Who is responsible
The operator of this website, is the controller for the personal data described here. For any privacy question or request, use the contact method on our contact page.
What we collect
When accounts are available, we store your name, email address, verification status, session information, and account activity needed to provide the service. We store purchase records, credit entries, generation stages, and provider cost records. Stripe processes payment details; RapClip does not store your full card number.
Your photo and video
A photo you select before signing in stays in this browser’s IndexedDB. The draft is usable for 30 minutes and is cleared on expiry while the studio is open, when you next open the studio, or after you submit a generation. Uploading creates a private asset belonging to your account. We correct its orientation, remove metadata, and prepare a separate image for processing.
Processing providers receive only the media and instructions needed to check your photo and create your requested clip. Cloudflare R2 stores media, Cloudflare D1 stores account and job records, and the configured video and moderation providers process requests. Resend delivers account emails. These providers may process data in other countries under their own terms.
Legal basis
We process account, order, and delivery data to perform the service you request (contract). Photo checking and generation run only after you confirm you have the right to use the photo (explicit consent). Fraud prevention, payment records, and security logging rely on our legitimate interest in operating a safe, chargeback-protected service. Optional analytics load only with your consent and stop when you withdraw it.
Where your data goes
Our infrastructure and providers — Cloudflare, Stripe, the video and moderation providers, Resend, and Google Analytics when you opt in — may process data in countries outside your own, including outside the EEA. We choose providers that offer appropriate safeguards, including European Commission standard contractual clauses where required, and limit transfers to what is needed to deliver the service.
Access and retention
Photos and finished clips are private by default. Media access uses temporary signed links after an ownership check. Unused uploads are scheduled for removal after 24 hours. Task input and intermediate media are scheduled for removal 24 hours after a task finishes. Completed clips are kept for 30 days. You may delete a completed work sooner.
Cleanup runs periodically, so removal can occur after the scheduled time. Necessary payment, credit, fraud-prevention, and cost-audit records are retained separately from deleted media. We do not publish your works in the examples gallery automatically.
Cookies and analytics
Essential cookies keep you signed in and protect account requests. Optional Google Analytics loads only after you choose to allow it and uses cookies to measure visits. Analytics events describe actions such as preview, checkout, generation, and download. We do not send photos, email addresses, private signed media links, or raw form input in analytics events. You can change your choice using Cookie settings in the footer.
Your choices
You can remove an unsubmitted photo in the studio, delete finished works from My clips, and choose whether to allow analytics. For account access, correction, deletion, or a privacy request, use the contact method shown on our contact page. We will verify ownership before making changes.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your data, to receive a copy of it in a portable format, and to withdraw consent at any time — withdrawal does not affect processing that already happened. You may also lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, use the contact page.
Service updates
Purchases and generation are available when the studio's live service checks permit them; temporary maintenance or capacity limits may pause new requests. Material changes to data handling will be reflected here before the related service changes take effect.