Privacy Policy
What Kiravu collects, how your photos and videos are handled, and how long we keep them.
Who we are
Kiravu (kiravu.com) is an AI rap video generator operated by [Operator legal name], [Operator address]. The operator decides how your personal data is used (under the GDPR, it is the "controller"). This policy explains what we collect when you use Kiravu, what we do with it, and the choices you have. It takes effect immediately. If you have a question, write to support@kiravu.com.
What we collect
- Account details. Your email address and a password if you sign up with email, or the basic profile details (name, email, avatar) Google gives us if you sign in with Google. Sign-in is handled by better-auth.
- Photos you upload. The selfies or photos you choose for a video.
- Lyrics and settings. The lyrics you write or edit, the stage, beat, mode, model, resolution and length you pick, and any rating you give a finished video.
- Your rights confirmation. When you start a render, we record that you confirmed you have the rights and consent for the faces in your photos, with the date and time.
- Finished videos and transcripts. The videos we render for you, and the text of what was sung in them (see "Lyrics" below).
- Orders and credits. What you bought, your credit balance and your credit history.
- Creator challenge entries. If you join the challenge: the video links you submit, their view counts, and the made-up name shown on the leaderboard.
- Messages to us. What you write when you email us or use live chat.
- Technical data. Device type, browser, IP address and basic logs, used to run the site and prevent abuse.
- Cookies and browser storage. See "Cookies, storage and analytics" below.
How we use your photos
This is the part most people care about, so here it is plainly.
- When you add a photo, your browser checks it for faces, size and sharpness. That check runs on your device, before anything is uploaded.
- Before you sign in, the studio keeps your draft, including photo previews, in this browser's local storage so you don't lose them. Removing the photo or finishing a video clears it.
- Your uploaded photos are stored in Cloudflare R2.
- To make your video, we send your photos and lyrics to our video provider, KIE (kie.ai), which runs ByteDance's Seedance model. KIE and ByteDance handle that data under their own terms and may keep copies. We don't control what they keep.
- We use your photos only to render your video.
- We don't use your photos or videos to train AI models.
- Uploaded photos are deleted from our storage after 7 days.
Only upload photos of yourself or of people who have agreed. Please read our Terms of Service for the full rules.
Who can open your files
Your photos and finished videos are stored in Cloudflare R2 at links that are hard to guess but public. Anyone who has a link can open that file without signing in. Share links only with people you trust.
Lyrics
- Before anything is charged, your lyrics are sent to Cloudflare Workers AI for an automated safety check.
- After a video is rendered, we transcribe its audio with Cloudflare Workers AI and compare the text with your lyrics. We keep the transcript with the video's record.
Finished videos
Finished videos, with their lyrics and settings, stay in your account (My videos) until you delete them. When you delete a video, its files are removed from our storage right away. Cached copies expire within 24 hours. We keep the render's record (settings, lyrics, transcript and credits used) for billing, support and abuse prevention. We do not publish your videos anywhere without your permission.
Payments
Payments are processed by Stripe, and by other providers the operator may switch on, such as Creem or PayPal. Kiravu never sees your full card number. We keep the order record: what you bought, the amount, the date and the payment status.
Cookies, storage and analytics
Our own cookies and storage:
- A session cookie keeps you signed in.
- Cookies remember your language and, if the cookie banner is on, your cookie choice.
- When you arrive from a link with campaign tags (such as utm_source), from another website or from an AI assistant, we remember where you came from in a cookie (for 30 days) and in this browser's local storage. If you sign up, we save it with your account so we can see which links bring people in.
- The studio draft in local storage, described above.
- When you are signed in, we record some of what you do in Kiravu (for example renders and purchases) with your account, so we can help you and improve the product.
Tools the operator may turn on:
- Google Analytics, to count visits and see how the site is used. When the cookie banner is on, Google Analytics runs in Consent Mode and sets no analytics or advertising cookies until you click Accept.
- Plausible, which counts visits without cookies and without identifying you.
- Google AdSense, if we show ads. When the cookie banner is on, the ad script loads only after you accept.
- Live chat (Crisp or Tawk.to). It sets its own cookies and receives what you type in the chat.
When the cookie banner is on, you can change your choice at any time with the Cookie settings link at the bottom of the page. You can also block or clear cookies in your browser settings. Some features, such as staying signed in, need cookies to work.
How we use information
We use your information to:
- Create and secure your account.
- Render your videos and show them in your account.
- Process payments, credits and refunds.
- Answer your emails and send account messages, such as sign-in or password help.
- Find and stop abuse, fraud and rule-breaking.
- Understand how Kiravu is used and make it better.
We do not sell your personal information.
Legal bases (EU and UK)
If you are in the European Union or the United Kingdom, we rely on these legal bases:
- Contract: to run your account, render your videos, take payments and add your credits.
- Legitimate interests: to keep Kiravu secure, check lyrics for safety, prevent abuse and fraud, and understand how the product is used.
- Consent: for analytics and advertising cookies when the cookie banner asks you. You can withdraw it at any time.
- Legal obligation: to keep order and tax records.
Who we share it with
We share information only with the services that help us run Kiravu:
- KIE (kie.ai), to render videos with ByteDance's Seedance model.
- Cloudflare, to host the site, store files (R2), and check lyrics and transcribe finished videos (Workers AI).
- Stripe, Creem or PayPal, to take payments.
- Google, if you choose Google sign-in, and for Google Analytics or AdSense if they are turned on.
- Plausible, Crisp or Tawk.to, if they are turned on.
- Other hosting and email providers that help us run the service.
We may also share information if the law requires it, or to protect our users, our service or our rights.
International transfers
Most of our providers, including Cloudflare, Google and Stripe, are based in the United States, and KIE may process data in other countries. So your information may be handled outside the country where you live. When data leaves the EU or the UK, we rely on the safeguards our providers offer, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep things
- Studio draft in your browser: until you remove the photo, finish a video or clear your browser storage.
- Uploaded photos: deleted after 7 days.
- Finished videos: until you delete them. The files are then removed right away, and cached copies expire within 24 hours.
- Render records (settings, lyrics, transcript and rights confirmation): while your account is open.
- Account and order records: while your account is open, and longer where we need them for tax, accounting or legal reasons.
Security
We use encryption in transit and limit who can access our systems and files. No service is perfectly secure, so we cannot promise absolute security.
Your rights and choices
You can view, download and delete your videos in your account. You can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, or to close your account, by emailing support@kiravu.com. If a photo of you was uploaded without your permission, write to us and we will remove it.
If you are in the EU or the UK, you can also complain to a data protection authority, such as the one in the country where you live (in the UK, the Information Commissioner's Office).
Children
Kiravu is only for people 18 and older. Do not use Kiravu if you are under 18. Do not upload a photo of a minor unless you are their parent or guardian, or have their parent or guardian's consent. If we learn that someone under 18 has an account, or that we hold a minor's data without that consent, we will delete it.
Changes to this policy
If we change this policy, we will update the date at the top of the page. For significant changes, we may also tell you through the service.
Contact
Questions or requests: support@kiravu.com.