Privacy Policy
The short version. We collect what we need to run your account, make your videos and get you paid (if you're a creator). We don't sell personal information or use it for advertising. A creator's face, voice and ID are used only with their written consent, are never shown to brands, and are deleted when they leave. You can ask for a copy of your data or ask us to delete it.
1. Who we are
EverTwin, Inc., a Delaware corporation, runs evertwin.io and the EverTwin app and is the controller of the personal information described here. This policy covers brands, creators and visitors.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email, company, password (stored only as a salted hash), language | You |
| Brand and campaign content | Website and product links, product photos, logos, brand details, scripts, change requests, generated videos and images | You, and pages you ask us to read |
| Creator profile | Name, handle, city and country, bio, niches, rules and prices, social account details you connect | You, and social platforms you connect |
| Creator likeness | Photos, intro and consent videos, voice recordings, ID document and selfie for verification | You (creators only, with consent) |
| Billing | Plan, invoices, billing address. Card details are collected and stored by Stripe, not by us | You, Stripe |
| Payouts | Payout email, country and method (creators) | You |
| Support | Messages you send us and our replies | You |
| Technical | IP address, browser and device type, pages requested, error logs, session cookie | Your device |
We don't use advertising or analytics trackers on evertwin.io. See the Cookie Policy.
3. Creators' face, voice and ID
Some laws treat face and voice data as biometric or sensitive information. For creators:
- We collect photos, video and voice only after you give written consent in the app and record a consent statement.
- We use them only to create and run your digital twin, to make videos you have approved under your licences, and to check your identity. We don't sell them or use them for any other purpose.
- Your source photos, video, voice and ID are stored privately and are never shown or given to brands. Brands receive only finished videos.
- Your ID document is used only to verify that you are who you say you are.
- When you leave EverTwin, we delete your source likeness data within 30 days after your last licence ends, except where the law requires us to keep something longer. Videos already made for brands under a valid licence stay with those brands under the licence terms.
Brands who upload their own face or voice to make a clone are covered by the same protections for that data.
4. How we use information
- To provide the Service: accounts, reading your brand's site, writing scripts, generating and storing videos, licensing and payouts (performance of our contract with you).
- To bill you and keep records (contract and legal obligation).
- To send service emails such as account confirmation, password resets, receipts, video-ready and licence notices (contract). You can't opt out of these while you have an account.
- To keep the Service safe, prevent abuse and enforce our policies (legitimate interests).
- To answer support requests and improve the Service (legitimate interests).
- For creators' likeness data, only with your consent, which you can withdraw (withdrawing stops new use; see the Creator Likeness Terms for how live licences wind down).
We don't sell personal information, share it for cross-context behavioral advertising, or use your content to train our own AI models.
5. Who we share it with
We share information only as needed to run the Service, with these processors under contracts that limit their use of it:
| Provider | What for |
|---|---|
| Cloudflare | Website hosting, network security, media storage (R2) and the AI text model that writes scripts (Workers AI) |
| Oracle Cloud Infrastructure | Application server and database |
| Higgsfield | Generating images and videos from your prompts, presenter and product photos |
| Poe (Quora) | Backup AI text model when the main one is unavailable |
| Stripe | Payments, subscriptions and invoices |
| Resend | Sending service emails |
| Social platforms you connect (TikTok, Instagram, YouTube, X) | Confirming your account and follower counts, only when you choose to connect |
We also share information: with a brand or creator you are working with, as the licence flow requires (for example, a brand sees a creator's public profile and finished videos; a creator sees the brand name and the request); if required by law or to protect rights and safety; and with a buyer if EverTwin is part of a merger or acquisition, under this policy.
6. International transfers
We are based in the United States and our providers may process data in the US and other countries. Where the law requires it, we rely on safeguards such as Standard Contractual Clauses for transfers from the EEA, UK or Switzerland.
7. How long we keep it
- Account, brand and campaign data: while your account is open, then deleted within 90 days of closing it, except backups that age out within a further 35 days.
- Generated videos: while your account is open, or until you delete them.
- Creator likeness data: as described in section 3.
- Billing records: as long as tax and accounting laws require (usually 7 years).
- Support messages and logs: up to 2 years.
8. Your rights
Depending on where you live (for example under the GDPR, UK GDPR, California law or China's PIPL), you may have the right to access, correct, delete or get a copy of your personal information, to object to or restrict some uses, to withdraw consent, and to complain to a data protection authority. We don't discriminate against you for using these rights.
To make a request, use our support form (choose "Privacy and data requests") or email [email protected] from your account email. We may need to confirm your identity first, and will answer within the time the law sets (usually 30 days).
9. Security
We use encryption in transit (HTTPS, and an encrypted link between our edge and our server), private storage with short-lived signed links for media, hashed passwords, and access limited to people who need it. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
10. Children
EverTwin is not for anyone under 18. We don't knowingly collect information from children, and creator twins may not depict minors. If you think a child has given us information, contact us and we will delete it.
11. Changes and contact
We will post changes here and update the date above. For material changes we will email you or show a notice in the app before they take effect.
Contact: EverTwin, Inc. · [email protected] · support form.