Privacy Policy

Effective October 9, 2026 · Last updated October 10, 2026

This policy explains how AIAvatars ("we," "us," or "our") handles personal information when you use aiavatars.shop, AIAvatars Studio, and related services. AIAvatars is the service’s operating name.

1. Information we collect

• Waitlist information. If you join the waitlist, we save your email address, signup date, and agreement to receive access invitations and launch updates. Joining does not create a Studio account or paid subscription. To leave the list or delete your signup, email team@aiavatars.shop. We keep short-lived, hashed request identifiers to limit signup abuse.
• Account and access information. Your name, email address, account role, invitations, plan or demo access, credits, and account activity. We store a protected hash of your Studio PIN, rather than the PIN itself.
• Content you provide or create. Uploaded photos, videos and references; source links; avatar descriptions; prompts; selected voices; generated images and videos; captions; editing projects; tags; folders; and other information you save in the studio. Photos, audio and video may contain your likeness, voice, or information about other people.
• Connected social accounts. When you authorize a connection, we receive the account identifiers, profile details, access tokens, posts, and performance information allowed by your permissions and the platform. This may include follower counts, views, likes, comments, shares, saves, reach, and engagement totals. Available fields vary by platform and permission. If you enable audience replies, we also process incoming message and comment text, sender identifiers, your reply settings and FAQs, and generated or approved replies. Incoming text and your approved character information may be sent to OpenAI to prepare replies. Social replies are sent only when you enable automatic delivery or approve an individual draft.
• Technical and usage information. Request and error logs, IP addresses, browser or device information, sign-in attempts, generation job status, provider request identifiers, and usage or credit records used to run, protect and troubleshoot the service.
• Communications. Messages you send to us, support requests, and records needed to deliver invitations, account recovery, and service notices.

2. How we use information

We use this information to create and secure accounts; process uploads and generation requests; maintain your content and reference libraries; provide the features you choose; display social performance; deliver service emails and requested waitlist updates; respond to support requests; manage usage and credits; prevent abuse; and comply with applicable legal obligations.

Where publishing is available and you explicitly request it, we use the relevant content, captions and authorization to publish or schedule posts to the accounts you select. Connecting an account by itself does not authorize us to publish unrelated content.

We process uploaded faces and voices as part of the creative features you request. They are not used by AIAvatars to authenticate a person’s identity. Do not upload highly sensitive information that is unnecessary for your project.

3. AI processing and service providers

Creating or editing content can require sending prompts, selected reference images, video clips, audio, or related instructions to an AI provider. Our service providers include:

• OpenAI for image generation, image or video-frame analysis, and text assistance.
• Higgsfield for video generation and character swaps.
• ElevenLabs for the voice library and previews, and audio processing when an audio feature is enabled and used.
• Amazon Web Services and Vercel for hosting, storage, backups, security and delivery.
• Resend for transactional emails such as invitations and account recovery.
• Social platforms, including Meta and, when enabled, TikTok, for the connections and actions you authorize.

These providers process information to deliver their services and may retain it under their applicable terms, privacy policies and service settings. AIAvatars does not control every provider’s retention practices. We do not use your private uploads, prompts, generated content or connected-social-account data to train our own general-purpose AI models.

4. Social connections and your controls

Social connections are optional. We request access through the platform’s authorization process rather than asking for your social-account password. Features and metrics depend on the permissions you approve. A planned integration, such as TikTok analytics, only begins receiving your account data after it is enabled and you authorize it.

You can disconnect an available integration in the studio or revoke access through the social platform’s settings. Disconnecting stops future use of that connection and removes its usable authorization token from our active connection record. Previously stored posts, analytics, and content may remain in your studio until you request deletion. Disconnecting does not remove posts already published on the social platform.

5. When information is shared

We share information with service providers as described above; with recipients or social platforms when you direct us to share or publish; and when reasonably necessary to comply with law, respond to valid legal process, protect rights and safety, or investigate abuse. Authorized operators may access records when needed for support, security, maintenance and account administration.

If the service is transferred in a merger, acquisition or similar transaction, information may be transferred with it, subject to this policy and applicable law. We will provide notice of material changes where required.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use your private content in public marketing without your permission.

6. Cookies and browser storage

We use essential cookies for sign-in, security and preview access, and browser storage for preferences such as your theme, selected project and setup progress. The studio does not use advertising pixels. Hosting providers may process technical request data to deliver and protect the service.

Browser Do Not Track signals do not change these essential operations. We do not conduct the sale or advertising sharing that Global Privacy Control signals are designed to opt out of. You can clear cookies and browser storage through your browser; doing so may sign you out or reset preferences. Links, embedded previews and services on other platforms are subject to those platforms’ practices.

7. Retention and deletion

We retain account information and saved content while needed to provide your studio and the features you use. Operational records may be retained as needed for security, troubleshooting, usage accounting, legal obligations and resolving disputes. We do not promise that every record is automatically removed after a fixed period.

Audience reply activity is retained for 30 days. We keep a hashed account-specific opt-out identifier so a person who asks us to stop does not receive further automated replies. Saved FAQs and reply settings remain until changed or deleted with the avatar.

To request deletion of your account, uploaded or generated content, or connected-social-account data, email team@aiavatars.shop. Identify the account and whether you want a particular item, social connection’s data, or the entire account deleted. We may need to verify ownership. We will respond and act within the time required by applicable law, explaining any lawful retention exceptions.

Deleted information may remain temporarily in restricted backups until those backups expire. Backup copies are not used for ordinary product access. Content you published, downloaded, or shared outside AIAvatars may remain with its recipients or platform; deleting it here does not recall those copies.

8. Security and international processing

We use measures such as access controls, encrypted network connections, protected credentials and restricted storage to safeguard information. No online service can guarantee absolute security. Keep your account credentials private and contact us if you suspect unauthorized access.

We and our providers may process information in the United States and other countries where we operate. Privacy laws may differ from those in your location. Where applicable law requires protections for international transfers, those requirements continue to apply.

9. Your privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a copy of your personal information; restrict or object to certain processing; withdraw consent; or appeal a privacy-request decision. Contact us using the address above to exercise a right. We may verify your identity and will not discriminate against you for exercising applicable privacy rights.

Where a legal basis is required, we process information to provide the service you request, for legitimate interests such as security and support, to meet legal obligations, or with consent where required. You may also have the right to complain to your local data protection authority.

10. Age requirement

AIAvatars is intended for adults aged 18 or older. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so we can investigate and remove it as appropriate.

11. Changes to this policy

We may update this policy as the service changes. We will revise the date at the top and provide additional notice of material changes where required. Questions can be sent to team@aiavatars.shop.