This Privacy Policy explains how AvatarTalk ("AvatarTalk", "we", "us" or "our") collects, uses, discloses and safeguards personal data when you visit our websites, use our API and web application, or deploy our AI avatar and conversation-training products in the cloud, on-premise or as an offline appliance. We are committed to processing personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data-protection laws.

1. Who We Are

AvatarTalk is operated from Gliwice, Poland, and acts as the data controller for personal data processed through our public websites and hosted services. Where we process personal data on behalf of a business customer (for example, content submitted through the API or generated in a training deployment), we act as a data processor under that customer's instructions and a separate Data Processing Agreement (DPA).

2. Information We Collect

Depending on how you interact with AvatarTalk, we may collect:

Account information — name, email address, company and login credentials.
Billing information — plan, credit balance and transaction records. Card details are processed directly by Stripe; we do not store full card numbers.
Usage and technical data — API calls, generated videos, log data, IP address, device and browser information.
Content you submit — text prompts, audio, transcripts and configuration used to generate avatar videos or run training scenarios.
Sales and support communications — information you provide when you contact us or submit an enterprise inquiry.

3. How We Use Your Information

We use personal data to:

Provide, operate and secure our avatar generation and training services;
Process payments, manage credits and administer your account;
Provide customer support and respond to inquiries;
Monitor, maintain, troubleshoot and improve our services;
Send service-related notices and, where permitted, relevant product updates;
Comply with legal obligations and enforce our agreements.

4. Legal Bases for Processing

Where GDPR applies, we rely on the following legal bases:

Contract — to provide the services you have signed up for;
Legitimate interests — to secure, improve and market our services in a proportionate way;
Consent — for certain analytics and marketing communications, where required;
Legal obligation — to meet accounting, tax and other statutory requirements.

5. Deployment Models and Data Location

AvatarTalk can be delivered in different modes, and the way data is handled depends on the model you choose:

Cloud / hosted — content is processed on our infrastructure and third-party cloud providers to generate videos and run scenarios.
On-premise — the software runs inside your own environment, and content processed there remains under your control.
Offline appliance — the full conversation loop (speech recognition, language model, voice synthesis and avatar rendering) can run locally on dedicated hardware, so sensitive conversations can stay on the device and are not sent to cloud inference.

6. Sharing and Sub-processors

We do not sell personal data. We share it only with trusted service providers who help us operate the platform, including payment processing (Stripe), cloud hosting and storage, and email delivery. These sub-processors are bound by contractual obligations to protect personal data and process it only on our instructions. We may also disclose data where required by law or to protect our rights.

7. International Transfers

Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as European Commission Standard Contractual Clauses or an adequacy decision.

8. Data Retention

We retain personal data only for as long as necessary to provide the services, comply with legal obligations, resolve disputes and enforce our agreements. Generated content and usage records are retained according to your plan and applicable customer agreement, and are deleted or anonymised when no longer required.

9. Security

We implement appropriate technical and organisational measures — including encryption in transit, access controls and least-privilege practices — to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is completely secure, but we work continuously to protect your information.

10. Your Rights

Subject to applicable law, you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us at support@avatartalk.ai.

11. Cookies and Analytics

Our websites use cookies and similar technologies for essential functionality and, where permitted, to measure performance and marketing effectiveness. You can control cookies through your browser settings.

12. Children's Privacy

Our services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.

14. Contact Us

AvatarTalk is based in Gliwice, Poland. If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at support@avatartalk.ai.