Privacy Policy

This policy explains what PromoTwin (the "Service", operated by us) collects, why, and what happens to it. The short version: we collect what the product needs to work, we do not sell it, and the most sensitive thing you give us, the photos you upload, can be deleted by you at any time.

1. What we collect

• Account data. Your email address and a hashed password. We never store your password itself.
• Twin photos. The photos you upload to train an AI twin. These are the most personal content in the Service and are handled as described in section 2.
• Generated media. The stills and videos produced by your jobs, plus a copy of each source video used for the side-by-side review view.
• Usage data. Job records (what you recreated, when, and its status), your watched accounts, and settings.
• Billing data. Payments are processed by Stripe. We store your Stripe customer id, plan, and subscription status. We never see or store your card number.

2. How photos and media are processed

• Uploaded twin photos are screened automatically before training. Screening sends each photo to Anthropic's AI vision API, which checks for content we do not allow (for example apparent minors or public figures). Rejected photos are flagged to you with the reason.
• One frame from each source video is sent to the same API to describe the scene and read any on-screen text. Faces are not identified.
• Training photos are sent to fal.ai, our generation provider, to train your twin's model. The trained model is stored by us and used only for your jobs.
• Media is stored on Cloudflare R2. Object addresses are long random keys that are practically unguessable, and nothing about your account is browsable publicly.

3. Who processes data for us

Processor	What they handle
Stripe	Subscription payments and invoices
Cloudflare R2	Storage of photos, stills, and videos
fal.ai	Twin training and video generation
Anthropic	Automated photo screening and scene description
Resend	Transactional email (for example password resets)
Microsoft Clarity	Usage analytics and session replays (see section 4)

We do not sell your data, share it with advertisers, or use it to train AI models of our own.

4. Cookies and analytics

The Service uses a single session cookie to keep you signed in. We use two analytics tools to see how the product is used and where to improve it. Umami runs from our own domain, sets no tracking cookies, and once you're signed in ties activity to a random account identifier only, never your name or email. Microsoft Clarity records how you move through the app, including replays of the screens you see (which can include your photos as they appear on screen), and sets cookies to recognise your browser between visits. Clarity data is processed by Microsoft and handled under Microsoft's privacy statement. We use this data to improve the product. We do not use it for advertising and we do not sell it.

5. Retention

• Account data and job history are kept while your account exists.
• We do not run any automated deletion of your media. Rejected recreations and candidate stills you don't pick stay in storage until you remove them yourself; you can delete any photo, any twin, or your whole account at any time.
• When your account is deleted we remove your account data, photos, trained models, and generated media from our systems. We keep one exception: a minimized, pseudonymous record proving you accepted our terms and, if you paid us, your billing history, for 7 years, to meet legal and tax record-keeping requirements. That record does not include your name, email, or any photos, and cannot be traced back to your account.

6. Your rights

Email [email protected] from your account address to request a copy of your data, correct it, or delete your account and everything in it. We answer within 30 days. If you are in the EU or UK you also have the right to complain to your local data protection authority; our legal bases for processing are the contract we have with you and our legitimate interest in keeping the Service safe.

7. Security

Passwords are hashed with a per-user salt. Access to production systems is restricted. No system is perfectly secure, so if a breach affecting your data ever occurs we will notify you.

8. Age

The Service is for adults. We do not knowingly collect data from anyone under 18, and accounts found to belong to minors are deleted.

9. Changes

If this policy changes materially we will notify you by email or in the app before the change takes effect.

10. Contact

Privacy questions and requests: [email protected].