Privacy
Published revision: 2026-10-04
Responsible organization
«ՏՈՆՈՅԱՆ ԷՅ ԱՅ» ՍՊԸ provides Bubu Studio AI. Its registered address and registration identifiers appear on Company / Requisites. For account or data requests use support@tonoyanai.com.
Accounts and security
The backend processes account email/display name, authentication verification records, sessions, verification/reset records and security/audit events to operate accounts and protect access. MFA enrollment is processed for protected reviewer access. Public pages do not expose existing passwords, bearer tokens or MFA material. During authenticated MFA enrollment, the newly issued setup key is shown privately once and cleared after verification or logout.
Projects and media
The application stores project metadata and imported/generated media for supported project, preview and export functions. Local import/playback/export uses local files; this does not mean all local files are uploaded. Backend generation uses the selected request and media required for that function. Generation and provider calls are disabled in this release.
Billing and processors
The backend maintains subscription, entitlement, credit, payment-reference and reconciliation metadata. When activated, Paddle or YooKassa processes its own payment transaction under its role and terms; Bubu does not collect full card numbers in these pages. Hosting, authentication/mail delivery and configured AI providers process data needed for their specific function. No payment or AI provider is contacted by this review site.
Purpose, retention and requests
Data is used for requested product functions, delivery, billing records, security, troubleshooting and support. Retention depends on the purpose, security and applicable record-keeping obligations; no unsupported fixed deletion period is promised. Contact support for access, correction or deletion requests; verification of the request may be necessary and mandatory retention may limit deletion.
Browser storage and contact
These pages contain no advertising analytics or third-party trackers. Account pages hold session access in memory only and clear it on exit/logout; authentication uses same-origin requests. Support correspondence is processed when you contact support. Do not send secrets or unnecessary sensitive documents.