Privacy notice

In this document, “we” and “us” mean AI Avatar Authority. “You” means the person with the account. Write to us at support@aiavatarauthority.com about anything here.

If your country gives you data protection rights — the UK and the EU do, and several US states do — you can use them by writing to that address. We answer within 30 days.

• Your account. Email address, and the plan and status of your subscription. Sign-in itself is handled by Clerk; we never hold your password.
• Photos of your face. The reference photos you upload, kept in private file storage. They are not public, they are not listed anywhere, and they are only served back to you after we check the file belongs to your account.
• A written description of your avatar. A few sentences on hair, skin tone and makeup, accessories, expressions, apparent age range, build, wardrobe and typical scenes. The model drafts it from your photos and you edit it. It exists so that the model draws the same person each time. It is words, not measurements.
• What you tell the product about yourself. Your story, niche, audience, offer, proof points and anything else you type into the brand and onboarding screens.
• Prompts. The text sent to the AI models, including the parts the product writes for you.
• Generated media. Every photo, clip, reel and carousel the service makes for you, the model’s own notes about each one, and where in the frame the face sits, so that text is placed around it.
• Billing records. Your credit ledger — every grant, reservation, refund and expiry — and the Stripe customer id. Card numbers are never sent to us.
• Which account emails we sent you, and when, so that none is sent twice. The same log records what we last told our newsletter list about your account.
• Ordinary server logs. Requests, errors and timings, which include IP addresses.

Mostly because we need it to give you the service you asked for and are paying for. Billing records are kept because tax and accounting law requires it. Logs and security records are kept because we have a legitimate interest in the service staying up and not being abused. We send news, tips and offers about the service to people who have an account, because we have a legitimate interest in telling our own customers about it; you can stop these at any time and we say how below. Photographs of a face may count as biometric data where you live, so we ask for your explicit consent before an avatar is built from your face, and you can withdraw it at any time.

This section says exactly what happens to the photos of your face, and it is our written biometric policy.

What we do with them. Your reference photos are stored in a private bucket. They are sent to Google Gemini to generate images of your avatar, and each one is shown to Gemini once to check that everyone in it is an adult and clothed. Gemini also drafts the written description above from them. When we lay text over a generated photo or clip, we ask Gemini where the face is in the frame, and keep that position so the text does not cover it.

What we do not do. We do not build or store a face template, a face print, a scan of face geometry, or anything else that could be used to recognise you. The position of a face in a frame says where a face is, not whose it is. No check we run is ever asked to identify a person, and none of this is used to identify anyone, by us or by anyone else. We never sell, lease, trade or otherwise profit from photos of your face or anything derived from them.

Consent. Before a twin avatar is built we ask you to confirm that the photos are of you, and we record the time you confirmed. To withdraw, delete the avatar, or delete your account on the Account page.

How long we keep them, and when they are destroyed. Your reference photos, the written description and the generated media are deleted when you delete them, when you delete your account, or 30 days after your plan lapses, whichever comes first. A generation our checker rejects is deleted after 7 days. When you delete an avatar or your account, the copies we hold go with it. The providers above keep what their own terms allow, which for the API tiers we use is a short window rather than a library: Higgsfield, for example, removes the photo and the clip on its side within about a week. We do not keep any of it longer than this schedule says.

If you live in Illinois, Texas or Washington, this section is the written policy and retention schedule that your state’s biometric law asks us to publish, and we will not keep your photos, or anything derived from them, longer than the schedule above.

These are the only companies your data reaches, and only for the job listed beside them.

• Clerk — Accounts and sign-inYour email address, and the sign-in metadata Clerk needs (device, times, IP).
• Neon — The databaseYour account row, avatars and their written description, brand answers, prompts, drafts, jobs, the credit ledger, and a log of which account emails we sent you.
• Vercel — Hosting and server logsEvery request the app serves, and the ordinary logs of those requests: IP address, timings and errors. It does not hold your files.
• Cloudflare (R2) — Private file storageThe photos you upload and the images and videos the service makes for you. The bucket is private; a file is served only after we check it belongs to the account asking.
• Google (Gemini) — Writing, image generation, the safety check, and locating faces to place textYour reference photos, the prompts written from your brand answers, and generated images sent back for checking. Every photo you upload is also shown to it once, to check that everyone in it is an adult and clothed. Frames from a clip, or a photo, are shown to it to find where the face sits so that text is not laid over it. None of these checks is ever asked who anybody is.
• Higgsfield — Turning a photo into a clipThe single photo being animated and the sentence describing the movement. Higgsfield holds the photo and the finished clip on its own storage only while the clip is made and collected: it marks uploads as temporary and removes finished clips after about seven days. We save the clip to our own storage straight away and never link to Higgsfield's copy.
• Stripe — PaymentsYour email, and the card details you type on Stripe's own page. We never see or store a card number.
• Resend — Sending the account emailsYour email address and the message itself, for the few emails listed under "Emails we send" in the terms.
• Kit — Our newsletter listYour email address, and labels that say how far you have got: signed up, finished setup, on free days, paying and on which plan, or cancelled. Nothing else. No photos, prompts, brand answers or payment details.

We do not sell your data, we do not share it with advertisers, and we do not use your photos or prompts to train our own models. Whether a provider trains on what it is sent is governed by that provider’s own terms; we use their business or API tiers, which is where the stricter commitments are.

When you create an account, your email address is added to our newsletter list, which is kept at Kit. We use it to send you news, tips and offers about the service. We also tell Kit how far you have got (signed up, finished setup, on free days, paying and on which plan, or cancelled) so that what we send fits where you are.

Every one of these emails has an unsubscribe link, and it works straight away. Unsubscribing does not affect your account, and you still get the few account emails listed in the terms. You can also write to support@aiavatarauthority.com and we will take you off the list or delete you from it.

We never sell the list or share it with advertisers.

Our servers, our database, our file storage and the providers above are in the United States, so your data is stored and processed there. If you are in the EU or the UK, the transfer relies on the standard contractual clauses (and the UK addendum) that each provider offers in its data processing terms.

Photos, prompts and generated media stay until you delete them or until you delete your account, with two exceptions. Takes our checker rejects are deleted after 7 days. If your plan lapses, the photos, clips, reels, drafts and folders on your account are deleted 30 days later; your account and any credits you have bought stay. Billing records are kept for as long as tax law requires, which is typically six to seven years, even after the account has gone. Server logs are kept for a short operational period and then rotate away.

You can do it yourself: open the Account page in the app and use “Delete account”. You type a short confirmation, and then, in this order, we cancel any subscription, delete every file under your account from storage, delete your account row and everything attached to it (avatars, the written description, brand answers, prompts, drafts, generated media, jobs, the credit ledger and the email log), and delete your sign-in at Clerk. It is not reversible, and there is no copy afterwards.

Deleting your account also removes the labels about your account from our newsletter list. It does not take your email address off the list, because you may have joined it somewhere else. To leave it, use the unsubscribe link in any newsletter, or write to support@aiavatarauthority.com and we will delete you from it.

If you would rather not, or cannot sign in, write to support@aiavatarauthority.com and we do the same thing for you. Anonymised billing records survive, because we are required to keep them, and Stripe keeps its own record of the payments. If you want us to send a deletion request to a provider for you, say so in the email and we will.

You can also ask for a copy of what we hold, ask us to correct something, or object to a particular use. Write to the same address; we send a copy of your data within 30 days.

EU and UK. You can ask to see the data we hold about you, have it corrected, have it deleted, have its use restricted, receive a copy in a portable format, object to a use based on our legitimate interest, and withdraw consent at any time without affecting what was done before. You can also complain to your data protection regulator. We do not make automated decisions about you with legal effect.

California. You have the right to know what personal information we collect and why, to delete it, to correct it, to limit the use of sensitive personal information (which includes photos of your face), and not to be treated differently for using these rights. We do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We use sensitive personal information only to provide the service you asked for.

Virginia, Colorado, Connecticut, Texas and other US states with a privacy law give similar rights: access, correction, deletion, a portable copy, and an opt-out of sale, targeted advertising and profiling. We do none of those three. To use any of these rights, write to support@aiavatarauthority.com. We may ask you to confirm the email address on the account first. If we refuse a request, we will say why, and you can ask us to look at it again.

The service is for adults. You must be at least 18 to have an account. We do not knowingly collect anything from anyone younger, and if we learn that an account belongs to someone under 18 we delete it and everything on it.

Files are stored privately and served only through a check that they belong to the account asking. Every row in the database carries the account it belongs to and every query filters on it. Keys are held as server environment variables and never reach the browser. No system is perfect; if something does go wrong in a way that puts you at risk, we will tell you and the regulator within the time the law allows.

The app sets four kinds of cookie, and no others:

• Sign-in. The cookies Clerk needs to keep you signed in and to tell your session from somebody else’s.
• Current avatar. One cookie that remembers which avatar you were last working on in this browser, so the app opens on the right one. It is set when you switch avatar and kept for up to a year.
• Terms agreed. One cookie holding your account id, set once you have agreed to these documents, so the app does not ask again on every page. The record of when you agreed is kept with your sign-in, not in the cookie. It is kept for up to a year.
• Partner code. If you arrive through a partner link (/join with a code), one cookie carries that code to checkout so the offer is applied. It lasts up to 30 days and is removed when you check out.

There are no advertising or analytics cookies in the product. This marketing site sets no cookies at all and runs no analytics or ad tracking.

Tell us first at support@aiavatarauthority.com. If we cannot sort it out, you can complain to your data protection regulator — in the UK the Information Commissioner’s Office, in the EU your national authority. See also our terms.