Privacy Policy

We collect the information needed to provide our services, process your generations, and keep your account secure. This falls into the following categories.

Account Information: When you create an account, we collect your name, email address, login credentials, and, if you subscribe to a paid plan, billing details. Payment card data is processed directly by our payment processor, Stripe, and Obvio AI does not store full payment card numbers on its systems (see Data Security and How We Share Data & Subprocessors).

Content You Provide: To generate content, you upload or enter prompts, text, images, video, and audio ("Content"). This Content, and the outputs we generate from it, are processed to fulfil the request you make.

Avatar, Face & Voice (Likeness) Data: When you create AI avatars or use translation, dubbing, or voice features, you may upload images, video, or audio that contain a person's face, appearance, or voice. We treat this likeness data with special care (see the section on Avatars, Likeness & Voice Data).

Usage Information: We collect information about how you interact with the platform, such as features used, generations requested, credits consumed, and actions taken within your account.

Device & Technical Information: We automatically collect technical data such as your IP address, browser type, operating system, device identifiers, and approximate location derived from your IP address.

Cookies & Similar Technologies: We and our service providers use cookies and similar technologies to operate the platform, keep you signed in, remember your preferences, and understand usage. See the Cookies & Tracking section for details.

We use the information we collect for the following purposes.

- To provide the service: to create and maintain your account, process the generations you request, and deliver the resulting video, image, audio, and avatar content. - To process payments: to manage subscriptions, credit purchases, and billing through our payment processor. - To operate and improve the platform: to monitor performance, fix bugs, develop new features, and understand how the platform is used. When we analyze usage to improve the product, we rely on aggregated or technical data wherever possible. - To communicate with you: to send service-related messages (such as account, security, and billing notices) and, where permitted, marketing communications you can opt out of at any time. - To keep the platform safe: to detect, prevent, and respond to fraud, abuse, security incidents, and violations of our terms. - To comply with the law: to meet legal, tax, accounting, and regulatory obligations and to enforce our agreements.

We do not sell your personal information or your Content, and we do not share it for cross-context behavioral advertising.

Generating content with AI requires sending your Content to specialized third-party AI providers. This section explains exactly how that works and what we do and do not do with your Content.

Third-party AI providers: To fulfil the generations you request, your prompts, uploads, and related Content are transmitted to third-party AI model providers, currently FAL, HeyGen, and Replicate. These providers process your Content solely to produce the output you asked for and return it to us.

We do not train our own models on your Content: Obvio AI does not use your uploads, prompts, or generated outputs to train, build, or fine-tune our own AI models.

We do not sell your Content: We do not sell your personal information or your Content, and we do not share it for cross-context behavioral advertising. We never use your Content to train models we offer to others.

Direction to providers: Where a provider offers the option, we direct them not to use your Content to train their models. We cannot fully control the internal practices of independent third parties, and each provider operates under its own terms and privacy practices. We share your Content with them only to the extent necessary to perform the generation you requested.

No solely automated decision-making: We do not use your personal data to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Generating content at your request is not such a decision.

Automated content moderation: We may use automated and manual measures to detect prohibited or unsafe Content (for example, content that violates our terms). These measures support safety and policy enforcement and do not produce legal or similarly significant effects on you of the kind described above.

AI output disclaimer: AI-generated output may contain errors, inaccuracies, or unexpected results and may not be unique. You are responsible for reviewing output before relying on or publishing it. Ownership of, and rights to use, generated outputs are governed by our Terms and Conditions.

Some features create or use a digital representation of a real person's face, appearance, or voice. Because this data is sensitive, we handle it with particular care.

Your responsibility to obtain consent: You may only upload images, video, or audio of a real person, or create an avatar or voice based on a real person, if you have that person's rights and consent to do so. You must not create or use a likeness of anyone without their permission. Generating content that impersonates a real person without consent, or that depicts them in a misleading or harmful way, is prohibited.

How we process likeness data: Face and voice data you provide is used to generate the avatars, dubs, translations, or voice outputs you request, and is transmitted to the third-party AI providers described above only to produce that output.

Storage and deletion: Likeness data is stored as part of your Content for as long as your account is active and you keep the associated assets, unless you delete it sooner. You can delete avatars, uploads, and generated assets from your account, and you can request deletion of likeness data by contacting us at hola@obvio-ai.com. When you close your account, we delete or de-identify likeness data in line with the timeframes described in the Data Retention section, subject to any legal obligation to retain certain records.

Removal rights of depicted individuals: If a person depicted in Content believes their likeness has been used without consent, they may contact us at hola@obvio-ai.com to request removal, and we will review and act on such requests.

Enforcement against prohibited use: We may remove Content and suspend or terminate accounts involved in creating or sharing prohibited deepfake, non-consensual likeness, or impersonation content. We review reports of such content and take appropriate action, which may include removing the content, restricting the account, and, where required, notifying or cooperating with authorities.

We take reasonable and appropriate technical and organizational measures to protect your information against unauthorized access, loss, misuse, and alteration.

- Encryption: Data is encrypted in transit using industry-standard protocols, and Content and account data stored with our infrastructure providers is encrypted at rest. - Access controls: Access to systems and data is restricted to authorized personnel and service providers who need it to operate the platform, and is governed by authentication and least-privilege principles. - Payment security: Payment card details are processed directly by our payment processor, Stripe, which is PCI-DSS compliant. Obvio AI does not store full payment card numbers on its systems.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident affecting your personal data, we will notify you and the relevant authorities where required by law.

We share your information only as needed to run the platform, and never to sell it. We rely on the following categories of service providers (subprocessors), who currently process data on our behalf under contractual confidentiality and data-protection obligations.

- Supabase: database, authentication, and file storage for your account and Content. - Stripe: payment and subscription processing. - Vercel: hosting and delivery of the platform. - Inngest: background job processing and automations that support generations and platform operations. - FAL, HeyGen, and Replicate: AI model providers that process your Content to generate the output you request. - Composio: optional third-party tool integrations that you choose to connect.

We may also disclose information when required to comply with the law, respond to lawful requests from public authorities, enforce our terms, protect the rights, safety, and property of Obvio AI, our users, or others, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).

We do not sell your personal information or your Content, and we do not share it for cross-context behavioral advertising.

We and our service providers use cookies and similar technologies to operate and improve the platform.

- Essential cookies: required to sign you in, keep your session secure, and provide core functionality. The platform will not work properly without them. - Functional cookies: remember your preferences and settings to improve your experience. - Analytics cookies: help us understand how the platform is used so we can improve it.

You can control cookies through your browser settings, including blocking or deleting them, though disabling essential cookies may prevent parts of the platform from working. Where required by law, we ask for your consent before setting non-essential cookies.

We keep personal data only for as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

- Account information: retained for as long as your account is active. - Content and likeness data: retained while your account is active and you keep the associated assets, and deleted when you remove them or close your account, subject to short technical retention in backups. - Billing records: retained for the period required to meet tax, accounting, and other legal obligations, which is typically longer than the life of your account.

When you close your account, we delete or de-identify your personal data and Content within a reasonable period, except where we are legally required to retain certain records or need to retain limited information to resolve disputes, prevent fraud, or enforce our agreements. Residual copies may persist in routine backups for a limited time before being overwritten.

We offer subscription plans, billed through Stripe and renewing automatically until you cancel, as well as a usage-based credits system. Credits are consumed each time you generate content, and we record credit consumption as usage information (see Information We Collect).

Consumed credits are non-refundable, carry no cash value, and may expire depending on your plan. You can manage or cancel your subscription, and review your credit balance, in your account settings. The full terms governing billing, subscriptions, credits, refunds, and cancellation are set out in our Terms and Conditions; this section is provided for transparency about how billing-related data is used and does not modify those terms.

We respect intellectual property rights and expect you to do the same. You must hold the rights or permissions necessary for any Content you upload or generate, and you must not infringe the copyright or other rights of others.

If you believe Content on the platform infringes your copyright, you may send a notice to us at hola@obvio-ai.com. Please include enough detail to identify the allegedly infringing material and its location, a description of the work you say is infringed, your contact information, and a statement that you have a good-faith belief that the use is not authorized and that the information in your notice is accurate. We will review valid notices and may remove or disable access to the material and take action against repeat infringers, including suspending or terminating accounts.

Complaints about the unauthorized use of a person's likeness, face, or voice are handled as described in the Avatars, Likeness & Voice Data section.

Obvio AI operates online and works with service providers and AI model providers that may be located in different countries. As a result, your information may be transferred to, stored in, and processed in countries other than the one in which you live, including countries whose data-protection laws may differ from those of your jurisdiction.

Where we transfer personal data internationally, we take steps to ensure it remains protected, including by relying on recognized legal transfer mechanisms such as standard contractual clauses where applicable, and by requiring our service providers to maintain appropriate safeguards.

By using the platform, you understand that your information may be processed in the locations described above for the purposes set out in this policy.

The platform is intended only for users who are at least 18 years old, or the age of majority in their jurisdiction if higher. The platform is not directed to children, and we do not knowingly collect personal information from anyone under 18.

If you are a parent or guardian and believe a minor has provided us with personal information, please contact us at hola@obvio-ai.com so we can delete it. If we learn that we have collected personal information from a person under the applicable minimum age, we will delete it promptly.

Depending on where you live, you may have some or all of the following rights regarding your personal data.

- Access: request a copy of the personal data we hold about you. - Rectification: ask us to correct inaccurate or incomplete data. - Erasure: ask us to delete your personal data, subject to legal exceptions. - Portability: receive certain data in a portable, machine-readable format. - Objection and restriction: object to or ask us to restrict certain processing of your data. - Withdraw consent: where we rely on your consent, withdraw it at any time (this will not affect processing already carried out, and may disable features such as avatar or voice generation that depend on that data). - Opt out of marketing: unsubscribe from marketing communications at any time using the link in our emails or by contacting us.

To exercise any of these rights, contact us at hola@obvio-ai.com. We will respond within the timeframes required by applicable law. We may need to verify your identity before acting on a request, and we will not discriminate against you for exercising your rights.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following additional information applies, and you have the rights set out in the Your Privacy Rights section.

Legal bases for processing: We process your personal data on one or more of the following legal bases:

- Performance of a contract: to provide the platform and the generations you request. - Consent: for example, for non-essential cookies, certain marketing, and the processing of likeness data as described below. You may withdraw consent at any time. - Legitimate interests: to operate, secure, and improve the platform, prevent fraud and abuse, and communicate with you, balanced against your rights. - Legal obligation: to comply with tax, accounting, and other legal requirements.

Special-category (biometric) data: Face and voice (likeness) data used to create or drive avatars or voice features may constitute special-category biometric data when used to uniquely identify a person. Where that is the case, we rely on your explicit consent under Article 9 of the GDPR, and you must also have the consent of any person depicted. You may withdraw your consent at any time, which may disable features that depend on this data.

Automated decision-making: We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

International transfers: Where we transfer your data outside the EEA, UK, or Switzerland, we rely on appropriate safeguards as described in the International Data Transfers section.

Data controller and representative: For the processing described in this policy, Obvio AI acts as the data controller. We have not appointed a separate Data Protection Officer or Article 27 representative; you can reach us on all data-protection matters at hola@obvio-ai.com.

Supervisory authority: You have the right to lodge a complaint with your local data-protection supervisory authority. We would, however, appreciate the chance to address your concerns first, so please consider contacting us at hola@obvio-ai.com.

If you are a California resident, the California Consumer Privacy Act, as amended, gives you specific rights regarding your personal information.

- Right to know: request the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collecting it, and the categories of third parties with whom we share it. - Right to delete: request deletion of personal information we have collected from you, subject to legal exceptions. - Right to correct: request correction of inaccurate personal information. - Right to opt out: California law gives you the right to opt out of the sale or sharing of personal information. We do not sell your personal information or your Content, and we do not share it for cross-context behavioral advertising. - Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.

You may exercise these rights, or use an authorized agent to do so, by contacting us at hola@obvio-ai.com. We will verify your request as required by law before responding.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

When we make changes, we will update the "Last updated" date at the top of this policy and post the revised version on our website. If the changes are material, we will provide a more prominent notice where appropriate, such as by email or an in-product notification.

Your continued use of the platform after an update takes effect means you accept the revised policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us.

Email: hola@obvio-ai.com

We are committed to working with you to resolve any privacy concerns, and we will respond to your inquiry within the timeframes required by applicable law.