Legal
Privacy Policy
Last updated: June 28, 2026
1. Who We Are
Avatarli is an AI-powered presenter video studio accessible at avatarli.com. References to “Avatarli,” “we,” “us,” or “our” in this Privacy Policy refer to the operator of the Avatarli service.
For privacy inquiries, contact us at legal@avatarli.com or support@avatarli.com.
2. Information We Collect
Account and Profile Data
- Email address — collected at registration via email/password signup, magic link, or Google OAuth. Used for authentication, account management, and transactional notifications.
- Display name — optional profile field you may set in account settings.
- Language preference — stored as a cookie and in your profile to serve the interface in your chosen language (English or Hebrew).
- Account role and status — whether your account is a standard user or an administrator; account creation date.
- Credit balance — the number of credits in your account at any given time.
- Google profile data — if you sign in with Google, Google may share your name, email address, and profile picture with us, subject to Google’s own privacy policy and your Google account settings.
Scripts, Prompts, and Creative Instructions
When you use Avatarli to generate a video, we collect and store the script or prompt you write, scene descriptions, AI Director instructions, and any other creative content you submit (“Submitted Content”). This content is stored as part of your order history.
Please do not include sensitive personal information, private communications, confidential business data, health information, or information that you would not want processed by third-party AI systems in your scripts or prompts.
Uploaded and Reference Images
If you upload a scene reference image (a background or environment image), that image is stored and used as an input to the AI generation pipeline. Only upload images you own or have the right to use. Do not upload photographs of real persons without their explicit consent.
Generated Content
Generated MP4 videos, AI-produced scene images, and intermediate processing frames created by Avatarli on your behalf are stored in cloud storage and associated with your account.
Order and Generation Records
We collect records of your orders, generation requests, selected AI presenter, selected model and duration, generation status, provider used, credits consumed, timestamps, and related metadata.
Credit and Payment Records
We store records of your credit balance, credit transactions (debits, refunds, and grants), and Stripe payment metadata such as payment intent identifiers and transaction status. Avatarli does not store your full card number, CVV, or billing address — these are handled directly by Stripe, our payment processor.
Logs, Events, and AI Invocation Metadata
We maintain internal logs of generation events, system errors, AI provider invocations (including model used, estimated cost, and latency), and platform activity. These records are used for operational monitoring, cost tracking, security, and support. They are not directly exposed to users.
Email and Notification Data
Your email address is used to send transactional notifications, such as a notification when your generated video is ready. These emails are delivered via Resend, our email service provider.
Download Tokens and Access Records
When you request a download link for a generated video, we create a secure token-based URL. We record access counts and expiry status for these links.
Cookies and Session Data
We use cookies and similar technologies for authentication (to keep you signed in) and to remember your language preference. We do not use advertising cookies, tracking pixels, or cross-site tracking technologies.
Technical and Usage Data
Our hosting providers (Vercel and Railway) may log IP addresses, request headers, and similar technical data as part of standard infrastructure operation.
3. How We Use Your Information
- To provide, operate, maintain, and improve the Avatarli service.
- To authenticate your identity and manage your account.
- To process your video generation requests, including sending Submitted Content to third-party AI providers.
- To manage your credit balance and process payments.
- To send you transactional notifications about your account and generated videos.
- To detect, investigate, and prevent fraud, abuse, and violations of our Terms and Acceptable Use Policy.
- To monitor and analyze service performance, errors, and costs.
- To respond to support requests.
- To comply with applicable legal obligations.
We do not sell your personal data to third parties. We do not use your data for advertising targeting or behavioral profiling.
4. Third-Party Service Providers
To operate the Service, we share data with the following categories of service providers. Each provider processes data only as necessary to perform their role. We encourage you to review their respective privacy policies.
| Provider | Role | Data shared |
|---|---|---|
| Supabase (Japan/Tokyo) | Database, authentication, file storage | Account data, orders, scripts, generated content, all stored records |
| Vercel (US) | Web application hosting and compute | Request data, session cookies, IP addresses |
| Railway (US) | Background worker hosting | Scripts and generation data processed in memory |
| Stripe (US) | Payment processing | Payment method data, purchase amounts, order reference |
| Resend (US) | Transactional email delivery | Your email address, order reference, notification content |
| OpenRouter (US) | AI model routing (AI Director, prompt processing) | Scripts, prompts, and creative instructions |
| fal.ai (US) | AI video generation (Veo, Wan, Kling models) | Scripts, avatar image URLs, uploaded scene reference images, generated frame images |
| Google / Gemini (US / Global) | Scene image generation; video generation (future) | Avatar images, scene reference images, generation context |
| Anthropic / Claude | Prompt processing (when enabled for specific workflows) | Script content |
| DICTA | Hebrew text processing (vowelization/nikud, when used) | Hebrew script content |
5. AI Processing and Data Transfer
Your submitted scripts, prompts, scene descriptions, and uploaded images are transmitted to third-party AI providers to generate video outputs. This is the core function of the Service. By submitting content to Avatarli, you consent to this processing.
AI providers may process your data on servers located in the United States or other countries. The data transmitted includes your video script, any scene reference image you upload, AI presenter identity information, and associated generation parameters.
Please do not include sensitive personal data, private communications, confidential information, or data relating to third parties who have not consented to AI processing in your submitted content.
6. Storage, Access, and Retention
Cloud Storage
Generated videos and certain generated images are stored in cloud storage (Supabase Storage, Tokyo region). Generated videos may be accessible through tokenized download links. The underlying storage paths follow a structure that is not intended to be publicly guessed, but no technical access restriction on the storage URL alone is guaranteed.
Retention
Avatarli retains account data, order records, generation records, billing records, and related content for as long as your account is active and for a reasonable period thereafter, as required for service operation, support, security, legal compliance, and legitimate business purposes. Specific retention periods may vary by data category.
7. Your Rights and Choices
Depending on your jurisdiction, you may have rights including:
- Access: the right to request information about the personal data we hold about you.
- Correction: the right to request correction of inaccurate data.
- Deletion: the right to request deletion of your personal data, subject to applicable legal and operational constraints.
- Portability: the right to receive a copy of your data in a structured format.
- Objection or restriction: the right to object to or restrict certain processing of your data.
To exercise any of these rights, contact us at legal@avatarli.com or support@avatarli.com. We will respond within a reasonable time, subject to applicable law and operational constraints. We may need to verify your identity before processing certain requests.
You may sign out of your account at any time. To request account deletion, contact support@avatarli.com.
8. Security
We implement reasonable technical and organizational measures to protect your data from unauthorized access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and server-side authentication.
However, no system is completely secure. We cannot guarantee the absolute security of your data. If you believe your account has been compromised, contact us immediately at support@avatarli.com.
9. International Data Processing
Avatarli stores primary data in Japan (Supabase Tokyo region). Our hosting providers (Vercel, Railway) and AI processing partners operate in the United States and, in some cases, other countries.
By using Avatarli, you acknowledge that your data may be transferred to and processed in countries other than your country of residence, which may have different data protection laws.
10. Children’s Privacy
Avatarli is not directed to children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, contact us at legal@avatarli.com and we will take appropriate steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will post an updated version with a revised “Last updated” date and, where appropriate, notify you by email or in-app notice.
Your continued use of Avatarli after changes are posted constitutes your acceptance of the updated Privacy Policy.
12. Contact
For privacy questions or to exercise your data rights: legal@avatarli.com
For general support: support@avatarli.com
To report misuse of personal data or abuse: abuse@avatarli.com