Privacy Policy

1. What This Policy Covers

This policy explains what information Rap Duo AI (the "Service", at rapduo.ai) collects, how it is used and shared, and the choices you have. By using the Service you agree to this policy.

2. Your Photos, in Short

• Uploaded face photos are used only to render your videos and to run automated safety checks on them. They are sent to our AI providers for those purposes and nothing else.
• We do not use your photos to train our own models, and we do not sell them.
• Only upload photos of yourself or of people who have given you permission — never of a minor without a parent or guardian's consent.
• You can ask us to delete your photos and videos at any time via a support ticket.

3. Information We Collect

• Account information. Your email address and display name, and — if you sign in with Google — the name, email, and avatar Google shares with us. Passwords for email accounts are stored as salted hashes; we never see them in plain text.
• Content you provide and create. The photos you upload (one per person, or one photo of both), the stage and render settings you pick, any lyric topic you enter, and the videos (previews and unlocked versions) rendered for you.
• Gift links. If you create a gift link, people who open it see your first name and the note you wrote. If you claim a gift, we record the claim; the sender sees how many people have claimed it, not who.
• Payment information is handled by Stripe; we receive transaction records but never store your card number.
• Technical data. Server logs (IP address, timestamps, request metadata), device and browser information, the country your visit comes from, and cookies needed to keep you signed in and remember your language preference. IP address and account signals are also used to enforce the free-preview limits.
• How you found us and what you did on the site. When you arrive we record the page you landed on, the referring site, campaign parameters in the link (such as UTM tags or an ad click ID), your IP address, and your browser's user agent, under a random visitor ID kept in a cookie (your browser also keeps the landing details in local storage until they have been reported). We also record steps you take on the site (for example adding photos, starting a render, opening checkout, or downloading) and which version of a page or offer you were shown. Once you sign in, these records are linked to your account.
• Analytics. We use Google Analytics, Plausible and DataFast to understand aggregate usage. Google Analytics sets its own cookies.

4. How We Use Information

• To operate the Service: your photos, stage choice, and lyric topic are sent to third-party AI rendering providers through an API aggregator (SeeAPI) solely to render the videos you request.
• To keep the Service safe: your lyric topic, your photos, and the finished video are checked by automated safety filters (also through SeeAPI) before rendering or before the video is shown.
• To store and serve your photos and videos through cloud object storage (Cloudflare R2).
• To process payments, track your credit balance, and unlock videos.
• To maintain security: preventing abuse (including multiple accounts claiming the free preview), enforcing the content rules in our Terms, and debugging failed renders.
• To improve the Service: measuring which channels, pages, and offers work, and testing different versions of pages and offers (so different visitors may see different versions).
• To run the business: when an order is paid, our team receives an internal notice with the buyer's email address, the product, the amount, the time, the country, and how the buyer found us.
• To remind you, by email, about something you started: a video that finished rendering, a checkout you didn't complete, a free preview you haven't unlocked, or a video you set up but didn't make. At most one reminder every few days; every reminder has a one-click unsubscribe link, and unsubscribing stops all reminders (notices that a video you made is ready still arrive). Emails are sent through Resend.
• To send service communications related to your account.

We do not sell your personal information.

5. How Information Is Shared

Only with parties needed to run the Service:

• AI rendering providers and our API aggregator, which receive the photos and inputs for a video you request;
• Infrastructure providers (Cloudflare for hosting and storage, and our database host);
• Stripe, Google sign-in, and analytics providers (Google Analytics, Plausible, DataFast) as described above;
• WeCom (Tencent), the workplace messaging service our team uses to receive the paid-order notices described above;
• Resend, the email service that delivers our notices and reminders;
• Authorities, where required by law or to protect the Service, its users, or people depicted in content.

Public activity line. Pages with the video maker may show a line of recent site activity, such as "5 min ago · someone in Germany made a Hotel Lobby video". It shows only how long ago, the country, the kind of video or the plan bought. It never shows names, emails, photos, videos, lyrics or amounts.

6. Retention and Deletion

• Your photos and videos are kept so you can view and download them, until you ask us to delete them or delete your account. Residual copies leave backups on a normal rotation cycle.
• To delete photos, videos, or your whole account, open a support ticket and we will do so within a reasonable period, except records we must keep by law.
• Transaction history and free-preview records are retained for accounting and abuse prevention.
• Visit and on-site activity records are kept for as long as they are useful for measuring and improving the Service, and are deleted together with your account.

7. Security

Data is encrypted in transit (HTTPS). Access to production systems and stored files is restricted. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security — please use a strong, unique password.

8. Your Choices and Rights

• View and download your videos in your account; edit account details in settings.
• Depending on where you live, you may have rights to access, correct, export, or erase your personal data — exercise them via a support ticket.
• If someone uploaded your photo without permission, contact us and we will remove it.
• You can limit analytics cookies through your browser settings or extensions.

9. Children

The Service is not directed at children under 13 (or the higher minimum age where you live). We do not knowingly collect their data; if you believe a child has provided data or a minor's photo was uploaded without guardian consent, contact us and we will delete it.

10. International Processing

We and our providers may process data in various countries. Where we transfer data internationally, we rely on the safeguards those providers offer.

11. Changes and Contact

We may update this policy; the date above (October 2, 2026) reflects the latest revision, and material changes will be announced in the product. Questions or requests: open a support ticket from your account menu (Settings → Support tickets), or email support@rapduo.ai.