Privacy Policy
Last updated: October 29, 2026
Application name: BomGo (also shown as BomGo Studio) · Website: https://bomgoai.com · This policy covers the BomGo web app, including Sign in with Google.
This policy explains what we collect, what we do with it, where it is stored, and how you can manage it. In one sentence: your material is used to complete your tasks — not to train models, and not sold.
Who we are
BomGo is a web-based AI audio creation studio (music generation, voice-over and dubbing, sound effects and foley, mixing). It is operated by Hangzhou Chengchi Culture Media Co., Ltd., which is the data controller for the information described in this policy. You can reach us about anything in this policy at [email protected].
Data we collect, why, and for how long
| Data | Why we need it | Kept for |
|---|
| Account data: email address, phone number, username, password (stored hashed) or Google account identifier | To create your account, sign you in, and let you recover access | While your account exists; deleted or anonymised after you request account deletion, except where law requires longer retention |
| Google Sign-In data: email address, name, profile picture URL, Google account identifier | Only to create your account, sign you in, and show your name and avatar | Same as account data |
| Content: text you type, files you upload, audio generated, and the associated task records | To run the generation you asked for, let you listen and download results, and restore your work | Until you delete it, or the retention period after account deletion |
| Usage and billing data: features used, credits consumed, order and subscription records | To meter usage, bill correctly, produce statements, and answer billing questions | As required by tax and accounting rules |
| Device and log data: IP address, browser type, access time, error logs | Security, fraud and abuse prevention, troubleshooting | Generally 6 months |
What we collect
Account information: the username, phone number, or email you register with, and your credentials (passwords are stored encrypted; we do not keep plaintext). Usage information: which features you use, when, how many credits are consumed, and task status and results. Content information: the material you upload, the descriptions you write, the output generated, and processing records for them. Device and logs: access time, IP address, browser type, and error logs — used for security and troubleshooting.
How we use it
We do not use your content to train models, and we do not sell it to others. We use the data we collect only to run your tasks and deliver the results; to bill credits by actual usage and produce statements and usage details; to troubleshoot and restore data when you have a problem; to prevent account theft, fraud, abuse, and attacks; to send service notices or product updates with your consent.
Where your material is stored
Material and output are stored on our own storage and domestic cloud services, isolated per account — your directory and other users’ directories are not visible to each other. Staff access to your material requires authorization, and access is logged. When material is deleted, it is first moved to a backup area and kept for a period before scheduled cleanup. This is so that an accidental deletion can still be recovered. Deletion therefore does not mean the data is physically erased from disk in the same second.
AI and third-party models
Generation is provided by third-party model services we integrate. To complete generation, your description text and, where necessary, reference material are sent to the relevant model provider for processing. We choose providers with clear constraints on data use. We do not directly control third-party providers’ technical processing; their data practices are governed by their own policies.
Sharing and public content
Works or links you actively share on the Platform are visible to other users — including the work itself and your public nickname. Share links do not contain your account credentials, credit balance, or purchase records. You can stop sharing at any time. After that, new visitors cannot open it, but content already saved or forwarded cannot be recalled.
Retention and protection
Account information is retained after deletion for the period required by law, then deleted or anonymized. We protect data through access control, encrypted transmission, and internal audits. Please understand that no system can guarantee absolute security. If a data security incident occurs, we will notify you of the incident, its possible impact, and the measures we take, as required by law.
Your rights
Access and correction: you can view and edit your account information in account settings. Export: you can download the output you generated. Deletion: you can delete your material and works, and request account deletion. Withdraw consent: you can turn off marketing notifications at any time; this does not affect the availability of the service itself.
Minors
The Platform is intended for users with full legal capacity. If you are a minor, please use it with the consent and supervision of a guardian, and do not upload sensitive information about yourself or others.
Google Sign-In and Google user data
Summary: we use Google user data only to sign you in and to display your name and avatar. We do not use it for advertising, we do not sell it, and we do not use it to train AI models.
| Google user data | What we do with it | Shared with |
|---|
| Email address | Identify your account and sign you in | Not shared |
| Name and profile picture URL | Show your display name and avatar in the app | Not shared |
| Google account identifier (sub) | Link the Google account to your BomGo account | Not shared |
You may sign in with your Google account. When you do, we receive your email address, name, profile picture URL, and a unique identifier for that Google account. We use them only to create and sign you in, and to show your display name and avatar. We do not use this information for advertising and do not sell it. We do not share it with third parties except as necessary to provide the service you requested (for example, sending a generation task to a model provider). Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we use it only to provide or improve user-facing features that are visible in this app. You can revoke our access at any time from your Google account’s third-party apps page. After revoking, you can still sign in with your username and password, and you may request account deletion in the app.
How long we keep data
Account information: kept while your account exists; after deletion, kept for the period required by law, then deleted or anonymized. Your material and output: removed when you delete them, or after the retention period following account deletion. Deletion first moves data to a backup area and is cleaned up over backup cycles of no more than 90 days. Access and error logs: generally kept for 6 months for security auditing and troubleshooting. Payment and billing records: kept for the period required by tax and accounting regulations.
How to delete your data
You can delete individual works and files in the app at any time. To delete your entire account and the data attached to it, email [email protected] from the address you registered with, or use the support channel in the app. We will confirm the request and complete deletion within 30 days, except for records we are required by law to keep (for example payment records). You can also revoke our access to your Google account at any time from your Google account’s third-party apps page.
Updates and contact
If this policy is updated, we will post a notice on the Platform and update the date at the top. For material changes, we will notify you more prominently. If you have questions about this policy or wish to exercise the rights above, email us at [email protected] or contact us through the Platform’s ticket or support channel.
AI content policy
This Platform generates audio (music, voice, sound effects) from material you provide. To use it you must own or have permission for everything you upload, and you must have the consent of any real person whose voice, likeness or performance appears in it.
The following are prohibited and will lead to immediate suspension: non-consensual intimate imagery (including AI-generated or AI-altered intimate or sexual content of a real person without their consent), sexual content involving minors, impersonation of a real person without consent, fraud, harassment, and any use that violates applicable law.
We do not use Google APIs, Google user data, or Google sign-in for any of the prohibited uses above. Google user data is used only to create and sign you in, and to show your name and avatar.
We may review, refuse, remove or restrict generated content that appears to violate this policy, and we may report serious violations to the authorities.
Reporting a violation
If you believe content on the Platform violates this policy, contact us through the support channel and we will review it.