Privacy Policy

1. Information we collect

Information you give us

• Account details. When you sign in with Google, we receive your name, email address, profile picture and a Google account identifier.
• Your content. Prompts and settings; photos, videos, audio and other files you upload; links you import; the templates you choose; and the images, videos and audio you generate. Your content can include personal information about you and about anyone who appears in it.
• Payment and billing details. Stripe (and Link, when it’s the seller of record) collects your payment details. We receive your Stripe customer ID, plan and purchase history, your billing address and any business name or tax ID you enter at checkout. We never receive or store full card numbers.
• Messages. What you send us by email or through forms, including support requests, feedback and reports.

Information we collect automatically

• Usage and credits. Your generations and their settings, the models you use, your credit balance and transaction history, folders and favorites, and how you use API keys. We store API keys only as irreversible hashes.
• Device and log data. IP address, browser and device type, operating system, pages viewed, referring pages, timestamps and error reports. Our hosting provider collects these when you use the Service.
• Cookies and similar technologies. See Cookies and analytics.

Information from other people

We may receive information about you from people who report content, from rights holders and authorities, and from Google when you use it to sign in.

2. Faces, voices and people in your uploads

Some features work with images, videos or recordings of people, including Mix, Face Swap, Lipsync, video avatars, headshots, Animate and Voice Changer.

• We use these uploads only to create the output you asked for, show it to you, keep the Service safe and comply with the law.
• Bolly doesn’t extract face geometry, faceprints, voiceprints or any other biometric identifiers from your uploads, and doesn’t use them to identify or recognize anyone. To create your output, the upload is sent to the provider of the model you chose, which processes it under its own terms.
• We never sell these uploads, use them for advertising or use them to train AI models.
• If you upload another person’s image or voice, you must have their permission (see our Responsible AI Policy). Anyone who appears in content on Bolly can ask us to remove it.
• Uploads are kept with the generations they were used for until you delete them or your account (see How long we keep information).

3. AI models and your content

• Model providers. To run a generation, we send your prompt and any files it uses to the provider running the model you chose, mostly through fal.ai. Providers include the model developers, such as Google, OpenAI, ByteDance, Kuaishou (Kling), MiniMax, Alibaba, Black Forest Labs, ElevenLabs and xAI, and they may process your data in the United States, Asia and other regions.
• No training. We don’t use your content to train or fine-tune AI models, and we don’t sell it or license it to anyone else to do so.
• Automated screening. We automatically check prompts for prohibited content before they reach a model, and model providers run their own safety checks. A blocked prompt isn’t sent to the model. These checks only decide whether a request can run. If you think one got it wrong, contact us and a person will look at it.

4. Public and private generations

• Generations are public by default, and on the Free plan they’re always public. On a paid plan you can make them private, so only you can see them (and we can too, when we need to for the reasons in this policy). On paid plans, runs made through the MCP server are private by default.
• Anyone can see a public generation. It can appear in Explore and elsewhere on Bolly together with its prompt and, where shown, your display name and profile picture. People who can see it can also save or share it.
• You can delete a generation at any time. Copies other people saved or shared outside Bolly, and cached copies, can’t always be recalled.

5. How we use information

We use personal information for the purposes below. If you’re in the EEA, the UK or Switzerland, the legal basis we rely on is shown in brackets.

• Providing the Service: creating and managing your account, running generations, storing your library, processing purchases and credits, and answering support requests (performance of our contract with you).
• Safety and integrity: screening prompts, preventing fraud and abuse, enforcing our Terms and policies, investigating reports and reporting illegal content (legitimate interests; legal obligations).
• Security and reliability: monitoring, securing and debugging the Service (legitimate interests).
• Understanding and improving Bolly: measuring how the Service is used and how it performs (legitimate interests, or consent where the law requires it for cookies).
• Communicating with you: receipts, service and security notices and changes to our terms (contract; legitimate interests), and, if you’ve agreed, product news that you can unsubscribe from at any time (consent or legitimate interests).
• Legal: keeping tax and accounting records, responding to lawful requests, and establishing or defending legal claims (legal obligations; legitimate interests).

We don’t sell personal information, share it for cross-context behavioral advertising, use your content for ads, or make decisions about you with legal or similarly significant effects based only on automated processing.

6. How we share information

We share personal information only in these ways:

• Service providers that process it for us under contract: AI model providers (fal.ai and the model developers listed above) to run generations and host generated files; Google Firebase for sign-in, our database and storage; Vercel for hosting, file uploads, logs, Web Analytics and Speed Insights; Stripe and Link for payments, tax and fraud prevention; Google Analytics and PostHog for site and product analytics; infrastructure used by some features, such as Neon (database), Mux (video streaming), Mixedbread (search) and the services that fetch videos from links you import; and our email providers, such as Resend.
• Other people on Bolly, when you make a generation public.
• Legal and safety. When we believe in good faith that the law or legal process requires it, or that it’s needed to protect the rights, property or safety of Bolly, our users or the public. This includes reports to NCMEC.
• Business transfers. As part of a merger, acquisition, financing, reorganization, bankruptcy or sale of assets. This policy continues to protect your information afterwards.
• With your consent, or when you ask us to.

7. Cookies and analytics

• Essential storage. We use your browser’s storage to keep you signed in (Firebase Authentication) and to remember settings such as your cookie choice and whether new generations should be public or private. The Service needs these to work.
• Analytics cookies. Google Analytics and PostHog use cookies and similar storage to help us understand how people use Bolly. PostHog can also record session replays of how pages are used, such as clicks and scrolling; typed text is masked and your uploads and generations are hidden from them. In the EEA, the UK and Switzerland, these are only turned on after you click Accept. Everywhere else they’re on unless you click Reject. Clicking Reject turns them off wherever you are. Without cookies, Google Analytics may still receive limited signals, such as a page view, that aren’t tied to a cookie identifier.
• Cookie-free measurement. Vercel Web Analytics and Speed Insights measure visits and page performance without cookies.
• Changing your mind. Use Cookie settings in the site footer at any time. You can also block cookies in your browser or install Google’s Analytics opt-out add-on.
• We don’t use advertising cookies or pixels. We don’t respond to Do Not Track signals because there’s no common standard for them. We treat a Global Privacy Control signal as a request to opt out of the sale or sharing of personal information, which we don’t do anyway.

8. How long we keep information

• Account information: for as long as your account is open.
• Your content: generations and uploads stay in your library until you delete them or your account. Photos and videos used by Mix and other likeness features are kept with the generation they created.
• Deleting things: a deleted generation leaves your library right away. When you delete your account, or ask us to delete it, we delete your account data and content within 30 days. Copies in backups, caches and model providers’ systems are deleted on those systems’ own schedules.
• Billing and tax records: as long as tax and accounting laws require, usually up to seven years.
• Safety records: information about policy violations and reports can be kept longer when we need it to prevent repeat abuse, meet legal obligations (such as preserving material reported to NCMEC) or handle legal claims.
• Logs and analytics: for limited periods set by our hosting and analytics providers.

9. Security

We protect information with encryption in transit (HTTPS with HSTS), access controls, hashed API keys and tightly limited access to production systems. Payments are handled by Stripe, which is certified to PCI DSS. No system is perfectly secure. If a breach affects your personal information, we’ll notify you and the authorities as the law requires.

10. International transfers

Bolly is a US company. We and our providers process information in the United States and other countries, including in Asia, whose data protection laws may differ from those where you live. When we transfer personal information out of the EEA, the UK or Switzerland, we rely on adequacy decisions (including the EU-U.S. Data Privacy Framework where the recipient is certified) or on Standard Contractual Clauses and the UK Addendum, with additional safeguards where needed.

11. Your choices and rights

Everyone

• Access and download. Download your generations from your library, or email privacy@bolly.ai for a copy of your personal information.
• Correct. Update your name and picture in your Google account, or ask us to correct anything else.
• Delete. Delete generations in your library at any time. To delete your account and its data, use Delete account on your Account page, or email privacy@bolly.ai from the address on your account.
• Visibility. On a paid plan, make generations private. On any plan, delete them.
• Emails. Unsubscribe from product news using the link in any of those emails. We’ll still send you essential messages about your account.

We respond within 30 days, or sooner if the law requires. To protect your account, we may need to verify your identity, usually by confirming that the request came from the email address on your account. Where the law allows, an authorized agent can make a request for you, and we’ll ask for proof of their authority. We won’t treat you differently for exercising your rights.

EEA, UK and Switzerland

You have the right to access, correct or delete your personal information, to restrict or object to how we process it, and to data portability. You can withdraw consent at any time, which won’t affect processing that already happened. Where we rely on legitimate interests, you can object, and we’ll stop unless we have compelling grounds to continue. You can also complain to your local data protection authority, although we’d appreciate the chance to help first.

US states

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon or another state with a privacy law), you may have the right to know what personal information we collect and how we use and share it; to access, correct and delete it; to receive it in a portable format; and to opt out of its sale, of sharing for targeted advertising, and of profiling. We don’t sell personal information or share it for targeted advertising, and we don’t use sensitive personal information to infer things about you. If we deny your request, you can appeal by replying to our decision. If you’re unhappy with the result, you can contact your state attorney general.

In the last 12 months we collected the following categories of personal information: identifiers; customer records; commercial information; internet or network activity; approximate location based on IP address; and audio, visual and similar information (your uploads and generations). We collected them from you, your device and our providers for the purposes described in How we use information, and disclosed them to the service providers described in How we share information. We haven’t sold personal information, or shared it for targeted advertising, in the last 12 months.

Everywhere else

If you live somewhere else, such as Brazil, Canada, India, Japan, South Korea or Australia, your local law may give you similar rights. Email privacy@bolly.ai and we’ll honor them as required.

12. Children

Bolly is only for people aged 18 and over. We don’t knowingly collect personal information from anyone under 18, and our Responsible AI Policy forbids uploading images or recordings of minors to tools that transform people. If you think a child has given us personal information, or appears in content on Bolly, email privacy@bolly.ai or abuse@bolly.ai and we’ll delete it.

13. Changes to this policy

We’ll update this policy as Bolly changes. We’ll post the new version here with a new date. If a change is material, we’ll email you or tell you in the Service before it takes effect.

14. Contact us

Email privacy@bolly.ai with any privacy question or request. To report abuse, email abuse@bolly.ai.

By mail: Bolly AI LLC, 1263 Lakeside Dr, Sunnyvale, CA 94085.