Privacy Policy
Table of Contents
01 Controller, DPO & EU Representative
02 Introduction
Welcome to Avoo AI: Animate & Stylize. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and the ePrivacy rules. This policy explains what personal data we process, why and how we process it, and the rights available to you.
03 Data We Collect
3.1 Account Information
Email address, username, profile information you choose to provide, account preferences and settings.
3.2 Photos and Media
Original photos and images you upload, generated images and videos created through our AI models, and metadata associated with your media files.
3.3 Usage Data
App usage statistics and analytics, device information (device type, operating system, app version), IP address and general location information, features used, error logs and performance data.
3.4 Payment Information
Payment method details (processed by third-party processors), transaction history, billing address.
04 Purposes & Legal Bases
We process personal data only for the purposes listed below and rely on the corresponding legal bases under GDPR Art. 6.
| Data Category | Purpose | Legal Basis | Necessity |
|---|---|---|---|
| Account Information | Create and manage your account; communicate about service updates. | Contract (Art. 6(1)(b)); Legitimate Interest for service communications (Art. 6(1)(f)). | Required to provide the service. |
| Photos & Media | Provide AI image/video transformations; improve model performance where opted-in. | Consent (Art. 6(1)(a)); Contract for core processing requested by you (Art. 6(1)(b)). | Uploads are voluntary; processing is necessary to deliver requested features. |
| Usage Data | Analytics, performance, fraud prevention, and security monitoring. | Legitimate Interest (Art. 6(1)(f)). | Not strictly required, but helps maintain and secure the service. |
| Payment Data | Process subscriptions and comply with tax/accounting obligations. | Contract (Art. 6(1)(b)); Legal Obligation (Art. 6(1)(c)). | Required for Pro subscriptions and legal compliance. |
| Marketing Communications | Send optional newsletters, offers, and promotions. | Consent (Art. 6(1)(a)); Right to withdraw at any time. | Not required; fully optional. |
05 Cookies & Tracking (ePrivacy)
We use cookies and similar technologies. We will seek your consent before setting any non-essential cookies. Essential cookies are necessary to provide the service and are set without consent.
- You can manage preferences at any time via our Cookie Settings (link in the app/website footer).
- Analytics/advertising cookies are disabled until you opt in.
06 Processors & Third-Party Sharing
We share data with trusted processors strictly under written agreements (GDPR Art. 28) and only as necessary:
- Cloud Hosting/Storage: To run our infrastructure and store data.
- Analytics Providers: Usage metrics to improve services.
- Payment Processors: To handle subscription payments.
- AI Infrastructure Providers: To process images/videos.
We may disclose data if required by law or to protect rights and safety. In business transfers (e.g., merger/acquisition), data may be transferred in compliance with GDPR.
07 International Data Transfers
If personal data is transferred outside the EU/EEA, we implement appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs), and conduct transfer impact assessments where required. Copies of relevant safeguards are available upon request.
08 Data Retention
We retain data only as long as necessary for the purposes collected and to comply with legal obligations.
| Data Category | Retention Period | Deletion Method |
|---|---|---|
| Account Information | Until account deletion + up to 30 days for backup purges. | Deletion and anonymization from active systems and backups. |
| Photos & Generated Media | Deleted after processing unless you choose to save them; saved items remain until you delete them. | Permanent deletion from storage and caches. |
| Usage Data | Up to 24 months. | Aggregation/anonymization. |
| Payment Data | As required by law (typically 7 years). | Secure deletion in coordination with payment processors. |
09 Your Rights (EU/EEA)
You have the right to access, rectify, erase, restrict processing, object, and data portability, as well as to withdraw consent at any time without affecting prior lawful processing.
10 Security Measures
- Encryption in transit and at rest.
- Access controls and authentication.
- Regular security audits and vulnerability management.
- Secure cloud infrastructure and logging.
11 Children's Privacy
Our services are not intended for children under 16 in the EU/EEA (and under 13 in other jurisdictions where permitted). We do not knowingly collect data from such children. If we become aware of such collection, we will delete the data promptly.
12 Complaints
You have the right to lodge a complaint with your local data protection authority in the EU/EEA. We encourage you to contact us first so we can address your concerns quickly.
13 Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via in-app notice and/or email. The latest version will always be available on our website.