1-hour expiry). We take reasonable technical measures to protect stored data from unauthorized access.
7 Your Rights
- You may delete your generated content and history directly within the Application at any time.
- You may revoke the Application's Google sign-in access at any time via your
Google Account permissions page.
- To request full deletion of your account data, contact us at the email below.
8 Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated date. Continued use of the Application after changes constitutes acceptance of the revised policy.
9 Contact
If you have questions or data deletion requests regarding this Privacy Policy, contact us at:
johnrplanta@gmail.com