Privacy Policy
Last updated 2026-10-26 · seeded from the synthesys.io Privacy Policy (in effect August 3rd, 2023)
1. Introduction
At Synthesys, accessible from https://synthesys.io and from this application, one of our main priorities is the privacy of our visitors and users. This Privacy Policy document contains types of information that is collected and recorded by Synthesys and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at support@synthesys.io. This Privacy Policy applies only to our online activities and is valid for visitors to our website and users of the application with regards to the information that they shared and/or collect in Synthesys. This policy is not applicable to any information collected offline or via channels other than this website and application.
2. Use of client data
At Synthesys, we prioritize the confidentiality and integrity of our client’s data. We affirm the following:
- No AI Training: Client data is not utilized to train, retrain, or enhance our AI models.
- Data Ownership: Clients retain full ownership of their data. We do not claim any rights over the content created or uploaded by our clients.
- Confidentiality: We do not share client data with third parties without explicit consent, unless required by law.
- Data Deletion: Clients have the right to request the deletion of their data at any time. We ensure that such requests are processed promptly and securely.
3. Biometric data — your face and voice
When you create a digital twin or a voice clone, Synthesys processes face images extracted from the clip you upload or record, and recordings of your voice. These are special categories of personal data (biometric data used to identify a person).
We process this data only on the basis of your explicit consent, which we ask for — and record, together with the version of the Terms of Use you accepted — at the moment you upload or record for a twin or voice clone. Without that consent no twin or clone is created.
We use your face and voice data only to create and operate your own digital twin and voice clone, inside your account, for the videos you make with Synthesys. We never use it to train, retrain or improve AI models (see "No AI Training" above), we do not sell it, and we do not use it to identify you across other services.
If you create a twin or voice clone while working in a team, it is kept in that team's account and everyone in the team can use it in the team's videos; the team's owner can delete it. The consent we ask for says so.
You can withdraw your consent at any time. Deleting a twin or voice clone in the app removes it from your account, stops its use immediately, and deletes the stored source clip, face stills and voice sample. Copies held by our voice and video providers and in backups are removed as part of account deletion, or on request (see Exercising your rights). Withdrawal does not affect the lawfulness of processing that took place before it.
You may only provide a face or voice that is your own or that you have explicit permission to use, and you must be 18 or older to create a twin or voice clone (see the Terms of Use).
4. Retention
Twins, voice clones, uploaded files and generated videos are kept for as long as the item exists in your account: until you delete the twin, voice clone, project or file, or until your account is deleted. Deleting an item in the app deletes its stored files from our storage; copies held by our providers and in backups are removed as part of account deletion or on request. Account and billing records are kept for as long as your account exists and thereafter only as long as the law requires.
5. Consent
By using our website, you hereby consent to our Privacy Policy and agree to its terms.
For face and voice data we do not rely on your use of the site: we rely on the explicit consent you give at upload, as described in the Biometric data section above.
6. Information we collect
The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.
If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.
When you use the application we also process the briefs, files, images, clips and voice recordings you upload or record, the videos and other content generated for you, your credit balance and usage history, and payment records (payment card details are handled by our payment provider and never stored by us).
7. How we use your information
We use the information we collect in various ways, including to:
- Provide, operate, and maintain our website
- Improve, personalize, and expand our website
- Understand and analyze how you use our website
- Develop new products, services, features, and functionality
- Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
- Send you emails
- Find and prevent fraud
8. Log files
Synthesys follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this as a part of hosting services analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.
10. Advertising partners and the Google DoubleClick DART cookie
Google is one of a third-party vendor on our site. It also uses cookies, known as DART cookies, to serve ads to our site visitors based upon their visit to synthesys.io and other sites on the internet. However, visitors may choose to decline the use of DART cookies by visiting the Google ad and content network Privacy Policy at the following URL — https://policies.google.com/technologies/ads
Some of advertisers on our site may use cookies and web beacons. Our advertising partners are listed below. Each of our advertising partners has their own Privacy Policy for their policies on user data. For easier access, we hyperlinked to their Privacy Policies below.
You may consult this list to find the Privacy Policy for each of the advertising partners of Synthesys. Third-party ad servers or ad networks use technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on Synthesys, which are sent directly to users’ browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.
Note that Synthesys has no access to or control over these cookies that are used by third-party advertisers.
11. Third-party privacy policies
Synthesys’s Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.
You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers’ respective websites.
12. Sub-processors and service providers
To run Synthesys we use service providers that process data on our behalf under contract. By category:
- AI model and media generation — the text, image and video models that write scripts, plan scenes and render clips. Your brief, uploaded images and clips, face stills and the generated output pass through these providers. Configured providers: Anthropic, Google, fal.ai, Replicate, Kie.ai, HeyGen, Tavus.
- Voice synthesis and cloning — voice recordings for clones and the generated speech. Configured providers: ElevenLabs, Cartesia.
- Stock media — search terms sent to stock photo/video libraries. Configured providers: Pexels, Unsplash.
- Web research — search queries derived from your brief when a build needs public facts. Configured providers: Tavily, Perplexity.
- Advertising research data — the public ad library behind Competitor research (no personal data of yours is sent beyond the searches you run). Configured provider: Foreplay.
- Sign-in and account — your email, name and sign-in method. Configured provider: Clerk.
- Payments — card details are entered on the provider’s pages and never touch our servers. Configured provider: Stripe.
- Object storage — uploaded files, generated videos, face stills and voice samples, in an S3-compatible object store.
- Database — account, project, credit and usage records, in a managed PostgreSQL database.
- Hosting — the servers that run the application and the video pipeline.
13. YouTube (Google API Services)
Synthesys uses YouTube API Services to upload the videos you choose to publish to your own YouTube channel. You connect your channel yourself, and we upload only when you ask us to.
When you connect a channel we ask Google for two permissions:
- Upload videos (youtube.upload) — to upload the video you picked to your channel.
- View your YouTube account (youtube.readonly) — to show which channel is connected.
We store your channel's id, title and thumbnail, and a refresh token that lets us upload on your behalf, encrypted at rest (AES-256-GCM). We do not read or keep anything else from your Google or YouTube account. We do not sell or share your YouTube data, and we do not use it for advertising.
You can revoke our access at any time: choose Disconnect next to the channel in Synthesys Publishing, which also revokes our access at Google, or remove Synthesys in your Google security settings at https://security.google.com/settings/security/permissions. When you disconnect we delete the stored token and channel details.
Google’s use of your data is described in the Google Privacy Policy. Synthesys’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
14. International transfers
Some of the providers above process data outside the country you live in. Where personal data leaves the UK or the European Economic Area we rely on a lawful transfer mechanism.
15. CCPA privacy rights (Do Not Sell My Personal Information)
Under the CCPA, among other rights, California consumers have the right to:
- Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
- Request that a business delete any personal data about the consumer that a business has collected.
- Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
16. GDPR data protection rights
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
- The right to access — You have the right to request copies of your personal data. We may charge you a small fee for this service.
- The right to rectification — You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
- The right to erasure — You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing — You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing — You have the right to object to our processing of your personal data, under certain conditions.
- The right to data portability — You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
17. Exercising your rights and contact
To access, correct, export or erase your data, to withdraw consent for your face or voice data, or to delete your account, email support@synthesys.io from the address on your account. We will confirm by email. Deleting a twin, voice clone, project or file inside the app removes it from your account and deletes its stored files; provider-side and backup copies are removed as part of account deletion or on request.
If you are not satisfied with how we handle a request, you have the right to complain to your data protection authority.
18. Children's information and age limits
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Synthesys does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
Creating a digital twin or voice clone is limited to users who are 18 or older, and no twin or clone may be created of a person under 18. If we learn that face or voice data of a minor has been uploaded we will delete it.
19. Who we are
Nooveau Media Ltd — 111 Watling Gate 1, 297-303 Edgware Road, London, NW9 6NB.
Contact: support@synthesys.io.