Privacy Policy

1. Introduction & Data Controller

RapWizard ("RapWizard", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Data controller. The controller of your personal information is RapWizard — an independent developer business operated by Aimee Zhang (sole proprietor). Contact: privacy@rapwizard.site. A postal address is available on request via the same email. We have not appointed a Data Protection Officer (not required for our scale).

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

Personal Information

We may collect personal information that you provide directly to us, such as:

• Account information (email address, name)
• Photos you upload and the videos generated from them (see “Retention” — photos are deleted within 24 hours after your video is rendered)
• Payment information — handled entirely by our payment processor Waffo Pancake; we never receive or store full card numbers
• Credit balance and generation history
• Communications with us (support and billing emails)

Automatically Collected Information

When you visit our Service, we automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, clicks)
• Cookies and similar tracking technologies (see our Cookie Policy)
• Log data (access times, referring URLs)

Analytics: we use Google Analytics (Google's privacy policy) to understand aggregate usage. We may also enable PostHog and Microsoft Clarity; if enabled, their own privacy policies apply to the data they collect.

Information from Third-Party Services

If you authenticate using OAuth providers (Google, GitHub, etc.), we may receive:

• Basic profile information (name, email, profile picture)
• Authentication tokens
• Any additional information you authorize

3. How We Use Your Information (and Why We May)

We use the information we collect to:

• Provide, operate, and maintain our Service
• Process transactions and manage your account
• Send administrative information and updates
• Respond to your comments, questions, and support requests
• Improve and personalize your experience
• Monitor and analyze usage patterns and trends
• Develop new products, services, and features
• Prevent fraud and enhance security
• Comply with legal obligations
• Send marketing communications (with your consent)

Legal bases. Providing the Service, processing payments and managing your account: performance of our contract with you. Analytics, service improvement and security: our legitimate interest. Complying with tax and law-enforcement obligations: legal obligation. Marketing emails: your consent, withdrawable at any time via the unsubscribe link.

4. How We Share Your Information

We may share your information in the following situations:

With Service Providers

We share information with third-party vendors who perform services on our behalf, such as:

• Payments: Waffo Pancake (card data is processed by Waffo Pancake and never stored on our servers)
• AI generation providers (kie.ai) — they process your uploaded photo solely to render your video
• Hosting and storage: Vercel, Cloudflare (R2)
• Analytics: Google Analytics (and, if enabled, PostHog / Microsoft Clarity)
• Email delivery: Resend

We do not sell your personal information to anyone.

For Legal Purposes

We may disclose your information when required by law or to:

• Comply with legal obligations
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our terms and agreements

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Regular security audits and assessments
• Access controls and authentication requirements
• Employee training on data protection
• Incident response procedures

If a data breach affecting your personal information occurs, we will notify affected users and the relevant supervisory authorities within 72 hours of becoming aware of it, where required by law.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention (specific periods)

• Uploaded photos: deleted within 24 hours after your video finishes rendering
• Generated videos: kept for 30 days so you can download them, then deleted
• Account information: kept until you delete your account, then removed from backups within 90 days
• Payment records: kept as long as tax and accounting laws require (up to 7 years)
• Support emails: kept for 24 months

When a retention period ends, we securely delete or anonymize the information.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information. Email privacy@rapwizard.site to exercise any of them — we respond within 30 calendar days. You may also withdraw consent at any time and lodge a complaint with your local supervisory authority.

Access and Portability

You can request access to your personal information and receive a copy in a structured, machine-readable format.

Correction and Update

You can request that we correct or update inaccurate or incomplete personal information.

Deletion

You can request deletion of your personal information, subject to certain exceptions.

Objection and Restriction

You can object to or request that we restrict processing of your personal information.

Marketing Communications

You can opt-out of marketing emails by clicking the unsubscribe link or contacting us directly.

Cookies

You can manage cookie preferences through your browser settings. See our Cookie Policy for more information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

We rely on safeguards such as the EU Standard Contractual Clauses and adequacy decisions where applicable, and we choose vendors (Vercel, Cloudflare, kie.ai, Waffo Pancake) that maintain recognized security certifications. Your information remains protected in accordance with this Privacy Policy.

9. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to be informed about data processing
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to data portability
• The right to object to processing
• Rights related to automated decision-making
• The right to lodge a complaint with supervisory authorities

11. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

For significant changes, we will provide at least 15 days advance notice through email or a prominent notice on our Service, and always update the “Effective Date” above.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

• Privacy: privacy@rapwizard.site (actively monitored)
• Support: support@rapwizard.site
• Operator: RapWizard (Aimee Zhang, sole proprietor)
• Website: https://rapwizard.site · Replies typically within 2 business days

For data protection inquiries, you may also contact us at: privacy@rapwizard.site