Privacy Policy

Privacy policy for Bno AI
Apr 23, 2026

1. Overview

This Privacy Policy explains how Bno AI ("Service", "we", "us", or "our") collects, uses, stores, and shares personal data when you use our website and AI features.

2. Data We Collect

We may collect:

  • Account Data: name, email, authentication identifiers, profile settings.
  • Usage Data: prompts, generation actions, feature events, logs, and timestamps.
  • Device and Technical Data: IP address, browser, OS, device identifiers, error diagnostics.
  • Cookies and Similar Technologies: session cookies, security cookies, analytics cookies, preference cookies.
  • Payment Data: billing metadata and transaction records processed by payment providers (we do not store full card numbers).
  • User Content: uploaded files, reference images, prompts, and generated outputs.
  • Support Communications: messages and attachments sent to support.

3. How We Use Data

We use personal data to:

  • Provide and maintain the Service.
  • Authenticate users and protect account security.
  • Process payments, subscriptions, and credits.
  • Detect abuse, fraud, and policy violations.
  • Improve model quality, user experience, and reliability.
  • Comply with legal obligations and enforce our Terms.
  • Communicate product, billing, and support updates.

Depending on context, we process data based on:

  • Contract performance.
  • Legitimate interests (service security, anti-abuse, analytics, product improvement).
  • Consent (where required, such as optional marketing or non-essential cookies).
  • Legal obligations.

5. Cookies

We use cookies and similar technologies to keep you signed in, secure sessions, remember preferences, and analyze traffic. You can manage cookies through browser controls, but some features may not function properly if disabled.

6. Data Sharing

We do not sell personal information. We may share data with:

  • Hosting, analytics, customer-support, payment, and AI infrastructure vendors under contractual safeguards.
  • Professional advisors and auditors where needed.
  • Government authorities or other parties when legally required.
  • Acquirers or successors in merger, acquisition, financing, or asset transactions.

7. Data Retention

We retain personal data only as long as necessary for business, legal, and security purposes, including account maintenance, fraud prevention, tax/accounting requirements, and dispute handling.

8. International Transfers

Your data may be processed in countries other than your own. Where required, we use contractual or legal safeguards for cross-border transfers.

9. Security

We apply technical and organizational security measures, including encryption in transit, access controls, and monitoring. No system is absolutely secure, and you should also protect your account credentials.

10. Your Rights

Subject to local law, you may have rights to:

  • Access, correct, delete, or export personal data.
  • Restrict or object to certain processing.
  • Withdraw consent where processing is consent-based.
  • Lodge a complaint with a supervisory authority.

To exercise rights, contact us at the email below.

11. Children

The Service is not directed to children under 13 (or higher age where required by local law). If we learn we collected personal data from a child without valid consent, we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version is effective when posted on this page.

13. Contact

For privacy questions or requests: