Privacy Policy

Who we are

AI Rap Video (“we”) runs ai-rap-video.com. We turn photos into short AI videos. This policy covers everything that happens on that site: the photos you upload, any text or settings the product asks for, the video you receive and the emails we send.

You can reach us about anything in this policy at [email protected] .

What we collect

What you give us to make a video

• The photos you upload, plus any topic line, look, beat or voice the product asks for.
• Your email address, which is where the delivery link and the receipt go.
• An account record, if you choose to sign in. Buying does not require an account.

What is created by using the service

• The generated video and the private link that serves it.
• Order records: what was bought, when, how much, which payment method, and the transaction reference returned by the payment provider.
• The result of the content checks on your text and photos — whether the check passed, the reason code and a request id.
• Support messages you send by email.

Technical data

• IP address, browser and device type, the pages you visit, the page that referred you, and campaign parameters such as utm_source .
• That campaign value is stored in a first-party cookie for 30 days so a later visit can be attributed. It is not linked to your name.

We do not ask for your phone number, postal address or date of birth, and we never see or store your full card number.

How we use it

• Render the video you asked for, and deliver it by email.
• Take payment and handle refunds.
• Answer support messages and investigate failed renders.
• Screen prompts, photos and generated content against our prohibited-content rules.
• Detect abuse — for example attempts to bypass payment, or uploads that break our terms.
• Produce aggregate statistics about how the site performs. We do not build advertising profiles of individual visitors.

We do not sell your personal data, and we do not use your photos to train models.

Who processes it

We use a small number of service providers. Each one only receives what it needs for its job:

• AI model providers. Your photos, any text or settings the product asks for, and the generated result are sent to the model providers that make each step. The models differ by product:

• AI Rap Video
  • Google Nano Banana 2.1 nano-banana-2-1
  • ai-music-api lyrics model ai-music-api/generate-lyrics
  • Suno V6 ai-music-api/generate
  • MiniMax H3 minimax-h3/reference-to-video
• Outstanding Tiny Desk Video
  • Google Nano Banana 2.1 nano-banana-2-1
  • Kling 4.0 kling-4.0/reference-to-video

Kie.ai routes the keyframe and video calls; ai-music-api routes the lyrics and song calls for the rap product. This is the only way to make the video, and it means your photos and text leave our own systems.

• Content moderation. Text is checked by Waffo Prompt Sift ; photos are checked by an NSFW image classifier . They receive the text or image being checked and return a verdict; they do not receive your email address. Whether a photo shows exactly one usable face is checked by a face detector that runs on our own servers , as is the number of faces in frames of the finished video. It only counts faces: it does not identify anyone, and nothing is sent to a face-recognition service. Public figures and reported videos are reviewed manually by us.
• Private object storage (Cloudflare R2, or an S3-compatible bucket we operate) for the upload and the finished video. Files there are not publicly listed.
• Payment providers. You pick one at checkout, and only that one handles your payment: Stripe, PayPal, Creem, Waffo Pancake, Alipay or WeChat Pay. They receive the amount and the email address you give us; card details are entered on their side, never on ours.
• Email delivery (Cloudflare Email Service) to send the delivery link and receipts.
• Analytics , only if we have enabled it: Google Analytics, Plausible or a self-hosted Rybbit instance. These receive page views and technical data, not your photos.
• Advertising , only if we have enabled it: Google AdSense, which may set its own cookies on pages where ads appear. We do not enable ads on the generator or the checkout.
• Sign-in providers , only if you use them: Google, either through the sign-in button or the one-tap prompt.

We may also disclose data where we are legally required to, or where it is necessary to investigate abuse or protect someone from harm.

How long we keep it

• Photos: deleted within 24 hours if checkout is not completed, and within 7 days of a completed payment. Deletion is done by a scheduled cleanup job, not by hand.
• Video and delivery link: the link works for 14 days after delivery; the files are deleted after that.
• Order and payment records: kept for as long as accounting and tax rules require, even after the photos and video are gone.
• Support messages: kept while the request is open and for a limited period afterwards, so we can recognise repeat problems.
• Content-check records: the verdict, reason code and request id for checks that run, plus the measurements from the automatic video check — length, frame size, audio level and how many faces were counted in each shot. The frames are written to a temporary directory and deleted when the check ends: we keep the numbers, not the images. The raw prompt is not stored.
• Analytics: aggregate only, on the provider’s own retention schedule.

You can ask us to delete your photos or video sooner by emailing [email protected] with the order number. If the files still exist, we delete them and confirm.

Cookies and local storage

The site works without advertising or analytics cookies. The ones we use are:

• Session cookies — only if you sign in, to keep you signed in.
• Attribution cookie — utm_source , 30 days, first-party, so we know which link brought you here.
• Theme preference — stored in your browser’s local storage, never sent to us.
• Analytics and advertising cookies — only if those integrations are enabled, and only on the pages where they load.

You can block or clear all of these in your browser settings. Blocking the attribution cookie does not affect buying or delivery.

Your rights

Depending on where you live, you may have the right to:

• Know what we hold about you and get a copy of it.
• Correct anything inaccurate.
• Have your photos, video or account deleted.
• Object to a particular use, or ask us to restrict it.
• Receive your data in a portable format.

Email [email protected] and we will respond within 30 days. We may ask for the order number or the email address used, so we can find the right records. You do not need an account to make a request.

If you are in the EU or UK, our legal bases are: performance of a contract (making and delivering your video), legitimate interests (security, abuse prevention, aggregate statistics), and consent where we ask for it (optional analytics and advertising cookies).

Children

The service is for people aged 18 and over, and every person in every photo must be 18 or over. We do not knowingly collect data from children. If you believe a minor’s photo has been uploaded, email us and we will delete it and the associated video.

International transfers

Our providers operate in several countries, so your photos, video and email may be processed outside the country you live in. Where that happens, we rely on the providers’ standard contractual safeguards.

Security

Uploads and downloads travel over HTTPS, storage buckets are private, and access to production systems is limited to the people who run them. No system is perfectly secure, but if a breach affects your data we will tell you and the relevant authority as required by law.

Changes

If we change this policy we update the date at the top of this page. If a change materially affects what happens to your photos, we will say so on this page rather than only editing the text.

Contact

[email protected] — a person reads it.