Privacy Policy

1. Who controls the data

AvataReel is the controller of your account, payment and platform usage data, and decides the purposes and means of that processing.

When you upload images, voices or other personal data of other people to create videos, you are the controller of that data and decide how it is used. In that case, AvataReel acts as a processor: it handles the data only to carry out what you asked for.

We have appointed a Data Protection Officer (Encarregado, DPO) to handle requests from data subjects and from the Brazilian National Data Protection Authority (ANPD). For any privacy question or to exercise your rights, write to hello@avatareel.com.

2. Data we collect

Sign-up and account data: name, email and authentication data.

WhatsApp (optional): if you give us your number at sign-up, in your profile or after rating a video, we store that number in your account.

Content you upload: images, face photos, voices, scripts, scene prompts and product images you provide to generate the videos. When you upload a person's image or voice, that content may contain personal and biometric data. You are solely responsible for having a legal basis and permission to use it. When you create an avatar, you declare that you have the consent of the person shown, and we record that declaration with the date and the version of the Avatar Terms of Use you accepted. AvataReel does not verify the identity of the person shown; complaints about misuse of a face or voice can be sent to hello@avatareel.com, and we review each one.

Payment data: processed directly by Stripe (card) and AbacatePay (Pix). Buyers outside Brazil pay in US dollars (USD) by card through Stripe. We do not store your full card number; we receive only the transaction data needed to confirm the credit purchase.

Invoice data: before your first payment, we ask for your full name or company name, CPF or CNPJ (Brazilian taxpayer numbers) and address. We use this data to issue the service invoice (NFS-e) required by Brazilian tax law. To fill in the address from the CEP (Brazilian postal code), your browser queries the public ViaCEP service, which receives only the CEP you type.

Usage and technical data: video generation records, credit usage, IP address, device identifiers and product events collected by analytics tools.

Feedback answers: when you answer one of our questions about your experience, by email or through the in-app survey, we store the text of your answer, your email and which question you answered. If you paste a link to one of your posts to earn credits, we store that link to check the post.

3. Legal bases and purposes

We process your data to perform the contract (create and deliver the videos, manage your account and credits), to comply with legal and regulatory obligations (such as issuing invoices), to pursue our legitimate interest in improving and protecting the product, and based on your consent where applicable.

The content you upload is used only to generate the videos you request and to operate the platform. We do not use your content to train third-party AI models.

Based on our legitimate interest in improving the service, we may ask you a single question about your experience, by email or in the app. Answering is optional. To stop receiving these emails, use the link at the bottom of any of our emails; this also turns off the in-app question.

With your consent, AvataReel may contact you on the WhatsApp number you provide, only to ask your opinion about the site and to help when a video goes wrong. We do not send advertising there. When you save the number, we record the date, the screen where you entered it and the text you saw. You can delete the number at any time in Profile; this also deletes that record, and both are removed along with your account.

4. Sharing and processors

We share data only with processors needed to run the service: Stripe and AbacatePay (payment processing), our accountant and the city government (issuing invoices), infrastructure and AI providers that render the videos, object storage (Cloudflare R2), Resend (sending our emails and receiving replies to them) and PostHog (analytics and the in-app feedback survey, PostHog Surveys). These partners process the data according to our instructions.

We do not sell your personal data. We may disclose data when required by law or court order.

5. International transfer

Some processing and storage may take place on servers outside Brazil, for example in payment processing (Stripe) and in the rendering and object storage infrastructure. In those cases, the international transfer follows Article 33 of the LGPD and relies on safeguards such as specific contractual clauses and the processors' commitment to maintain a level of protection compatible with Brazilian law.

6. Retention and deletion

We keep the files you upload (such as images and voices) and the generated videos while your account is active. After the account is deleted, this content is removed from our systems within 30 days, unless we must keep it to meet a legal obligation.

Financial and tax records related to credit purchases are kept for the period required by applicable law (as a rule, 5 years). Access records and technical logs are kept for up to 12 months, as required by the Brazilian Internet Civil Framework (Marco Civil da Internet, Law No. 12,965/2014).

Feedback answers we receive by email are deleted 12 months after we receive them, or earlier, when you delete your account.

You can ask us to delete your account and your content at any time by writing to hello@avatareel.com.

7. Security

We use technical and organizational measures to protect your data, such as encryption in transit (HTTPS), access control and separation of credentials. No system is fully immune to incidents; if a relevant incident occurs, we will act as required by the LGPD.

8. Cookies and analytics

We use cookies and product analytics tools to authenticate access, remember preferences and understand platform usage in aggregate. You can control cookies in your browser settings.

Our analytics tool is PostHog, with data hosted in the European Union. If you accept non-essential cookies, PostHog also records your browsing session (clicks, scrolling and screens visited) so we can find errors and points of confusion. The content of form fields is not recorded. If you decline, the session is not recorded.

PostHog also shows the in-app feedback question (PostHog Surveys) once and records your answer, if you answer.

9. Your rights (LGPD)

You may request at any time confirmation that we process your data, access, correction, anonymization, portability or deletion of your data, as well as information about sharing and the withdrawal of consent.

To exercise these rights, write to hello@avatareel.com. We will respond within the time limits set by law.

10. Requests from people shown in videos

If you appear in a video or avatar created by another user without your consent, write to hello@avatareel.com. We will review the request, remove the content from the platform when appropriate and may inform the user responsible.

AvataReel does not control copies of videos that a user has already downloaded or published on other sites. In those cases, the person who created and published the content is responsible.

11. Children and teenagers

AvataReel is not intended for anyone under 18, and we do not knowingly collect data from children or teenagers. If we learn that such data is being processed without an adequate legal basis, it will be deleted.

12. Changes to this policy

We may update this Policy from time to time. Material changes will be shown by the Last updated date at the top of this page.