Version 2.3, effective October 29, 2026. This policy explains how AI Rap Video processes personal information when you use our website and AI rap video workbench. Questions and requests go to privacy@ai-rapvideo.dev.
1. Who is responsible for your data
The data controller is Code Canyon LLC, a limited liability company registered in Wyoming, United States, with its address at 30 N Gould St Ste N, Sheridan, WY 82801, USA. We have not appointed a data protection officer. The privacy contact is privacy@ai-rapvideo.dev.
2. What we collect
- Your photo and the choices you make: theme, voice and video length.
- What we generate: the video and its audio, and the status of your task.
- Account data: the email address and name that your Google account shares when you sign in, and your credit balance.
- Order data: the credit pack you bought, the amount, the order reference and the payment status. We never see your card number.
- Technical data: task logs, IP address, browser type and security events.
- Support messages and the references you send with them.
We do not collect your contacts, location, precise device identifiers for advertising, or any biometric template. The face check described below counts and assesses faces in your photo. It does not identify who you are and we keep no face-recognition data.
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Make your video from your photo and the theme you chose, and deliver it | Performing our contract with you |
| Check that a photo shows one clear face and no unsupported content, and check the finished video before it is shown | Our legitimate interest in keeping the service safe, and our legal duties |
| Sign you in, keep your balance and process payments and refunds | Performing our contract, and legal obligations for accounting |
| Investigate reports, prevent abuse and fraud, and keep the service secure | Our legitimate interests and legal obligations |
| Measure which sources bring visitors and buyers (first-party attribution) | Our legitimate interest in understanding our own site |
4. Photos and AI processing
When you create a video, your photo is uploaded, checked for a single clear face and for unsupported content, and then made available through a temporary signed link to our video generation provider KIE, which runs the MiniMax H3 video model. The backdrop, microphone image and rap vocal clip that come with each theme are our own files. The photo check and the check of the finished video use an AI vision service that we call from our own servers.
These providers process the content needed for their functions. We do not use your photos or videos to train any model, and we do not sell them. We cannot promise what a third-party provider does with content it processes, and we choose providers that process content only to provide their service.
Matching a male or female voice to your photo happens in your browser. The photo is not sent anywhere for that step. The match is only a suggestion and you can change it.
5. Cookies and tracking
Strictly necessary cookies keep you signed in and protect your account. They cannot be switched off. First-party attribution records an anonymous visitor ID, the time of your first visit, the landing page, the referring website and campaign parameters, and can link them to your account when you register or buy. Site statistics come from Plausible Analytics, a privacy-focused service hosted in the EU. We use it to count visits and to see how many visitors reach each step of making a video, such as choosing a photo, signing in or buying credits. Plausible sets no cookie and stores nothing on your device. It receives the page address, the referring website, campaign parameters, your browser and device type and an approximate country. It uses your IP address and browser type only to create a daily anonymous identifier and does not store them. It never receives your photo, your name, your email address or an order number. We do this because of our legitimate interest in understanding and improving the service, and we honour the Do Not Track setting of your browser. We do not use advertising or other third-party tracking scripts, so there is no optional cookie to accept or decline.
6. Who we share data with
We do not sell personal information. We share it only with service providers that help us run the service, and they are bound to protect it: Cloudflare (hosting, storage and delivery), KIE (video generation), the AI vision service used for safety checks, Google (sign-in), Plausible Analytics (cookieless site statistics), our payment provider, Stripe or Waffo Pancake (payments, see below), and our support and email provider. We may disclose information when the law requires it or to protect people from harm, for example to report child sexual abuse material to the authorities.
Payments are processed by our payment provider, Stripe or Waffo Pancake. The checkout page shows which one handles your order. When Stripe handles it, Stripe processes the payment for us and we are the seller. When Waffo Pancake handles it, Waffo Pancake acts as the online reseller and merchant of record for your purchase. Your card data is handled by that provider and its PCI-DSS compliant processors and is never stored on our servers.
7. Security
Data is encrypted in transit. Photos and videos are kept in private storage and are reachable only through your signed-in account or short-lived signed links. Access to production systems is limited. If a breach affects your personal information we will tell you and the relevant authority without undue delay and, where the law sets a deadline, within it (for example 72 hours).
8. How long we keep data
| Data | Kept for | Then |
|---|---|---|
| Uploaded photo | About 7 days after upload | Deleted from storage |
| Local browser draft (photo and choices) | 24 hours, or until you clear site data | Removed from your browser |
| Finished video | 30 days after delivery | Deleted from storage |
| Task diagnostic logs | About 14 days | Deleted |
| Account data | While your account is open, and up to 2 years after it is closed | Deleted or anonymized |
| Order, credit and refund records | As long as tax and accounting law requires, normally 7 years | Deleted or anonymized |
| Support messages | 2 years after the case closes | Deleted |
| Reports of misuse and the decisions on them | 3 years | Deleted |
Download the videos you want to keep, because storage is temporary.
9. Your rights
You can ask us to give you access to your data, correct it, erase it, restrict its use, give you a portable copy, object to its use, and withdraw consent you gave. You also have the right to know how your data is used. Write to privacy@ai-rapvideo.dev from the email address of your account. We answer within 30 calendar days and may need to verify that the account is yours. You may complain to your local data protection authority. Some data, such as payment records, must be kept by law, and a request does not override that.
10. Marketing
We do not send marketing email. We send only messages that the service needs, such as order receipts and replies to your support requests.
11. Transfers across borders
Our providers operate in several countries, so your data can be processed outside the country where you live, including in the United States. Where the law requires it, we rely on appropriate safeguards for these transfers.
12. Children
The service is for adults only. You must be at least 18 years old. Do not upload a photo of a child or of anyone under 18. If you believe a photo of a minor was submitted, tell us at privacy@ai-rapvideo.dev and we will review and remove it.
13. Links and changes
Our pages may link to other websites that have their own policies. We may update this policy when the service or our processing changes. For material changes we post the new version with its date at least 14 days before it applies, and we tell signed-in users where the law requires it.
14. Contact
Code Canyon LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Privacy: privacy@ai-rapvideo.dev. General support: support@ai-rapvideo.dev. We monitor both mailboxes on business days.