Privacy Policy | AIRap

At AIRap, we collect, use, store, and protect personal information when you visit airapvideo-ai.com or use the AI rap video generator. This Privacy Policy explains how we handle that information.

1. Data Collection

We collect only the necessary information required to operate, secure, and improve our AI video generation platform. The types of data we collect include:

• Account & Authentication Information: When you register or log in (via email or OAuth providers such as Google / GitHub), we collect your email address, user ID, name, and profile picture to maintain your account and manage subscriptions.
• User Content & Prompts: Text prompts, negative prompts, generation parameters, reference images uploaded for image-to-video generation, and the resulting AI-generated video outputs.
• Usage & Log Data: Technical data regarding how you access and use the Service, including IP address, browser type, device specifications, operating system, access timestamps, feature usage, and generation task statuses.
• Cookies & Tracking Technologies: Essential and analytical cookies to remember user sessions, maintain authentication state, preserve user preferences, and analyze site performance.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may impact certain platform features (e.g., maintaining your logged-in state).

2. Use of Data

We use the collected information strictly for legitimate business and operational purposes, including:

• Providing, executing, and optimizing our AI video generation services and user dashboard.
• Performing automated content safety moderation and policy compliance checks to protect users from harmful or prohibited content.
• Managing user credits, billing, subscriptions, and account maintenance.
• Monitoring platform stability, optimizing GPU inference performance, and troubleshooting system errors.
• Responding to customer support inquiries, feedback, and user reports.

We do not sell, rent, or trade your personal data to third parties for commercial advertising or marketing purposes.

3. Data Storage & Hosting Infrastructure

Your data is stored and processed using secure, industry-leading enterprise cloud infrastructure:

• Application & Database Hosting: User account data, credit balances, and task records are securely stored in PostgreSQL databases and server infrastructure hosted by SOC 2 and ISO/IEC 27001 certified cloud providers located in the United States and the European Union.
• AI Compute & GPU Inference Providers: Text prompts and image inputs for video generation are processed via high-security serverless GPU infrastructure and certified AI model inference partners. Data transmitted for inference is processed in transient memory and is not used to train public foundation models without user consent.
• Payment Information: All financial transactions and payment card details are collected and processed directly by our PCI-DSS Level 1 compliant Merchant of Record / payment processors (e.g., Creem, Stripe). We do not store or process raw credit card numbers or banking secrets on our servers.

4. Data Security & Encryption Measures

We implement rigorous technical and organizational security measures to protect your personal information from unauthorized access, loss, misuse, or alteration:

• Encryption in Transit: All data transmitted between your browser and our servers, as well as between our servers and third-party APIs, is encrypted using modern TLS 1.3 / HTTPS cryptographic protocols.
• Encryption at Rest: Database records, user media files, and generated video assets stored in our cloud storage buckets are encrypted using industry-standard AES-256 encryption.
• Access Controls & Least Privilege: Access to backend systems and production databases is restricted to authorized personnel under strict Role-Based Access Control (RBAC) and multi-factor authentication (MFA).
• Automated Threat & Vulnerability Monitoring: We perform continuous security logging, vulnerability audits, and rate-limiting to prevent brute force and unauthorized access attempts.

5. Data Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

• Account Information: Retained for the duration of your active account. If you request account deletion, your personal account records will be permanently erased within 30 days.
• Generated Videos & Uploaded Images: Media generated or uploaded by users is stored in your personal project history for active access. Users can manually delete their generation history at any time from the dashboard. Inactive media files may be scheduled for permanent purging after 90 days.
• Prompt & Moderation Logs: Prompts, negative prompts, and automated safety moderation logs are retained for up to 90 days for audit logging, abuse prevention, and compliance verification, after which they are automatically anonymized or purged.

6. Data Sharing & Third-Party Processors

We share your data only with trusted service providers strictly necessary to deliver the Service:

• AI Computing Partners: Secure enterprise GPU inference clusters for executing generative video diffusion models.
• Payment Processors: Creem / payment gateways for secure checkout and subscription billing.
• Cloud Infrastructure & Hosting: Vercel, AWS, and Cloudflare for website hosting, CDN delivery, and database management.
• Content Moderation Services: Automated AI safety moderation engines to detect and prevent abusive or illegal content generation.
• Legal Compliance: When strictly required by valid legal process, court orders, or applicable statutory laws.

7. Your Rights & Data Deletion Requests

Depending on your location (including rights under GDPR, CCPA, and applicable privacy regulations), you have the right to:

• Access and receive a copy of the personal data we hold about you.
• Request correction or updating of inaccurate personal information.
• Request the permanent erasure (deletion) of your account, history, and personal data.
• Restrict or object to specific types of data processing.
• Export your data in a structured, commonly used machine-readable format.

To exercise any of these rights or to submit a data deletion request, please email us at [email protected]. We will verify your identity and process your request within 30 days.

8. Children's Privacy

Our Service is not directed to individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information or allow content generation from minors. If you believe a child has provided us with personal information, please contact us immediately so we can take steps to remove such data.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect technological, operational, or legal changes. Any updates will be posted on this page with an updated "Last updated" date. Continued use of the Service following such changes constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data security practices, please contact us at: