Privacy Policy
Last Updated: October 31, 2026
Boombox Rap AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use Boombox Rap AI (the "Service"), and the rights available to you.
Please read this Policy carefully before using the Service. By using the Service, you agree to this Policy. We may update this Policy periodically and will notify you of material changes via email (when available) or an in-product notice.
1. Data Controller
The data controller for this Service is:
- Service / Brand Name: Boombox Rap AI
- Operator: an individual / sole trader operating under the laws of the People's Republic of China
- Privacy Email: darkerchen159631@gmail.com
- Data Protection Officer (DPO): Not applicable
2. Personal Information We Collect
2.1 Information You Provide Directly
- Account Info: email address, display name, and authentication credentials (passwords stored hashed/encrypted when password login is enabled).
- Payment Info: transaction amount, currency, and payment status. Full card numbers are not stored by us — card data is processed by our payment processor (see Section 5).
- User Content: photos, optional lyrics/text, and style preferences you submit to generate videos.
- Communications: emails and support messages you send us.
2.2 Information We Collect Automatically
- Device & Network: IP address, device/browser type, operating system, time zone.
- Usage Data: pages visited, feature usage, generation requests, session duration.
- Log Data: request timestamps, error logs, performance metrics.
Third-Party Login (when enabled): basic profile information shared by Google or other identity providers when you sign in through them.
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Service delivery & maintenance (including video generation) | Contract performance |
| Billing & payment processing | Contract performance |
| Customer support | Contract / Legitimate interests |
| Service notifications (billing, security, policy) | Legitimate interests |
| Security & fraud prevention | Legitimate interests |
| Product analytics & improvement | Legitimate interests |
| Legal compliance | Legal obligation |
| Optional product updates / marketing emails | Your consent |
We may aggregate or anonymize data for statistical purposes. Such data cannot be linked to any individual.
4. Cookies & Tracking Technologies
| Type | Purpose | Disableable |
|---|---|---|
| Strictly necessary | Login sessions, core functionality | No |
| Functional | Language/preferences | Yes |
| Analytics | Anonymous usage stats (if enabled) | Yes |
You can manage preferences via your browser settings. We do not currently run third-party advertising pixels on the Service.
5. Sharing & Disclosure
We do not sell your personal information, including as defined under applicable laws such as the CCPA. We share your information only in the following circumstances:
- Service Providers: cloud hosting, AI inference providers (e.g. fal.ai), email delivery, and payment vendors, bound by confidentiality. Payment card data is processed exclusively by our PCI-DSS certified payment processor, Waffo Pancake, and is not stored on our servers.
- Legal Requirements: where required by law, court order, or a lawful regulatory request.
- Business Transactions: in a merger, acquisition, or similar event, with advance notice and continued protections where required.
- With Your Consent: for any other purpose, with your explicit prior consent.
Photos and prompts you submit are sent to AI providers solely to generate your requested video and are not sold.
6. Data Security
- Encryption in transit: TLS / HTTPS.
- Secure storage: passwords and sensitive data are encrypted or hashed.
- Access controls: least-privilege principle.
- Monitoring for abuse and unauthorized access.
In the event of a security incident affecting your rights, we will notify you and the relevant authorities within 72 hours of discovery as required by law. Please keep your credentials secure and do not share them.
7. Data Retention
| Data Type | Retention Period | Upon Expiry |
|---|---|---|
| Account information | While active; up to 2 years after deletion request | Delete or anonymize |
| Uploaded photos / generation inputs | Short period needed to deliver the video, then deleted (typically within 30 days unless you keep a project) | Secure deletion |
| Generated videos | While your account retains them, or up to 90 days after account closure | Secure deletion |
| Transaction records | Typically 7 years (tax/accounting) | Delete or archive |
| Support records | 2 years | Secure deletion |
| Security audit logs | 12 months | Secure deletion |
8. Your Data Rights
To exercise any right below, contact us at darkerchen159631@gmail.com; we respond within 30 calendar days.
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Right to withdraw consent
You may also lodge a complaint with your local data protection authority.
9. Marketing & Opt-Out
With your consent, we may send product updates or promotional emails. You can opt out at any time via the unsubscribe link or by emailing us. Opting out does not affect essential service notifications (e.g., billing, security alerts).
10. International Data Transfers
Our servers and partners may be located in regions including Asia, Europe, and the United States (for example Cloudflare hosting and AI inference providers). For international transfers, we safeguard your data through data processing agreements and transfers only to recipients with an appropriate level of protection where required by law.
11. Children's Privacy
The Service is intended for users aged 18 and above. We do not knowingly collect information from children under 18. If you believe a minor has provided information or photos, contact us immediately and we will promptly delete it.
12. Third-Party Links & Services
The Service may include links to, or integrations with, third-party services. This Policy applies only to data we directly collect. We are not responsible for third-party privacy practices.
13. Policy Changes
For material changes, we will provide at least 15 days' advance notice via platform announcement or your registered email when available, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance.
14. Contact Us
- Privacy / Support Email: darkerchen159631@gmail.com
- Service: Boombox Rap AI
- Website: https://boombox-rap-ai.pages.dev
- Business Hours: Mon–Fri, 09:00–18:00 (Asia/Shanghai, UTC+8)
See also our Terms of Service and Acceptable Use Policy.