Privacy Policy

This Privacy Policy explains how Rap Blaze ("we", "us") handles your information when you use rapblaze.com (the "Service"). We review and update it at least once every 12 months.

Information We Collect

1. Account information — your email address. If you sign in with Google, we also receive your name and profile picture. We also record when you accepted our Terms and which version.
2. Photos you upload — the photos you submit so the Service can create your result.
3. Results — the images or videos the Service creates for you.
4. Consent records — each time you generate from photos, we record that you confirmed you have the right to use them and that everyone shown agreed: your account, the time, the version of the wording, which uploads were used, and the IP address and browser of the request.
5. IP address and device information — when you sign in we store the IP address and browser of the session. We also see your IP address, browser and device type when you visit, to keep the Service working and to stop abuse.
6. Payment information — purchases are processed by our payment provider. We receive the order status, amount and the email used; we never see or store your full card number.
7. Messages and reports to us — what you write when you contact us. When you report content, we keep the report: the link, the category, your description, your email, the name you sign with, and the IP address and browser of the request.
8. Usage data — pages visited, the page that referred you to us, and how pages are used (see "Analytics" below).

Categories of Personal Information (US State Privacy Laws)

This section uses the categories of US state privacy laws, such as the CCPA. For each one: where it comes from, why we use it, and who receives it.

• Identifiers (email address, name, account ID, IP address). Source: you, Google sign-in if you use it, and your browser. Purpose: create and run your account, sign you in, stop abuse, send receipts and notices. Recipients: hosting and storage, email delivery, payment and analytics providers.
• Customer records (name, email address, the email used for payment). Source: you and our payment provider. Purpose: process purchases, add credits, handle support and refunds. Recipients: payment processing and hosting providers.
• Commercial information (credit packs bought, credits used, order history). Source: your use of the Service and our payment provider. Purpose: run credits and payments, keep records the law requires. Recipients: payment processing and hosting providers.
• Internet or other network activity (pages visited, referring page, clicks and scrolls on our pages, session recordings with inputs and photos masked). Source: your browser, through cookies and analytics scripts. Purpose: understand which pages help people and fix problems. Recipients: Google Analytics and Microsoft Clarity.
• Approximate geolocation (country or region worked out from your IP address). Source: your IP address. Purpose: show the right analytics consent choice, stop abuse, understand where visitors come from. Recipients: hosting and analytics providers.
• Audio or visual information (photos you upload and the results made from them). Source: you. Purpose: create the result you ask for and keep it in your account. Recipients: hosting and storage, and the AI model providers that process your request.

In the past 12 months we have not sold or shared personal information, and we have no actual knowledge of selling or sharing personal information of consumers under 16. "Sell" and "share" have the meanings in the CCPA; "share" means giving data for cross-context behavioral advertising.

How We Use Your Information

• To create the results you ask for and keep them available in your account.
• To keep a record of the consent you gave for each generation, and to handle complaints about misuse.
• To process purchases and add credits to your account.
• To send sign-in codes, receipts and important notices about the Service.
• To answer support requests and to prevent fraud and abuse.

We do not sell your personal information, and we do not use your uploads to advertise to you. We do not use your photos to train our own AI models.

Photos and Faces

We do not create or store face templates, faceprints or other biometric identifiers, and we do not use photos to identify anyone. The AI providers process your photos only to generate the result you request. We do not use your photos to infer characteristics about you.

Who Gets Your Photos

Your photos and results are handled by these kinds of service providers, only to run the Service:

• Hosting and cloud storage — the provider that runs our site and stores uploads and results.
• AI model providers — the companies that run the AI models. They receive the photos needed for your request and return the result. When one provider fails, we may send the same request to a backup provider.

Other data goes to these kinds of providers: payment processing, email delivery, site analytics, and internal monitoring (error details about failed generations, without your photos). Each handles data on our instructions and only as needed for its job.

Analytics

We use two analytics services:

• Google Analytics 4 — counts visits and which pages and buttons are used. We have turned off Google signals and ad personalization, so this data is not used for advertising.
• Microsoft Clarity — shows how pages are used, including heatmaps and session replay (a recording of clicks, scrolls and mouse movement on our pages). The upload area, your photos and text you type are masked, so they are not recorded.

Visitors from the European Economic Area, the United Kingdom and Switzerland see a choice first, and neither service loads unless they agree.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information, and we do not load Microsoft Clarity.

Do Not Track. We do not respond to Do Not Track (DNT) browser signals, because there is no common standard for them; we honor GPC as described above. Third-party analytics services may collect information about your activity across different websites over time.

Sign in with Google

If you sign in with Google, we receive your name, email address and profile picture, and use them only to create and run your account. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this information for advertising and do not sell it.

How Long We Keep It

• Uploaded photos: deleted automatically 7 days after you upload them, from storage and from our records. AI providers that process a request keep their copy only for the short period set by their own retention terms.
• Results: the files are deleted automatically 30 days after they are made, or earlier when you delete them or close your account. Download anything you want to keep.
• Generation records: when a result's files are deleted, whether on expiry, because you deleted the result, or because you closed your account, we keep a minimal record of that generation: when it was made, by which account, the tool and credits used, and whether and when it was downloaded. It holds no files, prompts or uploaded photos. We keep it to answer payment disputes and chargebacks. Records of results you deleted, and all records of a closed account, are deleted automatically 3 years after you deleted the result or closed the account.
• Consent records: kept while your account exists and for 3 years after you close it, so we can show what was agreed if there is a complaint; then deleted automatically.
• Account information: kept until you close your account.
• Sign-in sessions (with IP address and browser): kept until the session ends or expires, and deleted when you close your account.
• Payment and order records: kept as long as tax and accounting laws require.
• Support messages and content reports: kept as long as needed to deal with your request and to keep a record of what we did about it.

Deleting Your Data

You can do this yourself, signed in:

• Delete a result: Settings → My works, then the delete button on the result. The result, and the uploaded photos it used that no other result of yours uses, are deleted from storage, and its share link stops working. A minimal generation record without the files, prompt or photos is kept for payment disputes, as described above.
• Close your account: Settings → Profile → Close account. This deletes your results, uploads, profile and sign-in sessions. We keep payment records as the law requires, and minimal generation records and consent records for 3 years after closing, as described above.

If you cannot sign in, write to support@rapblaze.com from the email address on your account.

Cookies and Similar Technologies

We use these:

• Sign-in cookie — keeps you signed in. Without it you cannot use your account.
• Terms cookie (tos_ack) — for 30 minutes after you click sign in or sign up, records that you accepted our Terms, so the acceptance can be saved to your account.
• Language cookie (PARAGLIDE_LOCALE) — remembers the language you chose.
• First-visit cookie (first_touch) — remembers, for about a month, the page and campaign that first brought you to the site, so we know which pages and links help people find us. It is saved to your account when you sign up.
• Analytics choice cookie (analytics_consent) — for visitors asked to choose, remembers your choice for a year.
• Analytics cookies — Google Analytics and Microsoft Clarity set their own cookies to measure visits and how pages are used (see "Analytics" above).

You can block or delete cookies in your browser settings. If you block the sign-in cookie, you will not be able to sign in.

Your Privacy Rights

Depending on where you live (for example under the GDPR in the EU and UK, or US state privacy laws such as the CCPA), you can ask us to:

• tell you what personal data we hold about you, where it came from, why we use it and who receives it, and give you a copy;
• correct inaccurate data;
• delete it;
• export it in a portable format;
• limit the use of sensitive personal information, or stop or object to some other uses of it.

We do not sell your personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of there.

How to ask. Email support@rapblaze.com. To protect your account, we verify a request by matching it to the email address on your account: send it from that address, or confirm it from that address when we ask. Authorized agents may make a request for you; we will ask for your signed permission and may ask you to confirm the request directly from your account email. We will answer within the time the law requires, and we will not treat you differently for using these rights.

The GDPR (EEA, UK and Switzerland)

Controller. The operator of Rap Blaze, United States, is the controller of your personal data. Contact: support@rapblaze.com.

Legal bases. We process your data to provide the Service you asked for (contract), to keep consent records and stop abuse (our legitimate interests and legal duties), and for analytics only with your consent. You can withdraw your consent at any time, without affecting processing before you withdrew: delete the analytics_consent cookie in your browser, and the choice will be shown again on your next visit.

International transfers. We are based in the United States, and so are many of our providers. When your data is transferred out of the EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum for UK data) or on the provider's certification under the EU-U.S. Data Privacy Framework.

You can also complain to your local data protection authority.

Children

The Service is only for people aged 18 or older. Do not use it if you are under 18. If we learn that a child under 18 has an account, we close it and delete its data. Photos that show children are covered by our Acceptable Use Policy.

Security

We use HTTPS, access controls and reputable providers to protect your data. No system is perfectly secure, so please tell us at once if you think your account has been misused.

Changes to This Policy

If we change this policy, we will update the date at the top of this page, and tell you by email if the change is significant.

Contact

Questions about privacy: support@rapblaze.com.