This Privacy Policy explains how Hex Pixel Kft. ("we", "us", or "our") collects, uses, and protects your information when you use bj4.me (the "Service"). By using our Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Account Information
- Email address (optional) - collected when you register via email or Google OAuth
- Authentication data - stored securely via Firebase Authentication
1.2 User-Uploaded Content
- Images - you may upload images for AI video generation. We use Google Cloud Vision API to detect and automatically reject any images containing human faces to prevent misuse
- Generated videos - AI-generated content created from your uploads
1.3 Third-Party Account Links
- Fanvue account information - if you link your Fanvue account, we collect your Fanvue user ID, handle, and subscription status to provide subscriber benefits
- Telegram information - if you use Telegram for payments, we collect your Telegram user ID and username
1.4 Analytics Data
- GA4 Client ID - collected from the _ga cookie or localStorage fallback
- Usage events - interactions with our Service for analytics purposes
- Device and browser information - collected automatically for analytics
1.5 Transaction Data
- Purchase records - token purchases and usage history
- Project data - records of your video generation projects
2. How We Use Your Information
We use the collected information for the following purposes:
- To provide and maintain our Service
- To process your video generation requests
- To manage your account and provide customer support
- To process payments and deliver purchased tokens
- To verify Fanvue subscription status and provide subscriber benefits
- To send transactional emails (account verification, password reset)
- To analyze usage patterns and improve our Service
- To detect and prevent fraud, abuse, and policy violations
- To comply with legal obligations
3. Third-Party Services
We use the following third-party services to operate our platform:
| Service | Purpose | Data Shared |
|---|
| Firebase / Google Cloud | Authentication, database, analytics | Email, usage events |
| Amplitude | Product analytics | User events, properties |
| Google Analytics 4 | Website analytics | Client ID, user events |
| SendGrid | Email delivery | Email address |
| Fanvue | Creator platform integration | OAuth tokens, subscriber data |
| Google Cloud Vision | Face detection (for rejection) | Uploaded images |
| Telegram | Payment processing | User ID, purchase data |
| Amazon Web Services (S3) | Media storage | Processed images, generated videos |
Each third-party service has its own privacy policy governing how they handle your data. We encourage you to review their policies.
4. Data Storage & Security
4.1 Where We Store Data
- Firebase Authentication - user credentials and authentication data
- Cloud Firestore - user statistics, project data, and transaction records
- AWS S3 (eu-north-1 region) - preprocessed images and generated video files
4.2 Security Measures
We implement industry-standard security measures to protect your data, including:
- Encrypted data transmission (HTTPS/TLS)
- Secure authentication via Firebase Auth
- Access controls and authentication for all APIs
- Regular security reviews and updates
While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
5. Cookies & Tracking
We use the following cookies and tracking technologies:
- GA4 cookies (_ga) - for website analytics and measuring user engagement
- Firebase authentication tokens - to maintain your logged-in session
- localStorage - as a fallback for analytics when cookies are unavailable
You can control cookies through your browser settings. Disabling cookies may affect some functionality of the Service.
6. Data Retention
- User accounts and projects - retained indefinitely while your account is active
- Generated videos - stored until you delete them or your account is closed
- OAuth states - automatically expire after 10 minutes
- Analytics data - retained according to each analytics provider's policies
You may request deletion of your data at any time by contacting us (see Section 9).
7. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR):
- Right to access - request a copy of your personal data
- Right to rectification - request correction of inaccurate data
- Right to erasure - request deletion of your personal data
- Right to restrict processing - request limitation of data processing
- Right to data portability - receive your data in a structured format
- Right to object - object to processing based on legitimate interests
- Right to withdraw consent - withdraw consent at any time where we rely on consent
To exercise these rights, please contact us at give@bj4.me. We will respond to your request within 30 days.
8. Age Restriction
Our Service is intended for adults aged 18 years and older. We do not knowingly collect personal information from anyone under the age of 18. If you are under 18, do not use our Service or provide any personal information.
If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information immediately. If you believe we have collected information from a minor, please contact us.
9. Contact Information
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Hex Pixel Kft.
Petofi Sandor street 22/a
7751 Hungary
Email: give@bj4.me
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
We encourage you to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.
By using bj4.me, you acknowledge that you have read and understood this Privacy Policy.