Privacy Policy
How LipSync.org collects, uses and protects your data
2025/07/08
Introduction
Welcome to LipSync.org ("we", "our", "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, and how you can exercise your rights.
Scope
This Policy applies to all visitors, customers and end-users of LipSync.org, including our web app, APIs, and associated services (collectively, the "Service").
Data We Collect
| Category | Examples | Legal Basis (GDPR) |
|---|---|---|
| Account Data | Name, email address, password hash, profile photo | Contract (Art. 6-1-b) |
| Payment Data | Billing address, last 4 digits of card (via Stripe) | Contract / Legal Obligation |
| Content Data | Videos, audio tracks, subtitles you upload for AI processing | Contract |
| Usage Data | IP address, device type, browser, pages visited, clickstream, rendering logs | Legitimate Interests (service improvement & security) |
| Cookies & Similar | See our Cookie Policy | Consent / Legitimate Interests |
We do not knowingly collect data from children under 13 (or higher age as defined by local law).
How We Use Your Data
- Provide the Service – create accounts, process lip-sync jobs, deliver download links.
- Improve the Service – analyse usage patterns, train and evaluate AI models (in aggregate).
- Communicate – send transactional emails (job status, invoices, security alerts) and—with your consent—product updates or newsletters.
- Security & Abuse Prevention – monitor suspicious activity, prevent unauthorised access and protect intellectual property.
- Legal Compliance – comply with tax, accounting and other statutory obligations.
We do not sell or rent your personal data.
AI Model Training
User-uploaded media may be temporarily stored and processed on secure GPU infrastructure. Unless you opt-in to our "Improve the Model" programme, your raw media will not be used to train production AI models. Aggregated, anonymised metadata (e.g., video duration, language) may still be analysed for statistical purposes.
Data Retention
- Account Data – retained until you delete your account or request erasure.
- Uploaded Media – deleted automatically 30 days after processing unless you elect to store longer.
- Rendering Logs – retained 90 days for debugging.
- Payment Records – retained 7 years (legal requirement).
International Transfers
We host data on AWS and Vercel servers located in the EU and US. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses.
Your Rights
Depending on your jurisdiction, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Submit requests via privacy@lipsync.org. We will respond within 30 days.
Security Measures
We employ industry-standard safeguards including HTTPS, encryption at rest, role-based access controls, and continuous monitoring. No system is 100 % secure, but we strive to protect your data.
Third-Party Processors
Key sub-processors include:
- Vercel – hosting & edge network
- AWS (S3, EC2, SageMaker) – storage & GPU compute
- Stripe – payments
- Resend – transactional email
- OpenAI / Other LLM providers – optional transcription or translation features
We maintain Data Processing Agreements (DPAs) with all sub-processors and review their security posture regularly.
Changes to This Policy
We may update this Privacy Policy to reflect operational, legal or regulatory changes. The "Last Updated" date indicates when this Policy was last revised. If changes are material, we will provide at least 30 days’ notice via email or the Service.
Contact
Questions or concerns? Email privacy@lipsync.org or write to: LipSync.org, 123 AI Lane, London, UK.