Account Information

When you create an account, we collect:

• Email address and password
• Company name and billing information
• Contact preferences and profile settings
• API key usage and permissions

Usage Data

We automatically collect information about how you use our services:

• API requests, response times, and error logs
• Session metadata (duration, connection type, timestamps)
• IP addresses, browser type, and device information
• Usage patterns and feature adoption metrics

Voice, Video, and Text Data

• Voice, video, and text input is processed in real-time by AI models for speech recognition, language generation, text-to-speech, and facial animation
• Session content is NOT permanently stored on our servers by default
• Temporary processing data is automatically deleted after session completion
• You can optionally enable session recording with explicit consent
• All processing occurs on dedicated GPU containers with encrypted infrastructure
• We do not use your session content to train or fine-tune AI models without your explicit consent

Service Provision

• Process video/audio data to provide AI responses
• Maintain and improve our AI models and infrastructure
• Monitor system performance and prevent abuse
• Provide customer support and technical assistance

Business Operations

• Process payments and manage billing
• Send important service announcements and updates
• Analyze usage patterns to improve our services
• Comply with legal obligations and enforce our terms

Marketing (Optional)

• Send product updates and feature announcements (with consent)
• Provide educational content and best practices
• Invite you to participate in surveys or beta programs
• You can opt out of marketing communications at any time

How AI Processes Your Data

• Your voice input is processed by speech recognition (ASR) models to generate text transcripts
• Text is processed by large language models (LLM) to generate conversational responses
• Responses are converted to speech by text-to-speech (TTS) models and synchronized with facial animation
• All AI processing occurs within your dedicated session container and data is not shared across sessions

Model Training and Your Data

• Your session content (voice, text, video) is not used to train or improve AI models without your explicit opt-in consent
• Anonymized, aggregated performance metrics (latency, error rates) may be used to improve service reliability
• Session telemetry (timing data, session duration) is collected via Supabase for service monitoring and billing

We DO NOT Sell Your Data

We never sell, rent, or trade your personal information to third parties for commercial purposes.

Limited Sharing

We may share information only in these specific circumstances:

• Service Providers: Cloud infrastructure, payment processing, and analytics partners under strict data protection agreements
• Legal Requirements: When required by law, court order, or government request
• Safety and Security: To prevent fraud, abuse, or protect our users and services
• Business Transfers: In the event of a merger or acquisition (with notice to users)

Security Measures

• End-to-end encryption for all data transmission
• AES-256 encryption for data at rest
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• SOC 2 Type II compliance
• 24/7 security monitoring and incident response

Infrastructure

• Hosted on secure cloud infrastructure (AWS/GCP)
• Geographically distributed with redundancy
• Network isolation and firewall protection
• Regular backups with encrypted storage
• GDPR and CCPA compliant data centers

Retention Periods

Data Deletion

• You can request account deletion at any time
• We will delete your data within 30 days of account closure
• Some data may be retained for legal compliance (anonymized where possible)
• Backups are automatically purged according to our retention schedule

GDPR Rights (EU Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Limit how we process your data

CCPA Rights (California Users)

• Know: What personal information we collect and how it's used
• Delete: Request deletion of your personal information
• Opt-out: Opt out of the sale of personal information (we don't sell data)
• Non-discrimination: Equal service regardless of privacy choices

Exercising Your Rights

To exercise any of these rights, please contact us at:

Types of Cookies

Third-Party Services

• Supabase for database, authentication, and session telemetry
• PayPal for payment processing
• AWS for cloud infrastructure and container registry
• Modal for serverless GPU compute

You can opt out of analytics tracking in your account settings.