Privacy Policy
AIRapGenerator Privacy Policy
Last updated: October 24, 2026
Summary
- We collect what we need to run AIRapGenerator: your Google sign-in details, what you submit and generate, your purchases, and basic usage and device data.
- We do not sell your personal information.
- We share data with the service providers that help us run the Service, such as AI model providers, our payment processor, hosting and analytics, and otherwise only where the law requires it, in a business transfer, or with your consent.
- You can ask us to access, correct or delete your data by emailing [email protected].
This Privacy Policy explains how AIRapGenerator ("we", "us", "our") collects, uses, stores and shares personal information when you use the Service at https://airapgenerator.co (the "Service"), and the choices you have. By using the Service, you agree to this Policy.
1. Who Is Responsible for Your Data
- Data controller: AIRapGenerator (airapgenerator.co)
- Privacy email: [email protected]
2. Information We Collect
2.1 Information You Give Us
- Account information: when you sign in with Google, we receive your name, email address, profile picture and Google account ID. We never receive or store your Google password.
- Content you submit: text prompts, lyrics, images, videos and audio files you submit, and the generation settings you choose.
- Generated content: the music and audio and generated content the Service creates for you.
- Purchase information: the plan or credit pack you buy, the amount, currency, payment status and transaction IDs. We never receive or store your full card number; card details are handled by our payment processor (see Section 5).
- Messages: emails, support and refund requests, content reports and feedback you send us.
2.2 Information Collected Automatically
- Device and network: IP address, browser type, operating system, device type, language and time zone.
- Usage: pages visited, features used, generation history, credit balance and usage.
- Logs: request times, error logs and performance data, and content-moderation results.
3. How We Use Your Information
| Purpose | Legal basis |
|---|---|
| Running the Service: accounts, generation, storing and delivering your content | Contract |
| Billing, credits and payments | Contract |
| Support, refunds and handling reports | Contract / Legitimate interests |
| Service messages (billing, security, policy changes) | Legitimate interests |
| Safety, security and fraud prevention | Legitimate interests / Legal obligation |
| Analytics and improving the Service | Legitimate interests |
| Complying with the law | Legal obligation |
We may produce aggregated or anonymized statistics that cannot be linked to you.
4. Cookies and Analytics
| Type | Purpose | Can be turned off |
|---|---|---|
| Strictly necessary | Keeping you signed in, security and core features | No |
| Functional | Remembering your language and interface preferences | Yes |
| Analytics | Usage statistics that help us improve the Service | Yes |
We do not use advertising cookies. Analytics tools we use:
- Plausible Analytics (self-hosted by us; does not use cookies): Plausible data policy
Where a consent banner is shown, you can accept or reject analytics cookies. You can also block or delete cookies in your browser settings; blocking strictly necessary cookies will stop you from signing in.
5. How We Share Information
We do not sell your personal information, including as defined under laws such as the CCPA. We share information only in these cases:
- Service providers that help us run the Service, only for that purpose:
- Payment processing: our third-party payment processor handles payments. Card details are handled only by the processor and are not stored on our servers. It receives your email address, purchase details and the payment information you enter at checkout.
- AI model providers: your prompts, uploaded files and generation settings are sent to the third-party AI model providers that run the models you choose, only to generate your content.
- Content safety: Your text prompts are sent to an automated content-safety service to screen for prohibited content before generation. Images and videos you upload are sent to an automated content-safety service to screen them before they can be used. Links to generated content are sent to SeeAPI so it can screen the content before it is shown to you.
- Infrastructure: Vercel (hosting), Neon (database) and Cloudflare (file storage and delivery).
- Sign-in and analytics: Google (sign-in).
- Legal requirements: where required by law, court order or a lawful request from authorities, including reporting child sexual abuse material.
- Business transfers: if the Service is merged or sold, with notice to you and continued protection of your information.
- With your consent: for any other purpose, with your prior consent.
6. Security
- All traffic to and from the Service is encrypted with TLS (HTTPS).
- Credentials are encrypted or hashed; card data never reaches our servers.
- Access to personal data is limited to what is needed to run the Service.
- Sign-in is handled through Google's OAuth 2.0.
No system is completely secure. If a security incident affects your rights, we will notify you where the law requires it. Please keep your Google account secure.
7. How Long We Keep Data
| Data | How long | Then |
|---|---|---|
| Account information | While your account is active | Deleted within 30 days after you ask us to delete your account |
| Prompts, uploads and generated content | While your account is active, unless you delete them or ask us to delete them | Deleted within 30 days after your request |
| Usage, log and moderation records | While your account is active | Deleted or anonymized within 30 days after account deletion |
| Transaction records | 7 years, for tax and accounting | Deleted |
To delete your account, email [email protected] from your registered email address. We remove your access immediately.
8. Your Rights
To use any of these rights, email [email protected] from your registered email address. We respond within 30 days.
| Right | What it means |
|---|---|
| Be informed | Know what data we collect and how we use it |
| Access | Get a copy of your personal information |
| Correction | Fix inaccurate or incomplete data |
| Deletion | Ask us to delete your account and data, subject to legal retention |
| Restriction | Ask us to pause certain processing |
| Portability | Receive your data in a machine-readable format |
| Objection | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw consent where processing relies on it |
California residents (CCPA): you can ask to know and delete your personal information, and we will not treat you differently for doing so. We do not sell personal information.
EEA, UK and Swiss residents (GDPR): the legal bases we rely on are listed in Section 3.
Wherever you live, you can also complain to your local data protection authority.
9. Marketing
We send marketing emails only with your consent, and every marketing message includes an unsubscribe link. Service messages such as receipts and security alerts are not marketing and will still be sent.
10. International Transfers
Our servers and service providers are mainly in the United States, and some providers, such as Cloudflare, operate worldwide. Your information may therefore be processed outside your country. Where the law requires it, we rely on appropriate safeguards for these transfers.
11. Children
The Service is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you think a minor has given us information, email [email protected] and we will delete it promptly.
12. Third-Party Links and Services
The Service links to and works with third-party services, such as Google sign-in and our payment processor's checkout. This Policy covers only the data we collect. Please read those services' own privacy policies.
13. Changes to This Policy
For material changes, we will give notice by email or by a notice on the Service before they take effect, and update the date at the top of this page. Continued use after a change takes effect means you accept the updated Policy.
14. Contact
- Privacy and support email: [email protected]
- Response time: within 30 days for data rights requests
AIRapGenerator · https://airapgenerator.co