Privacy Policy

1. Who is responsible

Best AI Rap Video (https://bestairapvideo.com) is operated by a China-based individual under the trading brand Junvello Digital. The operator is responsible for the personal information processed to provide this service. Junvello Digital is a brand, not a statement of incorporation. Contact support@bestairapvideo.com for all privacy requests.

This policy applies to our service. Independent payment, login and AI providers may also process information under their own policies.

2. Information we process

Account information includes your email address, authentication identifier and basic profile information supplied through an authorized Google sign-in. Supabase handles authentication, including email verification. We do not ask you to create a website password or send us your email password.

Content includes uploaded photographs, recordings where supported, generation settings, task identifiers and generated media. Photographs may contain facial information used to generate the requested performance; we do not use them to authenticate your identity.

Purchase and activity records include package, amount, currency, provider order identifiers, payment and refund status, credit movements and task history. We do not store complete card numbers or card security codes.

We process support correspondence and technical information needed for operation and security, such as request timestamps, IP addresses available in infrastructure logs, browser/request information, errors and service activity. We do not collect precise device location for this service.

3. Purposes and legal grounds

We process account details, submitted content and task information to perform our contract with you: signing you in, generating and delivering videos, and providing support. Billing records support payment, refunds and accounting.

Where applicable law requires a legal basis, contract performance supports service delivery; legal obligations support required financial records and lawful disclosures; legitimate interests support proportionate security, fraud prevention and troubleshooting. Where consent is required for optional processing, we obtain it separately and allow withdrawal. We do not use acceptance of this policy as blanket consent to every processing activity.

4. Cookies and local drafts

Necessary authentication cookies maintain your session. Browser storage may retain prepared photo drafts and settings for recovery on the same device. Draft expiry is checked when opened after twenty-four hours; this is not a guarantee that a browser that is not running automatically erases storage at that moment. Clear the site’s browser data to remove drafts sooner.

Disabling necessary cookies may prevent sign-in. This policy does not claim that we have an optional cookie-preference center. We do not currently deploy advertising pixels or send promotional campaigns; any future optional tracking or marketing will be disclosed and consent obtained where required.

5. Service providers and disclosures

Supabase provides account authentication and database services. Cloudflare provides hosting, delivery, security and private object storage. When you confirm a generation, the required photographs or supported audio and generation instructions may be shared with SeeAPI and its underlying model providers using time-limited media URLs. KIE may have processed older audio tasks. OpenAI provides character-sheet image generation and text/image content checks. The required photographs and instructions are sent to OpenAI for those steps; generated character sheets and the motion reference are then sent to SeeAPI for video generation. Generation cannot occur without transmitting the necessary inputs to the relevant provider.

For purchases completed through Waffo Pancake, Waffo acts as checkout provider and merchant of record. Its checkout processes payment details under its own privacy terms. Our systems receive order and payment status needed to deliver credits and handle refunds. Historical records from another payment provider, if any, may be retained for reconciliation.

We do not sell your personal information or share it for cross-context behavioral advertising. We do not publish your uploads as customer examples. We may disclose information when legally required, to protect rights and security, or as part of a lawful business transfer with appropriate notice and safeguards.

We do not use uploads to train our own AI models. Provider copies, processing and retention are subject to the relevant provider’s terms; our deletion of a file does not itself prove deletion of every provider copy.

6. Security and international processing

We use HTTPS, authenticated account access, private media storage, time-limited media links and server-side access checks. No online service can guarantee absolute security. We do not claim security certifications or contractual safeguards that have not been verified.

Our operator is in China and our infrastructure and providers may process data in other countries. Applicable transfer requirements and provider contractual arrangements must be assessed for the relevant processing. We do not claim that every recipient is covered by a particular SCC, adequacy decision or certification.

If a personal-data breach occurs, we will investigate, contain it and notify the appropriate authorities and affected individuals as required by applicable law. Where GDPR applies, this includes notifying the supervisory authority within seventy-two hours of awareness when required, and notifying affected individuals without undue delay when the applicable risk threshold is met.

7. Retention and deletion

Local drafts: a twenty-four-hour expiry is checked when opened. Uploaded task inputs and intermediate media: scheduled for deletion after a task has finished and is at least twenty-four hours old. Background cleanup must run to complete deletion; interruptions can delay it. Results: download access normally lasts seven days, after which files are queued for deletion. Previously issued signed links may remain usable for up to one hour.

Account information is retained while the account is active. On a verified closure request, we aim to remove or de-identify non-required account information within thirty days. Media deletion does not remove the transaction and task metadata needed to explain credit movements.

Transaction, tax, dispute and security records may need to be retained beyond account closure under applicable obligations. A fixed retention schedule for those records and support correspondence has not yet been finalized before paid launch; they are currently retained for service administration and reviewed on deletion requests. We do not represent that those categories are already automatically deleted after a fixed period.

Legal holds, unresolved disputes and required accounting records may delay deletion. Independent providers and backups may follow separate retention schedules. Contact us for a request concerning those copies.

8. Your privacy rights

Subject to applicable law, you may request access and a copy, correction, deletion, restriction of processing, portability, or object to processing based on legitimate interests. You may withdraw consent for processing that relies on consent, without affecting prior lawful processing. You may complain to the data-protection authority competent for your location.

Email support@bestairapvideo.com from your account email. We may ask for proportionate verification before releasing or changing data. We aim to respond within one month, or within the period required by applicable law, and will explain lawful extensions or exemptions. We will not discriminate against you for exercising applicable privacy rights.

9. Adults only

This service is intended for users aged eighteen or older and authorized adult subjects. We do not knowingly collect information from children. If a child has provided information, contact us so we can investigate and remove it where appropriate.

10. Communications and policy updates

We send necessary account, security and transaction communications. We do not currently send optional marketing campaigns. If we introduce them, we will provide the required choice and an effective unsubscribe method; opting out will not stop necessary service messages.

Material changes will be announced on the website or by email at least fifteen days before taking effect, unless a legal or urgent security need requires earlier action. The effective date will be updated.

11. Contact and provider policies

Privacy contact: support@bestairapvideo.com. Trading brand: Junvello Digital. Operating country: China. We currently publish an email contact rather than a postal address.

Provider privacy information is available at https://supabase.com/privacy, https://www.cloudflare.com/privacypolicy/ and through the privacy notices presented by your payment and generation providers. Contact us if you need help identifying the provider for a particular transaction or task.