Privacy Policy

PhotoRapAI at photorapai.com turns your photos and personal details into AI-generated rap videos. This policy explains what information we handle when you use the site and how you can contact us about it.

Information We Handle

We use this information to sign you in, create and deliver videos, manage credits and payments, troubleshoot requests, secure the service and understand site usage.

Photos, Drafts and Generation

Photo previews and unfinished drafts are stored on your device in browser storage. A draft can include selected photos, names, messages and settings. Drafts expire one hour after their last save and are removed when the studio next accesses storage; an accepted generation request also clears its draft. You can remove them sooner through your browser's site-data settings. A task ID may be kept in session storage to restore progress after a reload.

When you submit a generation request, the photos and story details needed to create it are sent to our server and to WaveSpeedAI, which provides the lyric, music, video and lip-sync stages. We store task settings, story details, generated lyrics and tracking information in our database, but not copies of the original photo files there. The provider hosts intermediate and final media under its own retention practices. Download any result you want to keep; availability is not permanent.

Service Providers and Analytics

We use Supabase for account, credit, order and generation records; WaveSpeedAI for generation and media hosting; Stripe for checkout; and sign-in providers such as Google when you choose them. These providers receive information needed to perform their services and may process it in other countries.

Production pages use Microsoft Clarity for usage analytics, including session replay and heatmaps. Google Analytics and Rybbit may also run when configured. Browser cookies and storage are described in our Cookie Policy.

Retention, Security and Your Choices

We keep account, payment and generation records as needed to operate the service, support users, prevent abuse and meet applicable recordkeeping requirements. We do not currently apply a fixed automatic deletion period to generation records. Provider media retention is separate. We use authentication and access controls to restrict account and task access.

You can choose not to upload photos, manage browser storage, and ask us to access, correct or delete your information, subject to applicable law and necessary recordkeeping. We may verify your account before fulfilling a request.

Contact and Changes

For privacy questions or requests, email [email protected]. We may update this policy as the service changes.