Privacy Policy

Effective date: [EFFECTIVE_DATE]

This Privacy Policy explains how [COMPANY_NAME] ("MakeItRap," "we," "us," or "our") collects, uses, shares and protects information when you use makeitrap.com and related services (the "Service"). The Service lets you write rap lyrics for free and make short AI rap videos from a photo and a template.

If you have questions, contact us at [CONTACT_EMAIL].

1. Information we collect

1.1 Information you give us

• Account information. When you create an account with email and password, we collect your email address, the name you enter (if any), and your password. Your password is stored in hashed form. We can't read it. When you sign in with Google, Google shares your name, email address, profile picture and a Google account identifier with us. We don't receive your Google password.
• Photos you upload. To make a video, you upload one or more photos (JPG, PNG or WebP). See section 3 for how we handle photos.
• Text you enter. Names, topics and other text you type into our tools, and lyrics you write or edit in the lyrics tool.
• Messages to us. If you email us, we keep your message and our reply.

1.2 Information created when you use the Service

• Generated videos. The rap videos made for your account.
• Usage and transaction records. Your credit balance, credit purchases and use, and the status of each video request (for example, completed, failed, or blocked by moderation). We also record which template you used and the names or topics you entered.
• Device and log information. When you sign in, we store your IP address and browser type (user agent) with your session. Our servers also keep technical logs, such as request times, errors and account IDs, to run, secure and debug the Service.
• Email records. When we send you a transactional email, we record the address and time sent. This lets us limit how often emails are sent.

1.3 Information from third parties

• Google, if you choose Google sign-in (see 1.1).
• Stripe, our payment processor. When you buy credits, Stripe sends us details of the transaction, such as amount, date, payment status and a payment reference. We don't receive or store your full card number.

2. How we use information

We use information to:

• provide the Service, including generating your lyrics and videos, storing your videos, and letting you download them;
• create and secure your account, verify your email address, and keep you signed in;
• process purchases, add and return credits, and prevent payment fraud;
• moderate content and enforce our Terms of Service, including blocking prohibited uploads and names of public figures;
• send transactional emails, such as sign-in verification and important notices about the Service;
• respond to your requests and support questions;
• monitor, debug and improve the Service, and protect it against abuse;
• comply with law and respond to lawful requests.

We do not use your photos or videos to train our own AI models. We do not sell your personal information. We do not use it for targeted advertising.

Legal bases (EEA/UK users). We process personal data to perform our contract with you (providing the Service and processing purchases). We also process it for our legitimate interests (security, fraud prevention, improving the Service), with your consent where required, and to meet legal obligations.

3. Photos you upload

• Purpose. We use your photos only to generate the video you requested.
• Third-party AI processing. To create the video, your photo is sent to a third-party AI service provider that generates the video for us. That provider processes the photo on our behalf.
• Storage. While your video is being made, your original photo is stored in private cloud storage that isn't publicly accessible.
• Deletion. We delete your original photo when generation ends, whether the video was completed, failed, timed out, or was blocked by moderation. As a backup, an automatic storage rule removes any original photo still in storage after 1 day. Our AI service provider deletes its temporary copy on its own schedule, which is currently about 24 hours.
• What we keep. We keep the generated video (see section 7). We don't keep your original photo after deletion.
• No face recognition by us. We don't use your photos to identify you or anyone else. We don't create face recognition templates.
• Other people in photos. Upload a photo only if you have the permission of every person in it. Don't upload photos of minors or public figures. See our Terms of Service.

4. How we share information

We share information only as described here:

• Service providers who process data on our behalf under contract:

- Cloudflare: website hosting, database, file storage, security and server logs;
- AI service providers: video and lyrics generation;
- Stripe: payment processing;
- Google: sign-in (if you choose it). Our pages also load fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address;
- Resend: sending transactional email.

• Legal and safety. We may disclose information if required by law, or if needed to protect the rights, property or safety of our users, the public or us. This includes responding to reports of misuse of someone's image.
• Business transfers. If we are involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal.
• With your consent or at your direction, for example when you share a video link.

We do not sell personal information. We do not "share" it for cross-context behavioral advertising, as those terms are defined under California law.

5. Cookies and similar technologies

• Strictly necessary cookies. We use cookies to keep you signed in and to secure your session. This includes a temporary guest session created when you use our free tools before signing up. The Service can't work without these cookies.
• Local storage. Your browser saves your progress in the generators, such as your last result, so you don't lose it on reload. This stays on your device. You can clear it in your browser settings.
• Analytics. If you accept analytics cookies, we use Google Analytics to understand how visitors use the Service. Google receives usage and device information through its analytics service. You may reject analytics cookies or withdraw your consent at any time using Cookie settings in the footer. We do not use analytics cookies until you accept.
• Third-party pages. Stripe sets its own cookies on its checkout pages. Google sets its own cookies when you sign in with Google. Our hosting provider may set security cookies, for example to detect bots. These are governed by those companies' policies.

You can block or delete cookies in your browser. If you block necessary cookies, you won't be able to sign in.

6. Global Privacy Control

Since we don't sell or share personal information for targeted advertising, there's nothing to opt out of today. We honor Global Privacy Control (GPC) signals as an opt-out request where the law requires it.

7. How long we keep information

We may keep some information longer if the law requires it, to resolve disputes, or to enforce our agreements.

8. Security

We protect information with measures such as encrypted connections (HTTPS), private storage for photos and videos, access controls, and password hashing. Only your signed-in account can access your videos through the Service. No method of transmission or storage is fully secure, and we can't guarantee absolute security.

9. International data transfers

We and our service providers may process information in the United States and other countries where they operate. These countries may have different data protection laws than where you live. Where required, we use appropriate safeguards for transfers out of the EEA, UK or Switzerland, such as the European Commission's Standard Contractual Clauses.

10. Your privacy rights

Depending on where you live, including the EEA, the UK and US states such as California, you may have the right to:

• Access: know what personal information we hold about you and get a copy;
• Correction: fix inaccurate information;
• Deletion: ask us to delete your personal information, including your account and videos;
• Portability: receive your information in a usable format;
• Opt out: of the sale or sharing of personal information or targeted advertising (we don't do these), and of certain profiling;
• Restrict or object: to certain processing (EEA/UK);
• Withdraw consent: where processing is based on consent;
• Appeal: our decision on your request, where state law provides it.

How to make a request. Email [CONTACT_EMAIL] from the email address on your account, with the subject "Privacy request." We may need to verify your identity before acting. We will respond within the time the law requires: generally within 30 days (EEA/UK) or 45 days (California and other US states). You can use an authorized agent where the law allows it. We will not discriminate against you for exercising your rights. EEA and UK residents can also complain to their local data protection authority.

California notice. In the last 12 months, we collected these categories of personal information: identifiers (such as name, email address, IP address and account ID); commercial information (credit purchases); internet activity (logs and session data); and photos and video (uploaded photos and generated videos). We collect them for the purposes in section 2 and disclose them to the service providers in section 4. We do not sell or share personal information, and we have no actual knowledge of selling or sharing personal information of consumers under 16.

11. Children

The Service is not for anyone under 18. You must be at least 18 to use it. We don't knowingly collect personal information from anyone under 18. Don't upload photos of minors. If you believe a minor has used the Service or appears in an uploaded photo, contact [CONTACT_EMAIL] and we'll delete the information.

12. Changes to this policy

We may update this Privacy Policy from time to time. We'll post the new version on this page and update the effective date. If the changes are significant, we'll give you notice, for example by email or a notice on the Service.

13. Contact us

[COMPANY_NAME]
[COMPANY_ADDRESS]
Email: [CONTACT_EMAIL]