Legal / Privacy Policy

Your photos, your call.

We collect what it takes to make your video and keep the service safe, we delete it on a schedule, and we never sell it.

Last updated November 7, 2026

01Who we are and what this covers

Rocky Yang, an individual operating as Make Me Rap (“Make Me Rap”, “we”) operates makemerap.com from the United States. The service turns photos into short AI-generated rap music videos for people in the United States. This policy explains what personal information we collect when you visit the site, sign in, upload photos, order a video, send a report or send us feedback, and what we do with it.

02What we collect

  • Account. Your email address, when you created the account and last signed in, and your active sessions. If you choose email and password, we store a salted password hash, not your password, and short-lived verification and reset records. If you choose Google sign-in, we verify Google’s signed response and store its stable account identifier to reconnect you to the same account. We do not store the Google credential token, profile photo or Google password.
  • Photos you upload. The image, its file type and size, a fingerprint (hash) we use to spot duplicates and copies of our own samples, and your confirmation that the photo is yours or used with consent.
  • What we make from them. The free appearance preview, the finished video and optional vertical export, and the results of our safety and technical checks.
  • Order details. The song, scene, outfit, voice, format, resolution, video model and caption choice you pick, and the order’s status and timestamps.
  • Safety-check results. The labels and decision from the automated photo check, linked to a one-way hash of your account ID.
  • Reports and messages. The name, email address, link and description you send us through the report form or by email, and what we decided.
  • Feedback. What you send through the feedback form: the topic and message, your email address only if you give it for a reply, an order ID if you add one, the page you came from, your browser and device type (for example “Safari on iOS”, not the full browser details) and, if you are signed in, your account. We do not store your IP address with it; to stop spam we keep a one-way hash of it for at most two days.
  • Technical data. IP address, browser and device type, pages requested, timestamps and error logs, recorded by our hosting provider when you use the site.
  • Payments. When ordering is available, you pay on PayPal’s checkout page after seeing the free appearance preview, with a PayPal account or, where PayPal offers it, a debit or credit card as a guest. PayPal collects your payment details and handles them under its own privacy statement. From PayPal we keep the order and transaction IDs, the payment status, amount and currency, and whether a payment was refunded or disputed. We never receive your full card number or your PayPal password. PayPal’s replies can include your name and PayPal email address; we do not store them. We do not send PayPal your photos or your Make Me Rap email address.

We do not create face-recognition templates or use photos to identify anyone. Our software detects where a face is in a photo only to crop and place it in the scene.

03How we use it

  • To make and deliver the video you ask for, and to show you its status.
  • To check photos, appearance previews and videos for safety and technical validity. Normal delivery uses automated checks and does not wait for human approval. We may review material when investigating a report or service problem.
  • To run your account: sign-in links and codes, email verification, password resets, status emails and replies to your messages.
  • To read your feedback, fix the problems you tell us about and improve the service.
  • To handle reports and removal requests, and to enforce our Terms and Acceptable Use Policy.
  • To keep the service secure, prevent abuse and fraud, and fix errors.
  • To meet legal obligations.

We do not use your photos or videos to train AI models, we do not use them in our marketing, and we do not build advertising profiles.

04Who processes it for us

We share personal information only with the service providers below, who process it for us to run Make Me Rap, and only what each one needs.

ProviderWhat it doesWhat it receivesWhere
SeeAPIChecks photos and sampled video frames for nudity, sexual content and suspected sexualized content involving minorsYour uploaded photos and sampled video frames for safety checksProcessing locations have not been independently verified
fal.aiCreates appearance previews and runs the video generation modelYour reference photos and preview reference images; the source performance video for the paid video editProcessing location depends on the service and model
ResendSends sign-in links and codes, email verification and password reset links, video status emails, and report, feedback and payment notifications to our teamYour email address and the email content, including the feedback you send us; payment notifications to our team include your account email, the order and payment statusUSA
Google Identity ServicesOptional Google sign-in on our login screen and account-linking screenGoogle processes the sign-in interaction. We receive your email address, verification status and Google account identifier; we do not receive your Google passwordGoogle’s global infrastructure
CloudflareHosting, database, private file storage, security and logsEverything the site stores, plus request logsUSA and Cloudflare’s global network
Our render workerSubmits preview and paid video jobs, downloads and checks results, prepares optional vertical exports, and transfers files to private storageYour photos and videos while a video is being madeUnited States
pvuv.aiWebsite analytics: counts visits and page views, measures how pages are used and how fast they load, and shows which public pages search engines and AI assistants fetchOn public pages only (not your account, orders, checkout or sign-in pages): the page address and the page you came from, browser, device, screen size, language and time zone, links and buttons you click, page errors, a random visitor ID kept in cookies, and your IP address as part of each request. When a request for a public page identifies itself as a search engine or AI assistant (for example Googlebot or ChatGPT), our server also sends pvuv.ai the page address without its query details, the request’s user agent and IP address, the response status and the timeProcessing locations have not been independently verified
PostHogProduct analytics: which pages and features are used, where visitors drop off, and, if enabled, recordings of how pages are usedOn public pages only (not your account, orders, checkout or sign-in pages): page addresses without their query details, the page you came from, browser and device details, clicks and page interactions with anything you type masked, a random visitor ID kept in a cookie and local storage, and your IP address as part of each requestUSA
Google FontsServes the fonts on our pagesYour IP address and browser details when a page loads fontsUSA
PayPalProcesses payments, refunds and disputesFrom us: the price, a description of the video (for example “Naughty or Nice AI rap music video”) and an order reference. Your payment details you give to PayPal directlyUSA

We may also disclose information when the law requires it, to report child sexual abuse material to the National Center for Missing & Exploited Children as US law requires, to protect someone’s safety, or as part of a merger or sale of the business (we would tell you first). Otherwise we share it only with your permission.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. The site has no advertising trackers. We use pvuv.ai and PostHog analytics on public pages only to understand how visitors use the site; they are not used for advertising.

05How long we keep it

These are our default periods. Our website’s scheduled cleanup excludes open reports and the photos, previews and videos linked to those reports. We may separately retain records needed to meet legal obligations.

InformationHow long
Website copies of your photos and appearance previewsScheduled for deletion 30 days after your video is delivered, cancelled or fails, or after upload if unused. You can delete website copies sooner by deleting the photo or your account. Photos that fail the safety check are not saved in our photo storage; they are sent to SeeAPI for that check.
Finished videos on the websiteAvailable in My videos for 90 days after delivery, then removed by scheduled cleanup. Download anything you want to keep.
Temporary render-worker copiesEligible for cleanup after 30 days without changes once processing is no longer active. Account deletion also queues these copies for removal. Maintenance runs periodically while the worker is online and idle; outages or unfinished processing can delay removal. Uncertain processing records are retained until safely reconciled.
Your account (email address, password hash if set, and Google account identifier if linked)Until you delete your account.
Order details (song, scene, voice, options, status)Until you delete your account, except for purchase records (PayPal order and transaction IDs, amounts, refunds and disputes) that we must keep to meet legal obligations.
Safety-check results365 days. These hold the labels and decision and a one-way hash of your account ID, never the photo.
Reports and our decisionsNormally 730 days from submission. Unresolved reports are kept until they are resolved; records needed for a legal obligation may be retained separately.
Feedback you send us365 days, with any email address you gave for a reply and our notes on it. Deleting your account deletes the feedback you sent while signed in or from that email address.
Request and error logsUp to 30 days at our hosting provider.
BackupsDeleted data can remain in database backups for up to 30 days before it rolls off.

06Your choices and rights

Delete your account. You can delete your account at any time from your account page. When account deletion finishes, it removes your email address, photos, previews, videos, order history and signed-in feedback from the website. Render-worker copies follow the maintenance schedule above. Separate records that remain include: safety-check results, reports filed by other people, anonymized cost and admin audit records, and any records the law requires (for example, legally required purchase records).

Delete a photo or video sooner. You can remove website copies of photos and videos you no longer want; photos used by a video that is still being made can be removed once it finishes or is cancelled. Temporary processing copies follow the render-worker schedule above.

Access, copy and correction. Download your videos from My videos, or ask for a copy of the personal information we hold about you, or to correct it, by emailing support@makemerap.com or by choosing “Privacy request” on our feedback form. We verify requests by replying to the email address on your account.

California residents. Under the CCPA you can ask to know what personal information we collected, used and disclosed in the past 12 months, and to delete or correct it. You can use an authorized agent. We do not sell or share personal information, we use photos only to provide the service you asked for, and we will not treat you differently for using your rights. We honor Global Privacy Control signals. We respond within 45 days.

Other US states. Residents of states with privacy laws (such as Virginia, Colorado, Connecticut, Texas and Oregon) have similar rights to access, correct, delete and get a copy of their data. If we decline a request, you can appeal by replying to our decision.

Visitors from the EU, EEA or UK. Make Me Rap is built for the United States. If GDPR applies to you, we rely on contract (to make the video you order), legitimate interests (safety, security and preventing abuse), your consent and the consent you obtained from the people in your photos, and legal obligations. You can ask for access, correction, deletion, restriction, portability or object to processing, and complain to your data protection authority. Our render worker processes your photos and videos in the United States. Other service providers may process information in the locations listed above, including outside the United States.

07Cookies

We use a session cookie to keep you signed in and, when you use Google sign-in, a short-lived security cookie to bind that attempt to your browser. Our hosting provider may also set security cookies to block abusive traffic. Google’s sign-in interface may use Google cookies or your browser’s federated sign-in features, governed by Google’s Privacy Policy and your browser settings. On public pages, our analytics provider pvuv.ai sets first-party cookies with a random visitor ID (_pv_id, about 13 months, also kept in your browser’s local storage), a visit ID (_pv_sid, up to 24 hours) and where your first visit came from (_pv_ft, about 13 months). PostHog keeps a random visitor ID and its own settings in first-party cookies and local storage whose names start with ph_ and contain our project key (about 1 year). Neither provider receives data from your account, order, checkout or sign-in pages. You can delete or block these cookies in your browser settings; the site works without them. We do not use advertising cookies.

08Children

Make Me Rap is for adults 18 and older. We do not knowingly collect information from anyone under 18, and photos of minors are not allowed. If we learn we hold a child’s information, we delete it. If you believe a child’s photo was uploaded, please report it.

09Security

The site uses HTTPS. Photos and videos sit in private storage and are served only to the signed-in account that owns them; our render computer connects with its own secret token. No system is perfectly secure, so we limit what we collect and keep. If a breach affects your information, we will tell you as the law requires.

10Changes to this policy

We will update this policy when our providers or practices change, including when our payment or generation services change. We will post the new version here with a new date and, for material changes, tell you by email or on the site before they take effect.

11Contact

Privacy questions and requests: email support@makemerap.com, or choose “Privacy request” on our feedback form.