Privacy Policy

1. Introduction

AIvatar ("we", "our", or "us") operates the AIvatar website and AI avatar platform (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal information when you use our Service.

We comply with applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Personal Data (Privacy) Ordinance of Hong Kong.

2. Information We Collect

2.1 Information You Provide

When you create an account, contact us, or use our Service, you may provide us with:

• Account Information: Email address, password (encrypted), company name, and contact details
• Business Information: Company size, industry, and use case requirements
• Avatar Content: Images, videos, or voice recordings you upload to create custom AI avatars
• Communication Data: Messages and inquiries sent through our contact forms or support channels

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Usage Data: Features accessed, API calls made, and interaction patterns
• Device Information: Device type, operating system, browser type, and IP address
• Log Data: Access times, pages viewed, and referring URLs
• Performance Data: System performance metrics and error logs

2.3 Information We Do NOT Collect

We do not collect:

• Personal information of end-users interacting with your AI avatars (unless explicitly authorized)
• Payment card information (processed securely by our payment providers)
• Precise geolocation data
• Social media contacts or address books

3. How We Use Your Information

We use the collected information for the following purposes:

Purpose	Data Used
Provide the Service	Account info, avatar content, usage data
Process avatar generation	Uploaded images/videos, voice recordings
Personalize experience	Usage patterns, preferences
Customer support	Contact info, communication history
Service improvement	Aggregated usage statistics
Billing and payments	Account info, transaction history
Security and fraud prevention	Log data, device info, IP address

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information only in the following circumstances:

Service Providers

With trusted partners who assist in operating our Service (cloud hosting, payment processing, email delivery), bound by strict confidentiality agreements.

Legal Requirements

When required by law, court order, or to protect our rights, property, or safety.

Business Transfers

In connection with a merger, acquisition, or sale of assets (with prior notice).

With Your Consent

When you explicitly authorize us to share information.

5. Data Security

We implement robust security measures to protect your data:

• 🔐 Passwords are hashed using industry-standard bcrypt algorithms
• 🔒 All data transmission is encrypted using HTTPS/TLS 1.3
• 🛡️ Regular security audits and penetration testing
• 🔑 Secure authentication with JWT tokens and MFA support
• 💾 Data stored in SOC 2 compliant cloud infrastructure
• 🎭 Avatar content is encrypted at rest and access-controlled

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent at any time

To exercise these rights, please contact us at privacy@aivatar.ltd.

7. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Maintain your session and preferences
• Analyze usage patterns to improve the Service
• Remember language and region preferences
• Ensure security and prevent fraud

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

For GDPR inquiries or to contact our Data Protection Officer, please email dpo@aivatar.ltd.