Privacy Policy
Last updated October 26, 2026
rapvideo is operated by Arrayon Inc., a Wyoming corporation at 30 N Gould St Ste R, Sheridan, WY 82801, USA (“we”, “us”). This policy explains what we collect when you use rapvideo.video, why, who processes it for us, how long we keep it and what you can do about it. Questions go to hello@rapvideo.video.
The short version
- Your photo is used only to check it and make your own video.
- Original photos are deleted within 7 days. Finished videos are deleted after 30 days.
- We do not compute or store face templates or face geometry. Your photo and its retouched copy are deleted after the retention period.
- Your photos and videos are private. We never show them publicly.
- We don’t sell your personal information.
- Analytics cookies are optional. In the EU, EEA, UK and Switzerland they stay off unless you accept them. Elsewhere Google Analytics (GA4) is on by default and you can turn it off under Cookie settings.
What we collect
Photos. The photo (or, for a duo template, two photos) you upload. You must only upload photos of yourself or of an adult who agreed to it.
What we make from them. After you pay, a retouched copy of your photo, the generated video segments and your finished video.
Account details. Your email address, and your Google account ID if you sign in with Google. We never see your Google password.
Orders and payments. What you bought, the amount, the currency and the country, and your pack videos (bought, used and returned). Card details go straight to Stripe. We never see your card number.
Usage and security data. Which template and song you chose, how long each step took, errors, and when you visited. To stop abuse we store a random visitor ID in a cookie, plus scrambled (hashed) versions of your IP address range and of basic device details (a device ID). We can’t turn these back into your IP address or device.
Reports. If you report a video: the reason you pick, any free-text details you write, the email address you give and the video you name, plus a scrambled (hashed) version of your network address range, which we use only to limit abuse of the report form. Each report is also emailed to our support inbox, and mail to that address is forwarded through Cloudflare Email Routing.
Messages. What you write to us by email.
How we use it
- To check your photo before anything is made, make your video, and show it to you.
- To create and run your account, including the sign-in codes we email you.
- To email you when your video is ready and before it is deleted.
- To take payments, send receipts and handle refunds and chargebacks.
- To handle reports and take videos down.
- To protect the service from fraud and abuse.
- To understand, in aggregate, which pages help and where things break.
- To answer your messages and meet our legal and tax obligations.
Our legal bases under the GDPR are: performing our contract with you, our legitimate interests (security, abuse prevention, improving the service), your consent (analytics cookies) and legal obligations (tax records).
Faces and AI processing
Face check in your browser. When you add the photo, before anything is made, your browser detects whether the photo shows one clear face (with MediaPipe). This runs on your device.
No face templates. We do not compute, keep or use face templates or face geometry ourselves.
Photo check. Before anything is made, we also send the photo through a short-lived private link to SeeAPI, which tells us whether it contains nudity or sexual content. Such photos are refused. If that check fails or is unavailable, we refuse the photo. This check makes no video.
Retouching and generation. After you pay, your photo goes to SeeAPI, our processor, which retouches it (it removes acne and spots only; moles and freckles stay) and uses the photo and the retouched copy to generate your video. SeeAPI uses it only to make that order’s video. We never use your photos to train AI.
Biometric data
What it is. A photo of a face can count as biometric data under laws such as the Illinois Biometric Information Privacy Act (BIPA), similar laws in Texas, Washington and Colorado, and the GDPR. We do not compute face templates ourselves, but the AI model that makes your video processes the face in your photo, so we treat the photo as biometric data.
Why we use it. Only to make the video you ordered. Never to identify anyone, never for marketing, and never to train anything.
Consent. Before every upload, you confirm that you are 18 or older and that each person in the photos is an adult who agreed to be in the video and to this processing. We record when you confirmed and which wording you agreed to.
Illinois. Because a second person in a duo video is not our user, duo templates are not offered to visitors in Illinois. Single-person templates are.
How long we keep it. Your photo and its retouched copy are deleted within 7 days. We store no face templates or face geometry. This is our retention schedule: biometric data is destroyed when the order’s files are deleted, and never kept beyond that.
No sale; limited disclosure. We never sell, lease, trade or otherwise profit from biometric data. We disclose it only to the processors that make your video (SeeAPI).
Security. Photos are stored privately, reached only through short-lived signed links, and sent only over encrypted connections.
Who processes your data for us
| Service | What it does for us | What it receives |
|---|---|---|
| SeeAPI | Checking photos for nudity, and running the AI models that make your video | Your photo, through a short-lived private link, and the instructions for the job |
| Cloudflare | Hosting, file storage, the database, sending sign-in and video emails, and checking that a visitor is human (Turnstile) | Everything you send to the site, including photos |
| Stripe | Payments, as merchant of record | Your email, what you buy, payment details |
| Vultr | A server in Frankfurt, Germany, that assembles the video (cuts, music, color and watermark) with ffmpeg. It does no face processing | The generated video segments and music while a job runs; files are deleted when the job ends |
| Sign-in with Google if you choose it; Google Analytics (GA4) visit statistics: loaded by default outside the EU, EEA, UK and Switzerland, and only after you accept inside them | Your Google account ID and email; for GA4, pages viewed, events and a random browser ID |
These companies act on our instructions and may not use your data for their own purposes beyond what their own legal and security duties require. We don’t share your data with anyone else, except when the law requires it or to protect people from harm.
How long we keep it
- Original photos and their retouched copies: deleted within 7 days.
- Work files from generation: deleted within days of your video being made.
- Finished videos: deleted after 30 days. We email you before then. Download your video before it is deleted.
- The free remake is available for 7 days after the order, using the same photo or a new one.
- Download links: private, and they stop working after 60 minutes. You can always ask for a new one while the video exists.
- Face templates and face geometry: never stored by us.
- Account and pack video history: until you delete your account.
- Orders: kept for tax and accounting as long as the law requires, without your name or email once you delete your account.
- Reports: once a report is closed, we keep what was decided (the video, the reason and the outcome) to prove we acted on it, and we remove your email address and the details you wrote 90 days after it closes.
Cookies
We use a few cookies the site needs to work, and analytics cookies as described below. You can change your choice at any time with Cookie settings at the bottom of every page.
| Cookie | Why | Type |
|---|---|---|
| Session cookie | Keeps you signed in | Essential |
| Visitor ID | A random ID for limits and abuse prevention | Essential |
| Consent cookie | Remembers your cookie choice | Essential |
| Cloudflare Turnstile | Checks that a visitor is human | Essential |
_ga, _ga_* |
Google Analytics (GA4) visit statistics | Analytics |
In the EU, EEA, UK and Switzerland, analytics stay off, and no analytics script loads, until you choose Accept. Everywhere else Google Analytics (GA4) loads by default; you can switch it off at any time under Cookie settings at the bottom of every page.
Children
rapvideo is only for adults 18 and over. You may not upload photos of anyone under 18. We don’t knowingly collect personal information from children, including children under 13. If you believe a child’s information or photo reached us, write to us and we will delete it.
Your rights
Depending on where you live, including under the GDPR in Europe and the CCPA in California, you can ask to see, correct, download or delete your personal information, object to or limit how we use it, and withdraw consent. You can delete your account yourself on the account page, which deletes your photos and videos right away. For anything else, email hello@rapvideo.video. We will not treat you differently for using these rights. If you are in Europe, you can also complain to your local data protection authority.
If someone uploaded a photo of you without your consent, use Report a video or email us and we will act within 48 hours.
We don’t sell personal information and don’t share it for cross-context behavioral advertising.
International transfers and security
We and our providers process data in the United States, Germany and other countries. Where the law requires it, we rely on the transfer safeguards our providers offer, such as Standard Contractual Clauses. Files are stored privately and reached only through short-lived signed links, and connections are encrypted.
Changes
If we change this policy, we will update the date at the top, and tell signed-in users by email when the change matters.
Contact
Arrayon Inc., 30 N Gould St Ste R, Sheridan, WY 82801, USA. Email hello@rapvideo.video.