1. What we collect
- Account details from Google: your email address, name and profile photo, plus a Google account identifier used to sign you in.
- Content you create: prompts, style choices, uploaded source images, generated avatars and generated videos.
- Usage and job data: generation status, credit charges and refunds, timestamps, and error information needed to support you.
- Payment data: Waffo, our Merchant of Record, handles your payment details. We receive order status, pack, amount and a payment identifier — not your full card number.
- Technical data: IP address, browser type and basic request logs used for security, rate limiting and debugging. A session cookie keeps you signed in.
2. How we use it
We use your data to provide the service: to generate avatars, synthesize speech, render videos, store your library, show your credit history, process purchases and answer support requests. We also use it to prevent abuse, enforce our Acceptable Use Policy, debug failures and comply with the law.
We do not use your prompts, uploads or outputs for advertising, and we do not sell personal data.
3. Legal bases
If you are in the UK or EU, we rely on: performance of a contract (providing the service you asked for), legitimate interests (security, abuse prevention, product improvement), consent (where we ask for it, such as the upload consent checkbox), and legal obligation (tax, accounting and lawful requests). You can withdraw consent at any time, but that does not affect processing that already happened.
4. Who processes data for us
- Cloudflare — hosting, storage and network security for the service.
- fal.ai — image, speech and video generation. Images and scripts are sent to fal to produce the result.
- Waffo — checkout, payment processing and Merchant of Record services, including taxes and refunds.
- Google — sign-in with Google.
These providers process data on our instructions or as independent controllers for their own legal obligations. We choose providers with appropriate safeguards and do not authorize them to use your content to train their public models. Some processing may happen outside your country; where required, we rely on appropriate transfer safeguards.
5. Model training
We never use your uploads, prompts or generated content to train AvatarSay models. We configure our generation providers not to retain or train on your content beyond what is needed to deliver the result. If that ever changes, we will ask for clear consent first.
6. Retention and deletion
We keep account and content data while your account is active. When you delete an avatar, upload or video, we remove it from your library and from live storage, and it stops being available to you or the generator. Backup copies may persist for a short period before they are overwritten. Payment and tax records may be kept longer where required by law.
To delete your whole account, email support@avatarsay.com from the address linked to your account. We will confirm once the deletion is complete.
7. Security
We use HTTPS, signed media URLs, HttpOnly session cookies and access checks so that only you can see your library. No system is perfectly secure. If you believe your account has been compromised, contact us immediately and sign out of other sessions by signing out and back in.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, object to or restrict certain processing, and withdraw consent. Email support@avatarsay.com and we will respond within the time required by law. You may also complain to your local data protection authority.
9. Children
AvatarSay is not intended for children. You must be at least 13 (or 16 where local law requires) to use the service, and at least 18 (or the age of majority) to buy credits or create a talking video. We do not knowingly collect data from children, and any content involving minors is prohibited. If you believe a child has created an account, contact us and we will remove it.
This page is a plain-language draft and not legal advice. For a question about privacy policy, email support@avatarsay.com.
Also read: Terms of Service · Refund Policy · Acceptable Use Policy