Privacy Policy

Talking Avatar (talking-avatar.dev and app.talking-avatar.dev) is operated by AXONFLOW INNOVATIONS PRIVATE LIMITED, doing business as InterviewFlowAI ("we", "us"). We are the controller of the personal information described in this policy. You can reach us at support@interviewflowai.com.

Account information. When you create an account we collect your email address and, if you give it, your name. If you sign in with Google, we receive your name, email address and profile picture from Google (see section 4).

Sign-in information. To sign you in by email we send a one-time code to your address. We keep a record of sign-ins needed to secure your account.

Usage and billing information. For each avatar session: which avatar was used, start and end times, duration and cost, and the API key it ran on. We keep a history of credits added and spent, your auto top-up settings, and a reference to your saved payment method at our payment processor. API keys are stored only as one-way hashes.

Payment information. Payments are processed by our payment provider, Dodo Payments. Your card details go directly to them; we never see or store your full card number.

Content you send through the API. Your application sends us audio (your voice agent's speech) so that an avatar can speak it. We process this audio in real time to render the avatar's video and voice and stream them to your users. We do not store or record this audio or the resulting video.

The live demo on our website. If you try the "Try live demo" call, your microphone audio is sent to an AI speech service to understand you and generate the avatar's replies. We keep a transcript of the conversation (what you said and what the avatar said), the avatar used, the call's length and your approximate country, to improve the product. We do not record the audio. Your IP address is used only to apply the demo's usage limits and is not stored with transcripts.

Technical information. Like most websites, our hosting provider processes your IP address, browser and device information to deliver pages, keep the service secure and prevent abuse (for example, the security check shown at sign-up).

• To create and run your account, sign you in and keep it secure.
• To provide the service: authenticate API keys, render and stream avatars, and measure usage.
• To bill you: charge for usage, process top-ups and auto top-ups, and keep accounting records.
• To send service emails, such as sign-in codes, payment receipts and important changes to the service.
• To improve the product, including reviewing demo transcripts.
• To prevent fraud and abuse, and to comply with legal obligations.

If you choose "Continue with Google", we request only basic profile access: your name, email address and profile picture. We use this information only to create your Talking Avatar account, sign you in, and show your name and picture in the dashboard. We do not request access to your Gmail, Google Drive, contacts, calendar or any other Google data.

We do not sell information received from Google, use it for advertising, or share it with third parties except the service providers that host our sign-in and database (section 5), and only to provide the service. Humans do not read it except with your permission, for security or as required by law.

Talking Avatar's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Talking Avatar from your Google account at any time at myaccount.google.com/permissions, and ask us to delete your account and its data (section 8).

We do not sell your personal information. We share it only with service providers that help us run Talking Avatar, under contracts that limit their use of it to providing their service to us:

• Supabase: sign-in and our database.
• Cloudflare: website and dashboard hosting, real-time video and audio delivery, the sign-up security check, and logs.
• Dodo Payments: payment processing and saved payment methods.
• Microsoft Azure OpenAI: the speech and language service behind the website's live demo.
• Cloud computing providers: the servers that render avatars.
• Email delivery providers: to send sign-in codes and service emails.

We may also disclose information if required by law, to protect our rights or users, or as part of a merger or acquisition, in which case this policy will continue to apply.

Our website does not use advertising or analytics cookies. The dashboard keeps your sign-in session in your browser's local storage so that you stay signed in; signing out removes it. The sign-up security check may set cookies needed to tell people and bots apart.

• Account information: while your account is open, and deleted after you ask us to close it.
• Usage and billing records: as long as tax and accounting laws require.
• Demo transcripts: a short period in our logging provider (currently up to 7 days), unless we keep an anonymised example to improve the product.
• Audio and video sent through the API: not stored; processed in real time only.

Depending on where you live (including under the GDPR, the UK GDPR, India's Digital Personal Data Protection Act and US state laws such as the CCPA), you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To use any of these rights, email support@interviewflowai.com from the address on your account. We respond within the time the law requires, and we will not discriminate against you for using them.

You can delete API keys yourself in the dashboard at any time.

We protect information with encryption in transit, hashed API keys, access controls that keep the database reachable only from our servers, and limits on sign-in attempts. No system is perfectly secure, so please keep your API keys secret and tell us at support@interviewflowai.com if you think one has been exposed.

We and our service providers process information in several countries, including the United States, the European Union and India. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses.

Talking Avatar is a service for businesses and developers and is not intended for anyone under 18. We do not knowingly collect information from children.

Our open-source lip-sync SDK runs entirely in your users' browsers. When used on its own, without an API key, it sends no audio or personal information to us. The 3D demo on this site works the same way.

We may update this policy. We will change the date at the top, and tell account holders by email about significant changes before they take effect.

AXONFLOW INNOVATIONS PRIVATE LIMITED (doing business as InterviewFlowAI). Email: support@interviewflowai.com.