Privacy Policy

Effective date: October 25, 2026.

1. Who operates the service

Starwind at https://rapvideoaigen.com is operated by Starwind, based in Hong Kong SAR. In this policy, “we” means that operator. Contact us at support@rapvideoaigen.com or through the support-ticket area of your account.

This policy covers our website, accounts, purchases, support and template-based video generation. It does not cover a third party's separate website or service.

2. Information we process

We process the information needed for the features you use:

• Account information: your email address, chosen name, sign-in records and profile settings. Passwords are stored as hashes rather than readable passwords.
• Generation information: the photo you submit, selected template and quality, task identifiers, permission confirmations, processing status, output files and media links.
• Purchase information: order identifiers, the credit pack purchased, payment status, amounts, credits used or restored and refund records. Checkout providers process payment-card details; our application does not store full card numbers or card security codes.
• Support information: messages, order or task identifiers and attachments you send us.
• Operational information: IP addresses, browser or device information, timestamps, referral information and security or error logs where collected by the website and hosting services.

Please do not send passwords, full card details, identity documents or unnecessary sensitive information in uploads or support tickets.

3. When a photo leaves your browser

Selecting a photo prepares a draft in your browser. Submission requires an account. When you request generation, the application uploads the photo to storage and gives the selected AI service access so it can process the requested video.

Browser drafts expire after 24 hours and are cleared when the application next checks them; expiry does not remotely erase an inactive browser. You can also clear drafts by removing this site's browser storage.

Submitted portraits use time-limited signed access links. The current generation flow issues links lasting up to two hours so the AI service can retrieve the image. A link expiring does not delete the underlying file or a copy already retrieved by a provider. Anyone who receives a still-valid signed link may be able to access the photo, so do not share those links.

4. Why we process information

We use information to manage accounts, run the generation you request, deliver results, maintain credit balances, reconcile payments and refunds, answer support requests, investigate faults, prevent abuse and meet legal obligations.

Where EU or UK data-protection law applies, the relevant bases may include performing our contract with you, legitimate interests in security and reliable operation, legal obligations and consent for processing that requires it. Consent to use another person's image must be obtained by you; it is separate from any consent we must collect from the person using the website. If sensitive information requires additional permission or safeguards, we will not assume that a general upload confirmation supplies them.

5. Who can access photos and videos

Account task records are accessed through authenticated account features. Storage, AI and support personnel may access information as necessary to perform the purposes described here.

Generated files can also have direct media links. Possession of a video link may permit access without an account; an account login is not a guarantee that every media URL is private. We do not promise that output links remain available forever.

We do not include your portraits or resulting videos in a public gallery, advertising or examples unless you separately agree to that publication. Giving permission to generate a video does not itself give permission to display it publicly.

6. Service providers and international processing

Our current infrastructure uses Cloudflare for website delivery and object storage and Supabase PostgreSQL for account and business records. The currently published Burning Bridges video templates are configured to use the Seedance 2.5 AI video model through the SeeAPI API service (model identifier: seedance-2-5). SeeAPI receives the images, reference video and generation instructions needed to process a request. The provider and model may change with the selected template; check its current details before submitting. When checkout is enabled, the payment provider identified at checkout, currently planned as Waffo, processes the transaction and returns order information.

These providers may process information outside your country. International processing is subject to applicable data-protection law. Contact us for information about the providers, processing locations and safeguards available for the service you intend to use. This policy does not certify that every provider offers the same transfer, retention or deletion arrangements.

Our application does not operate its own model-training workflow. This is not a verified promise that every upstream provider excludes inputs and outputs from training. Provider retention, training and deletion terms must be checked for the specific generation service. Contact us before submitting material with confidentiality requirements.

We do not sell your personal information. Any later material change to advertising, sharing or model-training use must be explained before it takes effect, with consent where required.

7. Cookies and local storage

The application uses essential session cookies and browser storage for drafts, preferences and your account's local creation cache. Hosting services may use additional security mechanisms. Optional website analytics and advertising integrations are not currently enabled in the application configuration as of the effective date above. If we enable them, we will explain their use and collect any consent required before non-essential tracking starts.

8. Retention and deletion

We retain account and generation records while needed to provide history, access to results and support. Payment, credit, fraud-prevention and legal records may need to remain after media or an account is removed. We assess continued retention against the purposes described in this policy and applicable legal requirements. You may contact us about a specific record or file.

Uploaded photos in our private portrait storage are automatically deleted 30 days after upload under its configured lifecycle rule. This rule does not apply to browser drafts, generated videos, provider copies or backups. Browser draft expiry is described above; generated videos are not covered by a fixed automatic deletion schedule. Provider copies follow the provider’s own retention arrangements, and deletion from primary storage does not establish immediate backup erasure. Removing a creation from the interface hides its task record; it does not by itself establish that stored media, provider copies and backups have all been erased.

Request file or account deletion using support@rapvideoaigen.com or an account support ticket. Identify the affected account or creation; we may request proportionate information to verify the request. We will explain what we can delete, any records we must retain and any separate action required with a provider. We cannot erase copies that other people have lawfully or unlawfully saved outside our control.

9. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, portability or restriction, object to certain processing and withdraw consent for processing based on it. Withdrawal does not invalidate earlier lawful processing. You may complain to your local data-protection authority. We respond within the applicable legal deadline and explain any permitted extension or refusal.

Hong Kong users may request access to and correction of personal data under the Personal Data (Privacy) Ordinance. We handle other privacy requests according to applicable law and the commitments in this policy.

Our service is for users aged 18 or older. Do not upload portraits of minors. A depicted person can contact us about unauthorized use even if they do not have an account.

10. Security and policy changes

We use HTTPS, account access controls and limited-duration portrait links. These measures reduce risk but do not make all processing or media links risk-free. We investigate reported incidents and provide legally required notifications.

We will date policy updates and give appropriate notice of material changes. Contact support@rapvideoaigen.com with questions or rights requests.