Privacy Policy

Operator: the Rapir service.

Data processing contact: privacy@rapir.ai

General questions and support: support@rapir.ai

• Identification data: email, username, account identifier.
• Authentication data: password hash, session tokens.
• User content: text prompts, uploaded images, generation results.
• Technical data: IP address, device and browser type, cookies, timestamped activity logs.
• Payment data: transaction history and plan (card details are processed by payment providers; the Operator does not store them).

• Providing access to Service features and performing the contract with the User.
• User identification and authentication.
• Token consumption tracking and billing.
• Improving Service quality and training models (on anonymized or aggregated data, or with separate consent).
• Informing about Service operation, updates, and support.
• Compliance with legal requirements and abuse prevention.

Processing is based on: performance of the contract (Terms of Service) with the data subject (Art. 6(1)(5) of 152-FZ); separate consent of the subject where required; and cases expressly provided by law.

Where processing is necessary to perform the contract, separate consent is not required. For purposes beyond contract performance (e.g., marketing communications or training models on personalized data), separate consent is requested.

Processing includes collection, recording, systematization, accumulation, storage, refinement, use, transfer, anonymization, blocking, deletion, and destruction of data.

Data is retained no longer than necessary for processing purposes or until consent withdrawal. After account deletion, data is deleted or anonymized within 30 days, except data the Operator is legally required to retain.

Personal data of Russian citizens is stored on servers located within the Russian Federation (Art. 18(5) of 152-FZ).

The Operator may engage third parties (cloud infrastructure providers, payment providers, AI model providers) under confidentiality obligations.

Prompts and images may be transferred to neural network model providers to perform generation. The Operator does not sell personal data to third parties.

Data may be transferred to government authorities in cases provided by law.

• Obtain information about the processing of their data.
• Request clarification, blocking, or deletion of data.
• Withdraw consent to processing at any time.
• Appeal the Operator's actions to Roskomnadzor or in court.

To exercise your rights, send a request to privacy@rapir.ai. The Operator responds within the timeframes set by 152-FZ.

The Operator implements legal, organizational, and technical measures to protect data from unauthorized access, destruction, alteration, and disclosure: encryption in transit (TLS), password hashing, access control, logging, and backups.

In the event of a personal data breach, the Operator notifies Roskomnadzor within the timeframes set by law (FZ No. 420-FZ).

The Service uses cookies and similar technologies for authentication, settings storage, and usage analysis. You can disable cookies in your browser settings, but this may limit Service functionality.

The Service is not intended for persons under 18. The Operator does not knowingly collect data from minors.

The Operator may amend this Policy. The current version is posted on the Platform. Continued use of the Service constitutes acceptance of the new version.