Privacy Policy

This Privacy Policy explains what AvatarFactory collects, how we use it, who we share it with, and the choices you have. AvatarFactory is a tool for creating AI avatar videos and AI influencers, available on the web and through the AvatarFactory MCP connector for Claude. By using AvatarFactory, you agree to this policy.

Information We Collect

• Account email. When you create an account, we collect your email address and basic profile details so we can sign you in and contact you about your account.
• Generated content. The personas, scripts, avatar images, voices, and videos you create, along with the prompts and reference material you provide to generate them.
• Usage events. Product analytics about how you use the service, such as which features you open and actions you complete, tied to an account identifier.
• Payment information. When you start a paid trial or subscription, our payment processor collects your billing and card details. We do not store full card numbers on our own servers.

The AvatarFactory MCP Connector for Claude

The AvatarFactory MCP connector lets Claude reach AvatarFactory's tools inside your chat. When you connect it and ask Claude to build a persona, write a script, or render a video, the relevant text and images pass from Claude to AvatarFactory so we can carry out your request. Connecting the MCP does not require an API key. You create a free AvatarFactory account the first time Claude needs to build or render, and that account is governed by this policy. We receive the persona details, scripts, and prompts needed to run the tool you invoked, plus the usage events described above. We do not receive your unrelated Claude conversations.

How We Use Your Information

• To provide the service: build personas, write scripts, generate images and voices, and render videos you request.
• To operate your account, process payments, and provide support.
• To improve the product, understand which features help, and fix problems.
• To keep the service secure and to prevent abuse.
• To comply with legal obligations.

Fraud Prevention and Dispute Evidence

To protect accounts and to defend payment disputes, we record technical and event data alongside your account: IP address, user agent, device and browser signals, approximate location derived from your IP address, and timestamps for signup, login, checkout, acceptance of the Terms, and each generation you run.

We process this data to perform our contract with you, which includes billing and delivering what you paid for, and on our legitimate interest in preventing fraud, abuse, and payment disputes.

We keep these records for as long as your account exists and for 24 months after the related charge, which covers the period in which a chargeback can be filed. After that we delete or anonymize them.

If you or your bank open a payment dispute, we share the relevant records with our payment processor as evidence of authorization and delivery. We do not use this data for advertising.

Service Providers We Share Data With

We rely on a small set of service providers to run AvatarFactory, grouped by the role they play: cloud hosting and storage (Amazon Web Services), AI media generation partners that render the images, voices, and videos you request, payment processing (Stripe), and product analytics (PostHog). These providers process your data only to deliver the service on our behalf, and each receives only the data its role requires, and only when a flow you start actually needs it. We do not sell your personal information. We share it only with these providers, and when required by law.

Data Retention

We keep your account data and generated content for as long as your account is active so you can access what you created. When you delete a piece of content, we remove it from active storage, and copies may persist for a short period in backups before they expire. When you close your account, we delete or anonymize your personal data within a reasonable period, except where we must keep records to meet legal, tax, or security obligations. Usage and analytics events are retained on a rolling basis to understand product trends.

Your Rights and Choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can manage your content and account settings inside the app, or contact us to make a request. You can also disconnect the MCP connector at any time from Claude's connector settings, which stops Claude from reaching AvatarFactory's tools.

Cookies and Similar Technologies

We set a small number of cookies and use equivalent browser storage. Strictly necessary ones keep you signed in and keep the app secure; without them the product does not work. Preference storage remembers choices such as your workspace and interface settings. Analytics cookies, set by our product analytics provider (PostHog), tell us which pages and features get used so we can improve them. Inside the app, our analytics provider also records session replays of how screens are used, with every typed input masked. We do not sell this data, and we do not currently run third party advertising or retargeting pixels on this site. If that changes, we will update this policy first.

You can clear or block cookies in your browser settings at any time. Blocking the strictly necessary ones will sign you out and break parts of the app. Blocking analytics only reduces what we can see about usage.

GDPR and Data Requests

For the purposes of the GDPR, the controller of your personal data is AvatarFactory Ltd., a company incorporated in Israel, reachable at Support@AvatarFactory.IO. We process your data to perform our contract with you, on our legitimate interest in keeping the service secure and improving it, on your consent where we ask for it, and to meet legal obligations.

We are based in Israel, and our hosting, storage, and analytics providers process data in the United States. Where we transfer data out of the EEA or the UK we rely on the adequacy decision for Israel and, for onward transfers to our US providers, on Standard Contractual Clauses in our agreements with them.

If you are in the European Economic Area or the United Kingdom, you have the right to access the personal data we hold about you, to correct it, to have it deleted, to receive a copy in a portable format, and to object to or restrict certain processing. Where we rely on consent, you can withdraw it at any time by emailing us or by blocking the relevant cookies in your browser.

To make a request, email Support@AvatarFactory.IO from the address on your account and tell us what you want us to do. We respond without undue delay and within one month of receiving your request. If the request is complex, or you have made several, we may extend that period by up to two further months, and we will tell you within the first month if we do. Deleting your account removes your personal data on the timeline described under Data Retention, except where we are legally required to keep records. If you are not satisfied with our response, you may complain to your local data protection authority.

Security

We use industry-standard measures to protect your data, including encryption in transit, access controls, and private storage. No system is perfectly secure, but we work to keep your information safe and to respond quickly if an issue arises.

Children

AvatarFactory is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

Changes to This Policy

We may update this policy as the product evolves. When we make a material change, we will update the effective date at the top, and where appropriate we will notify you. Continued use of AvatarFactory after an update means you accept the revised policy.

Contact Us

If you have questions about this policy or your data, contact us at Support@AvatarFactory.IO.