Privacy Policy

Last updated: August 21, 2026

This policy describes how [Company Legal Name] ("Instaclones", "we", "us") collects, uses, and shares information when you use the Instaclones service — an AI-assisted video creation platform. If anything here is unclear, contact us at [support email].

Information we collect

• Account information. Name, email address, and a hashed password, or your profile from an OAuth sign-in provider (Google or GitHub) if you use one.
• Content you upload. Video footage, images, logos, music, and brand assets you add to your workspace. This can include photos of people (for avatar looks) and voice recordings (for voice cloning) that you choose to upload.
• Generated content. Scripts, voiceovers, avatar videos, and finished renders the service produces for you.
• Usage and billing data. Videos rendered, plan and quota usage, and payment status. Card details are handled by Stripe and never touch our servers.
• Connected accounts. If you connect YouTube, TikTok, Instagram, or Facebook for publishing, we store the access tokens and basic account metadata those platforms provide, solely to publish on your instruction.
• Editing signals. Edits you make (clip swaps, trims, replacements) are recorded per-account to personalize future suggestions.

How we use it

• To provide the service: generate scripts, voiceovers, avatars, and renders you request.
• To operate your workspace, enforce plan quotas, and process billing.
• To publish videos to platforms you have explicitly connected, when you ask us to.
• To personalize editing suggestions from your own edit history.
• To send transactional email (password resets, verification, team invitations, payment notices).
• To secure the service and debug failures.

We do not sell your personal information, and we do not use your uploaded faces or voices to train models or to generate content for anyone outside your workspace.

Service providers we share data with

Producing your videos requires sending the relevant content to processors acting on our behalf:

• Stripe — payments and subscriptions.
• Amazon Web Services (S3) — storage of your media and renders.
• Shotstack — video assembly and rendering.
• HeyGen — talking-head avatar generation (receives avatar photos you upload).
• ElevenLabs — voiceover synthesis and voice cloning (receives voice samples you upload).
• Google (Gemini) and OpenAI — script generation and transcription.
• Resend — transactional email delivery.
• Pexels / Pixabay / Envato — stock footage search (your search terms only).
• Meta, TikTok, Google/YouTube — only when you connect an account and publish to it.

Biometric-adjacent content (faces and voices)

Avatar photos and voice samples are especially sensitive. Only upload photos and recordings of yourself, or of people who have given you their explicit permission. These files are used solely to generate the avatars and voiceovers you request, are shared only with the processors above (HeyGen, ElevenLabs), and are deleted from our systems when you delete them or your account.

Retention and deletion

Your content stays in your workspace until you delete it. Deleting your account (Settings → Delete account) permanently removes your account records, workspace data, and stored media, and cancels any active subscription. Backups and logs age out on a rolling basis. You can also export your data first from the account page.

Your rights

Depending on where you live (including under GDPR and CCPA), you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. The account page covers export and deletion directly; for anything else, email [support email] and we will respond within 30 days.

Cookies

We use session cookies for sign-in and security. We do not use third-party advertising or tracking cookies.

Children

Instaclones is not directed at children under 16, and we do not knowingly collect their information.

Changes

We will post any changes to this policy here and update the date above. Material changes will be announced by email to account holders.

Contact

[Company Legal Name]
[Company Address]
[support email]