Privacy Policy

Last updated: 9 October 2026 · AvatarAds by IA Manager

This English version is provided for convenience. In case of any discrepancy, the French version prevails.

1. Data collected

When you sign up, we collect:

• Your email address (for authentication via Supabase)
• Your first name (optional, entered when creating your account)
• Your subscription plan and your credit balance

We do not collect any banking data — payments are handled entirely by Whop.

2. Use of data

Your data is used exclusively to:

• Manage your access to the AvatarAds tool
• Track your credit quota
• Contact you if there is a problem with your account
• Measure the audience of the website and the app (you can refuse this, see section 5)

We neither sell nor share your data with third parties for advertising purposes.

Sign-ups coming from Instagram: if you arrive on AvatarAds through the link received in an Instagram direct message from @avataradss, an encrypted reference to that click is kept for 30 days in your browser (local storage, not a cookie); if you create an account or log in during that period, it links your account to the Instagram ID that wrote to us, solely to count how many people coming from Instagram sign up and then subscribe (internal statistics viewed as totals, never shared, deleted along with your account).

3. Hosting and security

Your data is stored on Supabase (secure, GDPR-compliant infrastructure hosted in Europe). Access is protected by row-level security rules (RLS) — only you can access your own data. Files created or sent via Claude (the AvatarAds connector) are stored in a private space and are only shared through temporary links.

4. Retention periods

• Photos and voice recordings sent for a generation via Claude (product photo, face photo, voice recording): used only for the requested generation. Those sent for video editing and Motion Control are deleted at the end of processing; the others remain in your private space until your account is deleted. You can ask for them to be deleted at any time at [email protected].
• Images, videos and audio generated via Claude: kept in your private space for as long as your account exists. The copy stored in your Library can be deleted at any time from the Library; to have the original deleted sooner, write to [email protected].
• Library: creations you do not mark as favourites are deleted after 30 days by the app, when you open the Library on the device that created them; otherwise, they are kept for as long as your account exists. Favourites are kept. You can delete a creation at any time from the Library.
• Your account data (profile, credits, Library, brand memory): kept for as long as your account exists, permanently deleted when you delete it.
• Audience measurement: kept by Microsoft for 13 months at most.

5. Cookies and trackers

Necessary for the service (no consent required): your login session and your preferences (theme, choice below) are kept in your browser’s local storage. When you open the checkout, it is displayed by Whop, which uses its own cookies needed for payment.

Audience measurement: Microsoft Clarity (Microsoft Corporation) records your browsing on the website and in the app in pseudonymised form (pages viewed, clicks, scrolling, session recordings) to help us improve AvatarAds. No identifier from your account is sent to it, and the content of input fields is masked in recordings. Without your consent, Clarity works without cookies for visitors located in the European Union, the United Kingdom and Switzerland; if you accept it below, it sets in particular the _clck (1 year) and _clsk (1 day) cookies, with no advertising cookie. Data may be processed in the United States. You can refuse it below at any time: Clarity is then no longer loaded, its cookies are deleted, and refusing changes nothing in how you use the service. Your choice is kept for 6 months on this device.

6. Your rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access to your data
• Right to rectification
• Right to erasure: in the app, My account → Delete my account. Deletion is immediate and permanent (files, Library, remaining credits, brand memory, Claude’s access to your account). An active subscription must be cancelled first.
• Right to data portability
• Cut Claude’s access to your account: in the app, Connect Claude → Disconnect Claude, effective immediately.
• Refuse audience measurement: section 5 above, at any time.

To exercise these rights: [email protected]

7. Third-party services

To produce the content you request, AvatarAds uses technical providers bound by confidentiality commitments: artificial intelligence model providers (generation of images, videos, voices and text, audio transcription), hosting, payment processing, sending the service’s emails and audience measurement (Microsoft Clarity, which you can refuse, see section 5). Only the data needed to carry out your request is sent to them. The detailed list of providers is available on request at [email protected].

Some of these providers are located outside the European Union, notably in the United States: the content needed for a generation (images, audio, request text) may be transferred there, solely to carry out the generation you requested. The result is then brought back and stored on our Supabase hosting.

Import from Google Drive (My brand → My assets): if you choose to import files from your Google Drive, a Google window asks you for the drive.file permission, which only gives access to the files you select yourself in Google’s picker — never to the rest of your Drive. These files (images, videos) are copied into your private AvatarAds space to be used in your edits, as if you had uploaded them yourself; they then follow the retention rules in section 4 (brand memory) and can be deleted from My assets. The Google permission is used in your browser for the duration of the import and then revoked immediately: it is neither stored nor sent to our servers. We do not read, modify or delete anything else in your Drive, and the data received from Google is used only for this import: it is not sold, not used for advertising purposes, and not used to train artificial intelligence models. AvatarAds’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can also remove access at any time from your Google account.

8. Contact

For any question about your data: [email protected]