Bazoooka

Legal

Privacy Policy

Last updated 1 September 2026

This is a v1 draft describing how Bazoooka actually handles data today. It is not legal advice. Polar.sh has its own privacy policy for the payment data Polar collects at checkout.

1. Who we are

Bazoooka is an AI image and video generation product. This policy covers the customer app (accounts, generation, credits). It does not cover Polar's own systems.

2. What we collect

  • Account: name, email, password (stored hashed), and a session token in your browser after you sign in.
  • Generation: prompts, optional source images you upload, job type, provider, status, and the output file.
  • Credits: balance, pack and subscription records, and credit ledger entries (deductions, grants, job refunds).
  • Payments: a Polar customer id and purchase/subscription references. Card numbers go to Polar, not to us.

We do not require a public profile. We do not run a separate analytics product on these pages beyond whatever your browser and host already log (IP, user agent) to operate the service.

3. How we use it

We use this data to:

  • Create and authenticate your account.
  • Run generation jobs and show you the gallery of your work.
  • Deduct or restore credits and show history.
  • Start Polar checkout and apply Polar webhooks that grant credits.
  • Debug failures, prevent abuse, and comply with law.

4. Generated media and signed URLs

Prompts and outputs are stored so you can reopen them. Files live on object storage (Cloudflare R2 or the disk configured for the API). The app serves them with time-limited signed URLs, not a permanent public path. Anyone who has a live signed URL can fetch that file until it expires. Do not post signed URLs if you need them to stay private.

Model providers receive the prompt and any source media needed to generate the job. Their retention and training practices are governed by those providers, not by this policy.

5. Polar.sh

When you buy credits or a subscription we send you to Polar checkout. Polar is the merchant of record. Polar processes payment details and may store billing address, tax info, and invoice history. See Polar's privacy policy on polar.sh. We receive confirmation of the sale and enough identifiers to credit your Bazoooka account.

6. Sharing

We share personal data only with:

  • Infrastructure we use to host the API, app, and files.
  • AI model providers, to fulfill a job you started.
  • Polar, to check out and reconcile purchases.
  • Authorities if we are legally required to, or to stop serious abuse.

We do not sell your personal data.

7. Retention

We keep account, job, prompt, output, and credit records while the account exists and for a reasonable period after so ledgers still make sense. You can ask us to delete an account; we may retain records we need for fraud, tax, or legal holds. Signed URLs expire on a short schedule even while the file remains stored.

8. Age

The service is for adults (18+, or older if your jurisdiction requires it to form a contract or pay Polar). We do not knowingly collect data from children. If you believe a child created an account, contact us using the email on that account so we can delete it.

9. Your choices

You can update account details in settings when those fields exist, sign out (which drops the local token), and stop using the product. For Polar billing data, use Polar's customer portal or Polar support. Privacy rights that apply where you live (access, deletion, objection) can be exercised by emailing us from the address on your account. We may need to verify it is you.

10. Changes

We may update this policy. The date at the top will change. Material changes should appear in the product when we can.

11. Contact

Privacy questions: use the email on your Bazoooka account. Billing privacy: Polar. We do not currently publish a dedicated privacy inbox.

Back to homeBack to sign inTerms of Service