Privacy Policy
How RapSong handles your lyrics, song files, gift messages, account details and usage information.
Last updated: 2026-10-25
In one minute
- Write without an account. A signed device cookie and a keyed hash of your IP help enforce quotas.
- Lyrics, facts and pronunciation hints go to the AI providers needed to write and perform your song.
- Your generated full songs are private unless you share an unlocked link. Editorial demo songs are public. Anyone with that link can listen.
- Private photo uploads are deleted after seven days. Voice uploads and voice cloning are not supported.
- Contact us to request access, correction or deletion. Some transaction records may need to be retained.
Information we process
We process names, factual details, lyrics, pronunciation hints, selected styles, generated audio, uploaded photos, generated videos and optional sender names and gift messages. Please avoid sensitive personal information and obtain permission before submitting information about someone else. An account adds your email address and authentication records. Payment providers process card details; RapSong does not need your full card number.
The browser keeps the current song draft and preview reference in session storage for up to 24 hours in that tab. This helps preserve work through sign-in. Starting a new song or choosing Make one back clears that draft. Closing a tab may remove its session storage sooner. Account-linked songs and payment records are held on the service, not only in your browser.
Why we use it
We use information to deliver lyrics and audio, check safety and permissions, enforce generation budgets, protect accounts, fulfill purchases, support refunds and respond to requests. We record limited first-party workflow events such as a preview being played or a song being delivered. These events do not contain the lyrics or a gift message. Infrastructure logs may contain connection information needed for security.
We use a signed device identifier and keyed IP hashes for rate limits. These are pseudonymous identifiers, not a claim of complete anonymity. Authentication, consent choices and first-visit attribution may also use cookies. Optional third-party analytics follows the consent controls shown when that integration is enabled.
Providers and transfers
OpenRouter and its selected model provider process lyrics and photo safety reviews; fal and MiniMax process music, and fal routes photo performance requests to OmniHuman or the selected Kling alternative. Cloudflare may provide hosting, storage and abuse protection, Stripe handles payments when enabled, and Cloudflare Email Service handles transactional delivery email. Providers may operate in other countries. Their processing and retention terms apply to data sent to them; we cannot promise that every upstream copy is instantly erased.
We request no-data-collection routing for our lyric model. That setting is not a blanket guarantee that all music or infrastructure providers never retain data. We do not claim a universal no-training promise. Review the OpenRouter privacy policy and fal privacy policy for their practices.
Photos
Photos are stored privately in Cloudflare R2 and deleted after seven days. Short-lived signed links allow the video provider to retrieve the necessary input; links expire after one hour. Temporary audio segments and masks are used to build a performance. We request one-day retention for provider-generated assets where that option is available. These settings do not override a provider’s legal or security retention obligations.
Only upload images you have the right to use, with consent from everyone pictured. No minors or public figures may be performers. Safety checks process the photo before generation. We do not use uploaded photos for a public examples gallery without a separate authorization.
Sharing and retention
Unshared full audio and video are accessed through owner authorization. An unlocked share or gift URL is a bearer link: forwarding it grants access to the recipient. Search engines are instructed not to index these pages, but noindex is not an access control. Do not post a private gift link publicly.
We retain account-linked songs and records while needed to provide access, handle support, prevent abuse and meet applicable obligations. No fixed automatic deletion period is promised for songs. Ask us to delete a song or account; transaction, dispute, security and backup records may be retained where necessary. A refunded purchase loses future download and shared-link access, but previously downloaded copies cannot be recalled.
Your choices and children
You can choose what information to submit, avoid sharing a link, clear your local draft and request access, correction or deletion through the contact below. Depending on your location, additional privacy rights may apply. We may ask for proportionate ownership verification before acting. We do not sell your song content as a customer list.
The service is intended for adults 18 and over. Do not submit a child’s personal information or use the service to exploit, sexualize or harass anyone. If you believe a child has provided information, contact us so we can investigate.
Contact
RapSong (rapsong.ai)
For privacy, refunds, rights complaints or other questions about RapSong, email support@rapsong.ai. Include the relevant order or page link; never send a password or payment-card number.