Privacy Policy
2026-10-09 · GzEric
1. Scope and contact
This policy covers the Baimo Director desktop app and wd.edria.cn, provided by publisher GzEric. For privacy and data requests, contact info@edria.cn with “Privacy request” and the relevant service. Microsoft Store, payment services and your selected model providers also apply their own privacy rules.
2. Projects and storage on your device
Scenes, shots, dialogue, imported media, assets and autosaves are primarily stored on your device. Basic editing, playback, project saving and video exports do not automatically send projects to us. Project bundles may include your selected images, audio and models; you choose who receives shared files. Language preferences, settings and API keys are also stored locally. Where desktop secure storage is available, device private keys are encrypted locally and are not uploaded in activation requests.
3. Activation and trial verification
First purchase activation sends your purchase credential, device identifier, public key, request time, nonce and signature proof to our website to verify rights and device seats. The server stores order-linked device identifiers, device authorization certificates and activation dates. Manual BM2 issuance uses the customer device identifier, name or label, term and license ID; the seller keeps these in local issuance records. Paid licenses work offline within their validity period. Trial claims and verification at launch and every 5 minutes while running send a product-specific machine digest, device identifier, public key and signature proof; legacy trials may include the first-run time. The trial server stores the machine digest, trial dates and legacy flag, not raw hardware identifiers, private keys or project content. Network addresses may be used for rate limiting and security.
4. Purchases, email and support
Website purchases are processed through Dodo Payments. We receive order IDs, customer names/labels and email addresses, plan, amount/currency, payment and refund status, order time and delivery information needed for licensing and support. The app does not collect full payment-card numbers or security codes. Resend delivers license and related service emails and processes recipient addresses and email content. Information you send to support, including contacts, versions, errors and attachments, is used to resolve your request. Do not send private keys, full payment-card details or unnecessary private media.
5. Optional AI and MCP
AI requests occur when you configure and use a model service. Requests may contain your conversation, scene summary, object/shot information and tool results needed for the task, and authenticate to that service with your API key. External model providers or your configured relay process data under their rules and may charge fees; our licensing server does not receive these conversations on their behalf. MCP requires you to enable a connection. Connected clients can read and edit projects and invoke authorized capabilities. Connect only trusted clients and disable the connection when finished. You control models, media and third-party clients you add.
6. Updates, website and third parties
Website desktop releases request version manifests and installers from our website when checking updates. Windows Store releases use Microsoft Store for installation and updates. When you visit the website or call activation/trial endpoints, infrastructure such as Cloudflare processes network addresses, request times, URLs and response/security logs. Server error records may include operation types, status and order-ID suffixes. Creator referral links use attribution cookies lasting up to 30 days; partner dashboards use session cookies. Clearing cookies removes browser records, not completed orders. Core desktop editing does not depend on these cookies. We do not sell personal information or use projects for targeted advertising.
7. Website analytics
The website uses Cloudflare Web Analytics for page visits and Google Analytics 4 for page views, acquisition sources, blog-to-download journeys, installer clicks, and purchase-flow steps. Google may use cookies and device or location data. An installer click does not prove installation; a successful purchase event is recorded only after the website verifies payment. The analytics events we configure do not send form contents, email addresses, order or payment IDs, or license credentials. You can limit cookies in your browser settings.
8. Retention and deletion
You manage local data. Deleting app data can remove cached projects, API keys and device identity: save complete projects first, and do not delete identity to obtain another trial. Order, license, email-delivery and support records are retained as needed for service, accounting/refunds, disputes and applicable legal duties; the current server does not automatically erase them when a license expires. Trial digests and claim dates remain stored to maintain one trial per machine and are not automatically deleted on reinstall or expiry. Infrastructure and third-party logs follow their service settings and rules. You may request access, correction, deletion, restriction or other applicable rights. We verify necessary identity and assess what can be deleted. If some records must remain for legal, licensing or anti-abuse reasons, we explain why. Clearing a local license does not release a server seat.
9. International processing and choices
Cloudflare, Dodo Payments, Resend, Microsoft and your chosen AI services may process necessary data in different countries or regions. You can disable AI/MCP, avoid sharing private media, or use Basic without claiming a trial. Paid Pro works offline within its term after first activation. Subject to applicable law, we process necessary information to provide requested services, for security and anti-abuse, and to meet legal duties. Optional processing requiring consent is your choice; you can withdraw it where applicable. Contact the email above for requests or complain to your local supervisory authority where applicable.
10. Children and security
The product is intended for film creators and production teams and is not directed at children under 13. Guardians who believe a child provided personal information can contact us for review. Encrypted network connections and device-signature verification protect licensing; keep your device and connected clients secure. No system can guarantee absolute security.
11. Policy changes
Policy version: 2026-10-09. Material changes to data use or services will be reflected here with an updated date and additional notice or consent where required. Updating this policy does not automatically alter existing purchases or licenses.