Privacy Policy

This Privacy Policy explains how the operator of myrapai.com (AI Rap Generator) ("we", "us", "our") handles personal data when you use our AI music creation service (the "Service"). It should be read together with our Terms of Service.

1. Data We Collect

Data you give us

• Account data: email address, name, password (stored only as a hash), and profile image. If you sign in with Google, we receive your name, email and profile picture from Google.
• Content: prompts, chat messages, lyrics, and images, audio or video you upload, plus the rap songs, audio and videos generated for you.
• Support data: messages and attachments you send in support tickets.

Data created when you use the Service

• Transaction data: orders, amounts, currency, credit purchases, credit usage and balances. Card and payment details are collected directly by our payment provider. We do not receive or store full card numbers.
• Usage and technical data: IP address, browser and device type, pages visited, generation tasks and their status, log and error data.
• Cookies: see section 7.

We do not intentionally collect special categories of data (such as health or biometric data). Please do not upload images of other people unless you have their consent.

2. How We Use Your Data

• Create and manage your account, authenticate you: performance of contract.
• Generate rap songs and related videos from your prompts and media, and store your history: performance of contract.
• Process payments, grant and track credits, refund failed generations: performance of contract and legal obligations (tax and accounting).
• Provide support and send service notices (verification, security, receipts): performance of contract and legitimate interests.
• Prevent fraud, abuse and violations of our Terms: legitimate interests and legal obligations.
• Measure and improve the Service with analytics: legitimate interests, or consent where required.
• Send marketing emails: consent, which you can withdraw at any time.

The legal bases above apply where the GDPR or similar laws apply.

We do not use your prompts, uploads or generated content to train AI models, and we do not allow our model providers to do so to the extent their terms permit us to opt out.

3. How We Share Data

We do not sell your personal data and do not share it for cross-context behavioral advertising. We share data only with:

• AI model providers (for example MiniMax and Seedance, and the API platforms that host them): your prompts and uploaded media are sent to them to generate results.
• Infrastructure providers: hosting, database and cloud storage (such as Cloudflare) for running the Service and storing files.
• Payment processors (such as Waffo and others shown at checkout): to process payments, prevent fraud and handle refunds.
• Authentication and email providers (such as Google sign-in and Resend): to log you in and send transactional emails.
• Analytics providers (such as Google Analytics or Plausible, when enabled): to understand aggregate usage.
• Other users and the public: only content you choose to make public through a share link.
• Authorities and advisers: when required by law, to protect rights and safety, or in connection with a merger or acquisition, subject to confidentiality.

Service providers process data on our instructions and under appropriate contractual safeguards.

4. International Transfers

Our providers may process data in countries other than yours, including the United States and the countries where AI model providers operate. Where required, we rely on recognized transfer mechanisms such as Standard Contractual Clauses.

5. Data Retention

• Account data: kept while your account is active, and deleted or anonymized within 30 days after an account deletion request, except where we must keep it longer.
• Conversations, uploads and generated songs, audio and videos: kept until you delete them or your account is deleted. Deleted content may remain in backups for a limited period before being overwritten.
• Transaction records: kept for as long as required by tax, accounting and anti-fraud laws, typically up to 7 years.
• Logs and security data: kept for a limited period, normally no longer than 12 months.

6. Security

We use HTTPS encryption in transit, hashed passwords, access controls, and encrypted storage of sensitive configuration. No system is completely secure. If a data breach affects your rights, we will notify you and the relevant authorities as required by law.

7. Cookies and Similar Technologies

• Essential cookies: keep you signed in, remember your language, and protect against abuse. The Service does not work without them.
• Analytics cookies: help us understand how the Service is used, when analytics are enabled. Where required by law, we only set them with your consent.
• Advertising: if ads are shown on certain pages, ad partners may use cookies according to their own policies.

You can block or delete cookies in your browser settings, but some features may stop working.

8. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate data. You can update your profile in account settings.
• Delete your data. You can delete conversations yourself, and request account deletion by emailing support@myrapai.com.
• Restrict or object to certain processing, including processing based on legitimate interests and direct marketing.
• Data portability.
• Withdraw consent at any time, without affecting earlier processing.
• Lodge a complaint with your local data protection authority.

California residents have the right to know, delete and correct personal information, and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

To exercise these rights, email support@myrapai.com or open a support ticket. We may need to verify your identity, and we will respond within the time required by law, normally within 30 days.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us at support@myrapai.com and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, notify you through the Service or by email.

11. Contact

For privacy questions or requests, email support@myrapai.com or open a support ticket in your dashboard.