Privacy Policy

Last updated: July 27, 2026

Bottola AI ("Bottola AI", "we", "us") operates the AI image, video, and audio generation platform at app.bottola.ai and bottola.ai. Bottola AI is a product of, and operated by, Everest Information Technology. This policy explains what information we collect, why we collect it, and how it's handled. By using Bottola AI, you agree to this policy.

1. Information We Collect

Account information

Name, email address, and password (stored hashed — we never see or store your plain-text password).
If you sign in with Google, GitHub, or Discord, we receive your name, email, and profile picture from that provider. We only ever request the minimum access needed to identify you.
An avatar image, if you upload one.

Content you create

The prompts, reference images, and generation settings (model, resolution, style) you submit.
The images, videos, and audio your generations produce.

Usage & account activity

Your credit balance and a transaction history of how credits were earned or spent.
Subscription plan, billing period, and payment status (see Payments below — we do not store your card details).
Likes, favorites, comments, follows, and achievement/level progress, if you use these community features.
The IP address you registered from. We use this only to limit abuse of free welcome credits (e.g. one person creating many accounts) — it is never sold or used for advertising.

2. How We Use Your Information

To operate your account: authentication, credits, subscriptions, and generation history.
To process your generation requests (see "AI Processing" below).
To send essential account emails: email verification, password resets, and payment receipts.
To detect and reduce abuse — fake accounts, credit farming, and fraudulent payments.
To improve the product based on aggregate usage patterns (we do not read your private prompts for marketing purposes).

3. AI Generation Processing

Bottola AI does not run generation models on our own servers. When you submit a prompt (and any reference images), it is sent securely to our AI processing pipeline to produce your result, then the output is returned to us and stored on our own infrastructure. Prompts are not used to train third-party foundation models beyond what is required to generate your specific request.

4. Where Your Content Is Stored

Your generated images, videos, and uploads are stored on self-hosted object storage that we control directly — not a shared third-party cloud media bucket. Access to raw stored files is restricted to what's needed to serve your own account and, if you choose to publish something, to display it publicly on Explore.

5. Content Credentials (C2PA)

Every image and video Bottola AI generates has a C2PA Content Credentials manifest embedded directly in the file, declaring it as AI-generated content (digital source type: trainedAlgorithmicMedia) along with the model used and a generation timestamp. This follows the C2PA (Coalition for Content Provenance and Authenticity) open standard for media transparency.

This credential is currently signed with our own certificate. We are working toward a certificate trusted by the wider C2PA verification ecosystem; until then, tools like Content Credentials Verify will show the manifest as present but not yet independently trust-chain verified. The underlying provenance data — that the file came from Bottola AI and was AI-generated — is genuine and tamper-evident either way.

6. Payments

Subscription payments are processed by SSLCommerz, a licensed Bangladeshi payment gateway. Your card, mobile banking, or other payment details are entered directly on SSLCommerz's secure payment page — they never pass through or get stored on Bottola AI's servers. We only receive confirmation that a payment succeeded or failed, and a transaction reference number.

7. Third-Party Services We Use

We rely on a small number of specialized providers to run the service. Each only receives the minimum data needed for its purpose:

SSLCommerz — payment processing.
Resend — delivering verification, password-reset, and receipt emails.
Google, GitHub, Discord — optional sign-in methods, if you choose to use them.
Cloudflare Turnstile — a privacy-friendly bot-check on registration; it does not track you across other websites.

8. Cookies & Sessions

We use a session cookie to keep you signed in and a CSRF-protection cookie for security. We don't use third-party advertising or cross-site tracking cookies.

9. Publishing to Explore

If you choose to publish a generation to Explore, it becomes visible to other users along with your name and profile picture. See our Terms of Service for the full publishing policy, including how this differs between free and paid accounts.

10. Data Retention & Deletion

You can delete your account at any time from your app Profile → Settings. This removes your login credentials and profile information. Content you've already published to Explore, or that other users have already interacted with (likes, comments, downloads), may continue to exist independently of your account, since it was shared publicly at your own direction. We retain payment transaction records as required for accounting and fraud-prevention purposes.

11. Your Rights & Choices

You can view and update your profile information at any time from Settings.
You can unpublish any of your content from Explore at any time.
You can disconnect a connected social login (Google/GitHub/Discord) as long as you have another way to sign in.
You can request a copy of your account data or request deletion by emailing us — see Contact below.

12. Children's Privacy

Bottola AI is not directed at children under 13, and we do not knowingly collect information from anyone under that age. If you believe a child has created an account, contact us and we'll remove it.

13. Changes to This Policy

We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above.

14. Contact Us

Questions about this policy or your data? Email us at support@bottola.ai.

This policy describes Bottola AI's actual data practices as of the date above. It is provided for transparency and has not been reviewed by legal counsel for jurisdiction-specific compliance; it should not be treated as a substitute for professional legal advice.