Privacy Notice
Last updated 4 September 2026
This describes what Bulud AI collects, who else sees it, and how to get rid of it. It describes what the service does today, not what we might do later.
1. Who is responsible
Orkhan Mammadov, sole trader, Azerbaijan, is responsible for the personal data described here. Contact: support@buludai.com, +994 50 764 77 00.
2. What we collect
| What | Why |
|---|---|
| Your email address and login credentials | To create your account and let you sign in |
| What you submit — topics and prompts | To generate your video or image. This is the input to the service |
| What we generate — scripts, narration audio, images, finished videos | To deliver them to you and keep them in your library |
| Account and usage records — credit balance, what each job cost, job status and timings | To meter credits accurately, refund failures, and support you when something goes wrong |
| Technical logs — errors and diagnostic records | To find and fix faults |
We do not see your card details. Payments go to Paddle, who collect and hold payment information directly. We receive a record that a payment happened and which plan it was for.
This marketing website itself sets no cookies, runs no analytics and has no trackers. It is static pages and a stylesheet.
3. Who else processes it
Making a video means sending your prompt and the text generated from it to other companies. There is no version of this service where that does not happen, so here is exactly who and what:
| Provider | What we send them |
|---|---|
| Supabase — database, file storage and sign-in | Your account details and everything the service stores, including your videos |
| Anthropic — script writing | Your topic or prompt |
| ElevenLabs — narration audio | The script text to be spoken |
| fal.ai — scene and studio images | The image descriptions generated from your script, or your image prompt |
| Paddle — payments and merchant of record | Your billing details, which you give to Paddle directly |
| Namecheap — email forwarding for our support address | The contents of email you send us |
| Netlify — hosting for this website | Standard web server request logs for this site only |
These providers process data on their own infrastructure, which for several of them means outside Azerbaijan and outside the EU, including in the United States.
Something we are not yet able to promise
We do not currently have zero-retention agreements with the AI providers above. That means your prompts and generated text may be retained by them under their own policies and their own retention periods. We say so here rather than implying a protection we have not put in place.
4. Where your data is stored
Your account, your credit records and your generated files are stored in the European Union (Frankfurt), on Supabase infrastructure. The providers in section 3 process data elsewhere as described.
5. How long we keep it
- Your videos and images stay in your library until you delete them or your account closes.
- Your account stays until you ask us to close it.
- Billing and credit records are kept after account closure where we are required to keep financial records, and to resolve any dispute about a payment.
- Technical logs are kept for a short period for fault-finding.
6. What we do not do
- We do not sell your personal data, and we do not share it for advertising.
- We do not use your prompts or your generated content to train our own models.
- We do not put analytics or advertising trackers on this website.
7. Your rights
You can ask us to show you what we hold about you, correct it, delete it, or send you a copy. Email support@buludai.com and we will act on it. If you ask us to delete your account, we delete your content and keep only what we must for financial records.
Depending on where you live, you may also have the right to complain to a data protection authority.
8. Children
Bulud AI is for educators and other adults. It is not intended for children to sign up to, and we do not knowingly create accounts for them. Videos made with it are of course intended to be shown to students — that is the point of the product — but the account holder is an adult.
9. Changes
If we change this notice in a way that matters, we will tell account holders by email rather than only editing this page.
⚠ This notice needs review by a qualified lawyer before it is relied on.
It is an accurate, good-faith description of what the system actually does, written from the code rather than from a template — and that is not the same as legal compliance. Specifically unreviewed: the lawful basis for each processing purpose under the GDPR, the mechanism relied on for international data transfers, the exact retention periods, and obligations under the data protection law of the Republic of Azerbaijan. An institutional customer may also impose requirements that are not reflected here. These need a lawyer, and we would rather mark the gap than paper over it.