Privacy Policy
Last Updated: 12/19/2025
1. Introduction
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our conversational insight platform.
2. Information We Collect
Personal Information
- Email address (for account creation and communication)
- Payment information (processed securely through Stripe)
- Account preferences (avatar selection, language preference)
Usage Information
- Session duration and timing
- Credit balance and transaction history
- Device information and browser type
- IP address and general location data
Session Content
By default, we do NOT record or store the content of your conversational sessions. Sessions are processed in real-time and are not saved unless you explicitly opt-in to recording features (if available).
3. How We Use Your Information
- To provide and maintain the Service
- To process payments and manage your account
- To send you important updates and notifications
- To improve and optimize the Service
- To detect and prevent fraud or abuse
- To comply with legal obligations
- To respond to your support requests
4. Data Sharing and Disclosure
We do NOT sell your personal information to third parties.
We may share your information with:
Service Providers
- Supabase - Database and authentication services
- Stripe - Payment processing
- HeyGen - Avatar and voice technology
Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.
5. Data Security
We implement industry-standard security measures to protect your data:
- End-to-end encryption for data transmission
- Secure database storage with access controls
- Regular security audits and updates
- PCI-DSS compliant payment processing
- Two-factor authentication available
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
6. Your Privacy Rights
You have the right to:
- Access - Request a copy of your personal data
- Correction - Update or correct inaccurate information
- Deletion - Request deletion of your account and data
- Portability - Receive your data in a portable format
- Opt-out - Unsubscribe from marketing communications
- Restriction - Limit how we process your data
To exercise these rights, contact us at privacy@yourdomain.com
7. Data Retention
- Account information: Retained while your account is active
- Transaction records: Retained for 7 years for tax and legal purposes
- Session metadata: Retained for 90 days for service improvement
- Session content: NOT retained (unless explicitly opted-in)
When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
8. Cookies and Tracking
We use cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Analyze usage patterns
- Improve service performance
You can control cookies through your browser settings. See our Cookie Policy for more details.
9. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
10. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to deletion of personal information
- Right to non-discrimination for exercising your rights
13. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under GDPR:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on the Service. Your continued use after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us:
Email: privacy@yourdomain.com
Address: [Your Business Address]
Data Protection Officer: dpo@yourdomain.com