Your story.
Handled with care.

What we collect

When you submit a handle, we retrieve available public profile information, captions, post dates, place tags and images through Apify. Video posts may be reviewed through their still images; we do not claim to watch every video. We store selected source material and evidence-backed research notes to create your preview and song. We do not ask for your Instagram password or access your private messages.

We also store order and generation status, payment-provider references, generated audio, lyric timing and video files. If you request an email notification, we store that email address. Ordinary hosting requests include information such as your IP address, browser, requested URL and request time. Request identifiers are used to limit abuse.

How your rap is made

OpenAI analyzes selected captions and images, helps write the lyrics, and may independently transcribe generated audio for quality checks. Explicitly shared details about identity, beliefs or health may inform the song when supported by the source material; we do not infer those details from appearance. ElevenLabs receives the lyrics and musical instructions to generate the recording. Selected photos may appear as faded imagery in the finished video. Only submit an adult’s account that you own or have permission to use.

Service providers and payments

Vercel and Render host the application and its processing. Apify retrieves public Instagram material, OpenAI analyzes it, ElevenLabs generates and aligns audio, Stripe handles checkout, and Resend sends requested completion emails. These providers receive the information needed for their part of the service and handle it under their own policies. We do not receive or store your full payment-card number. Checkout is currently in Stripe sandbox mode; use test payment details.

We have not added advertising trackers or analytics cookies. We do not sell your Instagram material or use it to target advertising.

How we protect your information

We use HTTPS to encrypt information in transit to our website. Saved Instagram source material and research notes are kept in server-side storage outside the public website files. Access is limited to the application processes and authorized operators who need it to provide or support the service. Service credentials remain on the server and are not included in browser code.

Order access uses long, randomly generated secret links, and separate links control sharing of finished videos. We check payment webhook signatures and apply request-size and rate limits to help prevent unauthorized requests and abuse. These measures reduce risk but cannot guarantee absolute security. Anyone with your order or share link can access the content that link permits.

Your links and sharing

Your order link is private by possession: anyone you give it to may access the order. Keep it safe. A separate share link is created when you choose to share a finished InstaRap. Anyone with that share link can view the video, which may include personal references and source photos. Downloaded or reshared copies are outside our control.

Retention and deletion

We keep saved Instagram source photos, captions and research notes while processing your scan or order, then delete them from our active systems within 90 days. Shared research files for a profile expire within 90 days after its most recent scan or completed order; a new scan or order may restart that window. An automated cleanup runs hourly, with retries if a cleanup fails. You may request earlier deletion using the contact below.

Finished songs and videos—including any photos already incorporated into a video—and the order records needed to deliver them are kept separately so your return link continues to work, unless you request deletion. Removing source material does not remove imagery already incorporated into a finished video or copies others have downloaded or shared. We verify deletion requests before acting and may retain limited transaction or security records to handle disputes or meet applicable obligations. Service-provider logs and backups follow their separate retention policies; this 90-day limit describes source material in our active application storage.

You can request access, correction or deletion of information associated with your handle or order. Include the handle or order link and a brief description; do not email passwords, card details or an Instagram export. Contact us as well if your account was submitted without your permission.

Private accounts

Direct private-account import is not available yet. We do not bypass account privacy. Any future owner-authorized import will explain the data being transferred and require a separate authorization before processing.

Contact and security reports

For privacy requests, support or security concerns, email support@aroundthehoop.com. Include only the information needed to describe the issue.