Privacy Policy

Last updated: July 26, 2025

GDPR Compliant

Full compliance with European data protection regulations

Transparent

Clear information about what data we collect and why

Secure

Industry-standard encryption and security measures

1. Information We Collect

Account Information

  • Email address and name
  • Password (encrypted)
  • Billing information (processed by Stripe)
  • Profile preferences and settings

Content and Usage Data

  • Content you create and generate
  • Analytics and performance metrics
  • Usage patterns and feature interaction
  • Device and browser information

AI Processing Data

  • Text prompts sent to OpenAI
  • Video generation requests to RunwayML
  • Voice synthesis requests to ElevenLabs
  • Generated content and metadata

2. How We Use Your Information

We use your information to:

  • Provide and improve our AI content generation services
  • Process payments and manage your subscription
  • Send important updates about your account
  • Provide customer support and technical assistance
  • Analyze usage patterns to improve our platform
  • Ensure security and prevent fraud

3. Third-Party Services

We integrate with these trusted third-party services:

OpenAI

Text and content generation

RunwayML

Video generation and processing

ElevenLabs

Voice synthesis and audio

Stripe

Payment processing

Each service has its own privacy policy, and data shared is limited to what's necessary for functionality.

4. Data Security

We implement industry-standard security measures:

  • End-to-end encryption for sensitive data
  • Secure HTTPS connections for all communications
  • Regular security audits and updates
  • Limited access to personal information
  • Encrypted database storage

5. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request copies of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data
  • Portability: Request transfer of your data
  • Restriction: Request limitation of data processing
  • Objection: Object to data processing

6. Data Retention

We retain your data only as long as necessary to provide our services. Account data is kept while your account is active and for 30 days after deletion. Generated content is retained according to your subscription plan and can be deleted upon request.

7. Cookies and Tracking

We use essential cookies for:

  • Authentication and session management
  • User preferences and settings
  • Analytics to improve our service
  • Security and fraud prevention

8. International Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through standard contractual clauses and privacy frameworks approved by the European Commission.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by email or through our platform.

10. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: privacy@burstlet.com

Data Protection Officer: dpo@burstlet.com