Privacy policy

Avatar4i is operated by Tomryn Inc., a company based in Ontario, Canada. For any privacy question or request, contact support@avatar4i.com or use the contact form.

• • Account details — your name, email address, optional company name and profile image.
• • Uploads — images, video and voice recordings you upload to create avatars, voices or clips.
• • Generated content — scripts, captions and the videos produced from them.
• • Usage and credit records — generation jobs, credit reservations and charges, template usage and moderation decisions.
• • Consent records — the exact consent wording you agreed to, its version, the timestamp, your IP address and browser user agent.
• • Payment data — handled by Stripe. We store subscription state and identifiers, never full card numbers.
• • Support messages — anything you send through the contact form, plus the IP address it was sent from.

Avatar4i collects facial images, video of people, and voice recordings, because these are what an AI presenter and a cloned voice are built from. This information can identify a specific person, so we treat it with extra care.

It is used only to create the avatar or voice you asked for and to render the videos you generate. It is stored in private storage that is not publicly readable: files are namespaced to your account and served only through short-lived signed links to you.

To produce video and speech, this material is transmitted to the third-party AI processors listed below. We do not sell it, use it to train our own models, or make it available to other users.

Consent is required before every upload, and no upload is accepted without a consent record written on our servers first.

• Supabase — Application hosting, database, authentication and private file storage.
  Receives: Account details, uploaded files, generated videos, usage and credit records.
• Stripe — Payment processing and subscription billing.
  Receives: Name, email, billing and card details (card data never reaches our servers).
• AI video provider — Rendering avatar videos from your script, likeness and voice.
  Receives: Your script, presenter image or video, and synthesised audio.
• ElevenLabs — Voice cloning and speech synthesis.
  Receives: Voice recordings you upload and the text to be spoken.
• Resend — Transactional and notification email delivery.
  Receives: Your email address and the content of the message being sent.
• Cloudflare — Bot protection on public forms.
  Receives: IP address and browser challenge data.

These providers act on our instructions. We add new processors only where needed to run the service, and this page is updated when we do.

The providers above operate infrastructure outside Canada, including in the United States and the European Union. By using Avatar4i, your information — including images and voice recordings — may be stored or processed outside Canada and may be subject to the laws of those countries.

• • Uploads and generated videos — kept while your account is active, or until you delete them. Deleting an avatar, voice, clip or video removes the stored file.
• • Usage, credit and billing records — retained while the account exists and afterwards where required for tax and accounting purposes.
• • Consent records — permanent and immutable. They cannot be edited or deleted, and they are deliberately retained after the related image, video or voice file is deleted, so we can always show what permission was given for material that was processed. The record is marked as relating to a deleted subject.
• • Contact messages — kept as long as needed to handle the enquiry and keep a support history.
• • On account deletion — your account, avatars, voices, uploads and generated videos are deleted. Consent records, plus minimal billing and moderation records, are retained as described above.

Under Canadian privacy law you can ask us to give you access to the personal information we hold, correct it, delete it, or provide an export of it. You can also withdraw consent for a likeness or voice at any time.

• • Access, correction and export — much of it is available in Settings; for anything else, ask us through the contact form choosing “Legal/privacy request”.
• • Deletion — delete individual avatars, voices, clips and videos in the app, or request full account deletion.
• • Withdrawing consent — delete the avatar or voice it relates to, or ask us to. We stop using it and remove the stored file; the consent record itself is retained as proof of the permission that applied while it was in use. See the consent policy.

We respond to requests within the timeframes required by law.

Avatar4i uses cookies and browser storage that are necessary to run the service: keeping you signed in, remembering interface preferences such as favourite templates, and protecting public forms from bots via Cloudflare Turnstile.

We do not use advertising cookies and we do not sell data to advertisers. If we introduce product analytics, this page will be updated first.

Uploads are stored in private buckets with per-account access rules enforced in the database, access is granted through short-lived signed links, and secrets used to reach AI providers exist only on the server. No system is perfectly secure, but access to your files is restricted to your account and our service infrastructure.

This policy is governed by the laws of Ontario, Canada, and the federal laws of Canada applicable there. We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner of Canada.

This is version 1.0, last updated 12 September 2026. When we make material changes we update the version and date here and, where appropriate, notify you by email.