Privacy Policy
This policy explains what information Vocal / Rap Labs (https://vocalraplabs.com) collects, why, who else handles it, and the choices you have. We don't sell your personal information and we don't show ads.
1. What we collect
- Account details: your username, your email address if you add one, and your password, which is stored only as a secure one-way hash (scrypt). We can't see your password.
- Your content: audio you upload, record, render or convert; lyrics, songs and their versions; session notes; and the records of what you did in the studio (for example, which effect or voice you used).
- Tokens and purchases: your token balance and history, promo codes you redeem, and for purchases the pack, amount, currency and Stripe's reference for the payment. Card details go directly to Stripe; we never receive them.
- Security information: the date you agreed to our terms, login sessions (stored as one-way hashes), password-reset and email-confirmation requests, and your IP address, which is used briefly, in memory, to limit repeated login and code-guessing attempts.
- Help chat: the questions you ask the studio's help chat, and its answers while it replies. Questions are kept for 30 days so we can see what people need help with and improve the site.
- Server logs: our hosting provider records technical logs of requests to the site (such as time, page requested and IP address), which we use to keep the Service running and fix problems.
Effects previews and WAV renders are processed in your own browser before the finished file is uploaded.
2. Cookies
We use a single cookie, which keeps you logged in. It's strictly necessary, it isn't used for tracking or advertising, and we don't use analytics or advertising cookies.
3. How we use information
- To provide the Service: storing and processing your takes, running conversions, keeping your balance and history.
- To email you about your account only: confirming your email address and resetting your password. We don't send marketing email without your permission.
- To keep the Service safe: preventing password guessing, abuse of free passes and promo codes (one free pass per person is checked using a normalised form of your email address), and fraud.
- To take payments, and to meet legal obligations.
4. Who else handles your information
We share information only with services that help run Vocal / Rap Labs, and only what each one needs:
- Render hosts the site, its database and your files.
- ElevenLabs receives the audio of a take when you ask for an AI voice conversion, and returns the converted audio. Their privacy policy applies to that processing.
- Anthropic receives the messages of a help-chat conversation, together with a short summary of your account (username, token balance, free-pass status and today's allowance) so it can answer questions about your account, and returns the answer. It never receives your audio, lyrics, email address or password. Their privacy policy applies to that processing.
- Our email provider (currently Google Gmail) delivers confirmation and password-reset emails to your address.
- Stripe processes payments when you buy tokens.
- Datamuse receives only the single word you look up in the rhyme finder, sent directly from your browser.
We may also disclose information if the law requires it, to protect people's safety or rights, or as part of a transfer of the Service to a new owner, who would have to respect this policy.
5. How long we keep it
- Your account and content stay until you delete them or ask us to delete your account.
- Takes you delete in the studio are removed straight away.
- Help-chat questions are deleted after 30 days. The conversation itself isn't saved on our side; it disappears when you close or reload the page.
- Files uploaded during a free pass that isn't followed by a purchase are deleted 30 days after the pass ends.
- We keep up to 14 daily backups of the database for recovery, so deleted account information can remain in backups for up to about 14 days. Backups don't include audio files.
- Login sessions expire after 30 days, password-reset links after 1 hour and email-confirmation links after 48 hours.
6. Security
The site uses HTTPS, passwords and login tokens are stored as one-way hashes, access to your content requires your login, and repeated guessing is limited. No system is perfectly secure, so please use a strong password you don't use elsewhere.
7. Your choices and rights
- See and download your records at any time with "Secure session backup" in the studio.
- Change or remove your email address from your account panel, and delete individual takes in the studio.
- Delete your account and everything in it by emailing support@vocalraplabs.com from the address on your account (or with your username if it has no email). We'll confirm when it's done, normally within 30 days.
Depending on where you live (for example California, the UK or the European Union), you may have further rights, such as to access, correct, delete or move your information, or to object to some uses of it. Contact us to use them, and we'll respond within the time the law requires.
8. Children
The Service isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, contact us and we'll delete it.
9. Where information is processed
Our service providers may process information in the United States and other countries, which may have different data protection laws from where you live.
10. Changes to this policy
We'll update this page if our practices change, and tell you on the site or by email before significant changes take effect.
11. Contact
Privacy questions or requests: support@vocalraplabs.com.