Privacy Policy

This Privacy Policy explains how BunnyCraft collects, uses, stores, and shares information when you use our AI image and video creation service. It applies to the BunnyCraft website, account, studio, and API.

Information we collect

When you choose to sign in with Google, we request the basic OpenID Connect profile scopes: openid, email, and profile. Google provides us with your stable Google account identifier, email address, name, and profile image when available. We use this Google user data only to authenticate you, create and secure your BunnyCraft account, display your account profile, and provide support. We do not sell Google user data or use it for advertising.

To create images and videos, we process the prompts and settings you submit, including selected model, resolution, duration, and aspect ratio, as well as reference images, videos, or audio you choose to upload. We store generated results and related task status so you can view your history and download completed work. If you use the API, we also process your API key and request metadata to authenticate and fulfill the request.

We also process information needed to operate your account and the service, such as your BunnyCraft username, profile settings, sign-in/session state, generation and API usage records, Carrot balance and ledger, recharge order identifiers, payment status, amount, currency, and support correspondence. We do not receive or store full payment card numbers or card security codes.

How we use information

We use this information to sign you in, operate and protect your account, authenticate API requests, submit image and video jobs, deliver results, maintain generation history, calculate and reconcile charges, prevent abuse, respond to support requests, and diagnose service errors. We do not use Google user data for targeted advertising or sell it to third parties.

When information is shared

We share only the information needed to provide the feature you request. Google handles Google sign-in. Our payment provider processes checkout and payment status. Hosting, storage, and security providers support the website and account infrastructure. AI generation providers receive the prompt, generation settings, and reference media needed to create your requested output. These providers may process information under their own privacy terms. We do not authorize them to use Google user data for advertising, and we do not sell personal information. We may disclose information when required by law or to protect users, the service, or our legal rights.

Storage and retention

Account and sign-in information is kept while your account is active and as needed to provide the service, protect against abuse, and meet legal or accounting obligations. Reference media is eligible for removal after 60 days without being used in a generation. Generated results do not currently have a fixed automatic deletion period. We retain account, usage, and transaction records for as long as needed to provide the service, maintain security, resolve disputes, and meet legal or accounting obligations. Backups may persist for a limited additional period after information is removed from active systems.

Your choices and requests

You can review and update available profile information and manage your API key in your account. You may request access to, correction of, or deletion of personal information by emailing contact@skipshift.net. We may need to verify your identity before responding, and may retain information where required by law or needed to resolve transactions, prevent fraud, or protect the service.

Security and policy changes

We use reasonable technical and organizational safeguards to protect information. No online service can be guaranteed to be completely secure. Do not upload sensitive or confidential material unless you have the right to do so and understand the risks. We may update this policy; material changes will be reflected on this page with a revised update date. Questions or privacy requests can be sent to contact@skipshift.net.