Version commercial-2026-10-28-v3 · Effective 2026-10-28T09:17:03.669Z
Privacy Notice
Responsible operator and contact
温勇 (Wen Yong), China; Changsha, Hunan, is responsible for AIRapVideo's processing described here. Correspondence: Unit 628, Building 11, Jiayu Yinshan, Yueliangdao Subdistrict, Wangcheng District, Changsha, Hunan, China; [email protected]. This notice explains the actual categories, purposes, recipients and retention criteria. It becomes effective with the approved package and does not itself activate a new provider, public registration or commercial service.
Information processed
We process account identifiers, email, name, verification status, password hashes for password accounts, provider and session records, and necessary security/throttle information. Google may provide basic profile, email and profile image. We process uploaded portraits, normalized image bytes and metadata, the theme and actual final prompt, generation settings and references, generated video/audio, task/credit/payment and refund records, content digests and review decisions, reports, appeals, support correspondence and audit records. Review materials are private; ordinary customers cannot inspect another user's records.
Purposes and permissions
Information is used to provide requested accounts and generation, authenticate access, manage credits and payments, enforce safety and rights rules, reconcile uncertain tasks, handle support and disputes, and comply with applicable obligations. We process information needed to perform the service you request, handle the permissions and choices you provide, protect legitimate account and service security where permitted, and meet applicable legal duties. Portrait consent and authority to submit must be obtained before upload. This notice does not claim that one permission overrides all laws or legitimizes every use; contact support before uploading if the described processing is unsuitable.
Providers and transfers
Neon stores the current PostgreSQL project in Singapore. Private Cloudflare R2 stores media; current bucket placement is automatic in Asia Pacific. MiniMax receives task portraits through temporary access links, the final prompt and selected settings, and produces video/audio retrieved by the server. Resend sends verification and recovery email; Tokyo sending does not guarantee all storage is in Japan. Google handles sign-in. Zoho receives support email and forwards it to the owner's designated Gmail for support. Where checkout is enabled, the payment entity identified at checkout processes the payment and its transaction records. These providers can process data outside your country. Their applicable service agreements, account settings, legal obligations and backup arrangements govern their own processing, regions, retention and any model-training terms; we do not assert a verified zero-retention, no-training or single-region guarantee. New material recipients or uses require an updated notice and any necessary authorization before activation.
Content review recipients
When you submit a generation request, the server sends the actual final prompt, its language/checking options and service-authentication metadata to Waffo for automatic text checking before paid task creation. The request does not attach your portrait files or generated video/audio, and does not separately add your account email or identity. The prompt itself can contain text you entered; avoid sensitive personal information. We keep bounded action/reason, category, request identifier and optional semantic-status metadata for traceability, and task snapshots can retain the actual instructions. Semantic metadata is recorded as returned and is not represented as a video or audio content check. Per-item human pre-approval is removed. Sightengine image/video/audio scanning is not enabled or purchased. Any additional text or multimodal provider requires its own disclosed and approved data flow; listing a candidate does not activate it. Provider retention/training terms are governed by its applicable agreement and account settings, without a blanket zero-retention or no-training promise.
Private media, browser storage and security
Media is stored privately and checked for ownership. Authorized delivery uses the site's protected media endpoint; temporary provider access links remain sensitive until expiry. The standard photo picker accepts still JPEG, PNG or WebP originals up to 10 MiB and 20 million pixels, at least 256 pixels on each side. It prepares an upright network-safe JPEG copy locally, fits the full image inside the supported dimensions without cropping, and uses a white background for transparency. Dense images may need a lower JPEG quality or smaller dimensions; the original local file is not edited. Unsupported animation, unsafe size or processing failure stops the upload with an explanation. The server independently decodes, checks permissions and quota, and normalizes the received copy again without the original metadata before private storage. Necessary authentication cookies and local creation drafts support continuity. Clearing browser storage does not remove server records. Security controls reduce risk but cannot guarantee perfect security; do not submit sensitive portraits unless the described processing is acceptable to you.
Retention, deletion and rights requests
Account information is kept while an account is active and as necessary to administer its remaining service, credit and legal obligations. Portraits and generated media remain stored until the owner requests deletion or account closure, or controlled enforcement requires removal; the current service has no automatic fixed media-expiry cleanup. Media deletion enters a persistent queue, can wait for active task references to release, and requires maintenance to confirm object deletion. The app restricts queued/deleted media from ordinary delivery; this is not a promise of instant deletion from all systems. Task, review, report and support details are kept only while needed to complete the task, resolve the matter or appeal, investigate abuse, or address a concrete dispute or legal duty; unnecessary raw detail should be removed or minimized through the controlled support process after those purposes end. Financial, tax, refund and security/audit evidence may be retained separately for applicable legal duties, payment reconciliation and necessary dispute or fraud prevention, rather than keeping every portrait for the same period. Retention is assessed when a matter closes or a verified deletion/closure request is handled; there is no claim of an unimplemented 30-day or 90-day automatic purge.
Support and privacy handling
We aim to make the first support response within two business days. Business days exclude weekends and public holidays at the operator's location in China, using Asia/Shanghai time. This is an initial-response target, not a promise that a rights request, investigation or refund will finish in two days. Send only necessary references and a concise description. We will explain proportionate verification, applicable retention exceptions and the available complaint or legal route; mandatory deadlines and non-waivable rights prevail.
Backups and retained exceptions
Backups are access-restricted and used for recovery rather than ordinary product access. Data can remain in backup copies until the applicable provider restore window or controlled backup lifecycle expires or replaces the copy. We do not promise perpetual backups or an immediate erase from provider systems. A restoration must consider outstanding deletion and access restrictions before ordinary access resumes. Where a record remains necessary for a legal hold, accounting, payment dispute or a specific security investigation, retain only the necessary record, restrict its use and explain the relevant reason when responding to a rights request. You can request access, correction or deletion at [email protected], subject to proportionate identity verification; avoid sending passwords, full card data or sensitive portraits.
Terms of Service · Privacy Notice · Credits, Payments and Refunds · Acceptable Use and Portrait Permission · AI Processing, Disclosure and Review · Reports and appeals · Support