AirapSong Privacy

Account and generation data

AirapSong stores account details, authentication sessions, credit transactions, generation requests and task status in a project-isolated database. Session and language cookies support sign-in and preferences. Passwords are hashed; provider credentials are server-side and encrypted at rest.

AI and content review

Prompts, lyrics and selected media are sent to the configured generation and moderation services when you submit a task. Current integrations include SEEAPI, Artflow and H3. Reference images are uploaded for review before use. Video review samples frames; music review covers returned text and artwork. Audio itself is not reviewed. Do not submit confidential material or media you lack permission to use.

Media and local drafts

Uploaded and generated media use Cloudflare R2. The application restricts task access to the owning account, but media URLs are bearer-style public links: anyone with the exact URL can retrieve the file. Do not treat cloud assets as confidential storage. Moderation staging objects expire after seven days. Approved assets are copied to a separate archive before staging expiry.

Demo creations and the lyrics notebook may remain in browser storage. Cloud creations are listed separately and are available after sign-in on another device. Cloud deletion removes the task from the application; it does not promise immediate erasure of the underlying R2 object, provider copies, or previously downloaded files.

Operations and pending services

Technical errors and task state may be logged for diagnosis. Provider key alerts go to the operator through Feishu without prompts, media or keys. Payment and transactional email services are not yet activated. Their activation and retention/deletion controls require an updated notice before commercial launch.

Google sign-in and service purposes

Google sign-in shares the basic profile and email permitted at authorization, including name and profile image, to create and authenticate an AirapSong account. AirapSong does not request access to Gmail messages or Google Drive files. Session and language cookies support essential account functions and preferences; browser controls can delete them, which may sign you out. Browser storage also holds local drafts. This notice does not claim that a cookie preference center or a marketing email program is in operation.

Account and task information is used to provide the requested service; order information is used for billing and credit accounting. Support messages help resolve requests. Limited technical and security information, including request timestamps, errors and network information available to hosting services, may be used to prevent abuse and diagnose failures. Applicable legal bases depend on the activity and jurisdiction, including contract performance, legal obligations, legitimate interests in operating and securing the service, and consent where required.

Payments through Waffo Pancake

When Waffo checkout is enabled, it processes the payment and associated billing/tax information as merchant of record. The integration uses an account identifier, buyer email, product/order reference and amount/currency; AirapSong receives payment and refund status and records credit transactions. Full card numbers and security codes are not stored by AirapSong. Waffo's collection and retention are described in its Privacy Policy. Product creation in Waffo does not mean live checkout or automatic credit delivery is active.

Retention, rights and international processing

Account, task, support and credit records are retained as needed to operate the service and resolve requests. Financial or security records may need to be retained for applicable legal obligations or disputes. There is no automatic deletion deadline promised for all records. The seven-day lifecycle applies only to moderation staging objects; library deletion does not immediately purge archived media or provider copies.

Depending on applicable law, you may request access, correction, a copy, deletion, restriction or objection to processing, and withdraw consent where processing relies on it. Contact help@airapsong.com with “Privacy request” in the subject, or use Support Tickets; the operator may verify ownership and explain any lawful retention limits. You may also contact your competent privacy authority. Removing Google access does not itself delete your AirapSong account or generated media.

Cloudflare, the Supabase database and AI providers can process information in countries different from your own; the configured database is in the United States. No claim is made here that every supplier stores data in one country or under an independently audited arrangement. Do not submit confidential content. The service is intended for adults; report a child's personal data through the same support channel. Material privacy changes will be reflected here and explained through an appropriate service notice.

Website analytics

AirapSong uses Google Analytics 4 to understand website visits and usage. Google Analytics may use cookies and process page URLs, interactions, and browser or device information. For information about Google’s processing, see Google Privacy Policy. Contact help@airapsong.com with privacy questions.