Privacy Policy | AI Rap Video

1. Scope and privacy contact

This policy describes how AI Rap Video processes personal information for rap-videoai.com. For access, correction, deletion, privacy complaints or questions about processing, contact support@rap-videoai.com.

2. Information we process

• Accounts and sign-in: name, email, profile image, account identifiers and email-verification status. Email/password registration involves a password hash, not a readable password. Google sign-in can provide your Google account identifier, name, email, verification information and profile picture, together with authentication credentials or tokens required for sign-in. We do not receive your Google password.
• Generation inputs: the two uploaded reference photos, text prompt or story, chosen background reference, language, model, duration, resolution, aspect ratio and template selections. Photos can identify a person and may contain embedded metadata; do not include unnecessary sensitive information.
• Generation records: task identifiers, timestamps, processing status, generated lyrics, generation instructions derived from your input, generated videos and preview images, storage references, error information and credit consumption. The current generator does not accept voice uploads; generated vocals and music may be included in videos.
• Safety checks: content or a derived image copy submitted for input review, content hashes, provider task identifiers, policy/model identifiers and review status. These checks are not a verification of a depicted person's identity or consent.
• Transactions: order identifiers, purchased packages, amount, currency, payment provider, payment status and identifiers, billing information returned with a transaction, credit grants, spending, refunds and related reconciliation records.
• Technical and usage information: IP address, browser/user-agent, session and cookie identifiers, request times, errors and service logs. Registration attribution may include referral source, campaign parameters, language and approximate country information derived from the request. Browser storage may hold preferences or draft/task state to help resume use.
• Support: emails, information and attachments you provide in support, privacy, refund, reporting or appeal correspondence.

3. Purposes and legal bases

We use the necessary information to authenticate you, generate and deliver videos, keep task history, grant and account for credits, process payments and refunds, and respond to support requests. Where a legal basis is required, these activities generally support performance of the service contract. Security, abuse prevention and troubleshooting support legitimate interests where that basis is available and balanced against your rights. Financial retention and valid authority requests may involve legal obligations. Consent applies where required, including to non-essential tracking; you can withdraw it without affecting processing that was lawful before withdrawal.

Do not upload another person's photo without explicit permission for AI processing. We do not operate a model-training workflow for user inputs or outputs. Third parties process data under their own applicable terms; this is not a promise that all suppliers erase data immediately or have identical training and retention practices.

4. Cookies and Google Analytics

We use cookies and similar browser storage for login sessions, security, language and appearance preferences, and to remember a cookie choice where that control is available. Blocking necessary cookies may prevent sign-in or generation from working.

We use Google Analytics (GA4) to understand visits, traffic sources, page interactions, device/browser characteristics and service usage, and improve the website. Google may receive browser and device information, the page URL and referrer, online identifiers, event data and IP information involved in the connection. GA cookies can recognise a browser across visits. We do not intentionally send uploaded photos, stories, generated lyrics or videos, passwords or full card information to GA. Avoid placing personal information in page URLs.

Google's processing is described in the Google Privacy Policy and information about partner sites. You can manage cookies through your browser and use Google's Analytics opt-out browser add-on. Where displayed, the cookie banner and the Footer's Cookie Settings control allow you to revisit your choice. We do not offer a separate privacy management centre. Non-essential analytics must be subject to consent where applicable law requires it; browser blocking and opt-out tools may affect measurement without stopping necessary service processing.

5. Service providers and disclosures

We share information needed for these purposes with the following services:

• SeeAPI and its underlying models: input-photo safety checks, story checks, Gemini-family lyric preparation and Seedance video generation. This can include photos or derived review copies, stories, lyrics, background references, generation settings and the resulting content. See the model disclosure, SeeAPI data handling guide and privacy policy.
• Kie.ai and its underlying video model: AI Zombie generation using reference photos, the template's generation instructions and selected settings. See Kie.ai privacy information.
• Cloudflare: hosting/network delivery and R2 storage of reference photos, generated videos and previews, together with associated technical request data. See Cloudflare's privacy policy.
• Google: Google sign-in when you choose it, and GA4 as described above. These have distinct authentication and analytics purposes.
• Waffo Pancake: payment processing as Merchant of Record, including payment details submitted at checkout and information needed for orders, taxes, fraud prevention and refunds. We receive transaction and status information. Full card numbers and card security codes are processed by the payment service, not directly stored by AI Rap Video.
• Email delivery and support infrastructure: information needed to deliver account or service emails and handle your correspondence. The configured delivery provider receives the recipient address and message content required for that communication.

We do not sell your uploaded content or personal information. We may disclose necessary information in response to lawful requests, to protect users and enforce our policies, or as part of a lawful transfer of the service with applicable protections and notices. A downloaded video you choose to share is also subject to the recipient platform's practices.

6. Retention: files and records are different

Uploaded reference photos: 3 days from their original storage time in our R2 storage. Photos are stored after input checks pass when you submit generation. Reusing the same stored object does not reset its clock. Where a task uses two photos stored at different times, access authorisation is limited by the earlier expiry. Photos sent for safety review can reach a provider before an R2 generation copy exists.

Generated videos: 7 days from their successful save time in our R2 storage. The task records that storage timestamp; legacy successful tasks without it use their existing successful-update timestamp. The service stops playback/download access after expiry, even if the storage lifecycle cleanup has not yet finished. Generated preview images follow the video's access expiry. Opening a task or making a preview does not extend video availability.

The 3-day and 7-day rules concern our hosted media. Physical removal follows the storage lifecycle process and may not occur at the exact second access expires. These rules do not mean that account records, task descriptions, lyrics, moderation records, orders, credit ledgers, support messages or third-party copies are deleted on the same schedule. Purchased credits never expire; that does not imply permanent media storage.

Third-party copies have separate retention. SeeAPI's published data handling guide currently states that stored input/output files, task information and moderation results have no scheduled automatic expiry, while retained API request records and logs have a 60-day period. Our R2 expiry does not trigger deletion in SeeAPI or Kie.ai. Contact support to request assistance with deletion affecting providers; we cannot promise that every copy or legally required record can be immediately erased.

We retain other records for as long as needed for the relevant service, account, transaction, dispute, safety or legal purpose. No single automatic deletion deadline applies to all these records. Where deletion is legally required and no retention exception applies, we will handle a verified request under applicable law.

7. Storage and security

The service uses HTTPS, authenticated account access, ownership checks for private media, time-limited provider access to reference files and password hashing for password-based accounts. Authorised service providers necessarily receive data for processing. No online service can guarantee absolute security. We do not claim a security certification. Please protect your sign-in credentials and contact support if you suspect exposure.

8. Your rights and deletion requests

Depending on your location, you may have rights to access or obtain a copy, correct or delete information, restrict or object to processing, request portability, withdraw consent, and complain to a competent data-protection authority. Email support@rap-videoai.com, identify the account/data and explain the request. We may verify ownership or authority and request proportionate additional information. Requests are considered under the deadlines and exceptions required by applicable law.

There is no promise of a one-click deletion or automatic deletion from every supplier. Media expiry does not close your account or erase financial records. Information may need to be retained for legal obligations, fraud prevention or unresolved transactions and claims; we will explain applicable limitations when responding. Exercising lawful privacy rights does not remove your mandatory consumer rights.

9. International processing

Hosting, AI, authentication, analytics and payment providers may process data in countries other than where you live, whose laws may differ. Any legally required transfer safeguards must be addressed for the relevant provider and destination. We do not claim that a particular standard-contractual-clause agreement, adequacy decision or certification applies to every transfer. Contact support for information about the arrangements relevant to your request.

10. Children

The service is intended for users aged 18 or older. We do not knowingly solicit personal information from children. If you believe a child has supplied information, or a child's likeness has been used improperly, contact support with enough information to locate the record. We will assess the request and applicable protective or deletion measures. Child sexual exploitation and sexualised depictions of minors are prohibited under the AUP.

11. Updates and contact

We update this page and its date when our practices change, and provide additional notice or request consent where required by law. Contact support@rap-videoai.com for all privacy and support enquiries. See also Contact Us and the Terms of Service.