Introduction

LivePersona ("we", "us", or "our") provides an AI avatar streaming platform that lets you create a realistic animated avatar from a single photo and stream it to platforms like TikTok via an OBS virtual camera. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using LivePersona, you agree to the practices described below.

Last updated: [EFFECTIVE_DATE]

Information We Collect

To provide our service, we collect the following categories of information:

Account information: the email address you use to sign in via our magic-link authentication, and the timestamp your account was created.

Uploaded photos: the image you upload to generate your avatar. The photo is used to produce the avatar animation and is stored in our Cloudflare R2 storage alongside the generated avatar asset.

Generated avatar assets: the avatar videos we produce for you via Replicate, plus any customization settings you choose (style, skin tone, background, and overlay effect).

Billing data: subscription plan and status, processed through Stripe and Polsia's billing flow. We do not store full payment card numbers; those are handled by Stripe.

Streaming metadata: stream keys, stream lifecycle timestamps (idle, live, ended), and any platform tokens (such as a TikTok token) you connect to enable external streaming.

What the waitlist collects

When you join the waitlist, we collect the email address and the short use-case sentence you submit on /waitlist, plus the referring URL — captured from the form's referrer or referer field, or from the browser's Referer header when those fields are absent (alongside any utm_source / utm_medium / utm_campaign values you arrived with) — so we can attribute acquisition sources and trace cross-page navigation. Waitlist data is stored in the same managed Postgres database as the rest of the app; we record signed_at and unsubscribed_at timestamps on each row, and the unsubscribe link at the bottom of every waitlist email flips unsubscribed_at without deleting the row. Retention for waitlist data matches the "Data Retention" section below.

On-device biometric features (in development)

LivePersona is building an on-device pipeline that processes facial geometry locally before any biometric identifier leaves the device. Until that pipeline ships, the current service does not collect, derive, or store biometric data of any kind. When it does, it will require explicit per-state statutory consent before a biometric identifier is derived from your photo — previewing a gate that already ships in our codebase (lib/biometricConsent.js): Illinois (BIPA, 740 ILCS 14/), Texas (CUBI, Tex. Bus. & Com. Code §503.001), and Washington (My Health My Data Act, RCW 19.373) require a typed written-consent modal, while all other states see a California-style disclosure-only modal (CCPA/CPRA). Users in IL, TX, or WA must accept the consent copy before biometric derivation can proceed; declining blocks avatar generation. The consent text version is bound to the published legal copy — currently v1-2026-07-16-DRAFT — and will bump to a counsel-approved version before any biometric data is collected.

How We Use Information

We use the information we collect to: generate your AI avatar via Replicate from the photo you upload; store your photos and avatar assets in Cloudflare R2 so you can access them across sessions; authenticate you and maintain your account; process subscription payments and manage your plan tier; provide streaming helper tools (OBS virtual camera integration, scheduled streams, clip library) and support them across your sessions; and improve the safety, performance, and reliability of the service.

Third-Party Services

To deliver LivePersona we rely on the following subprocessors:

Replicate — processes your uploaded photo to generate the AI avatar video. The photo is transferred to Replicate only for the duration of generation.

Cloudflare R2 — stores your original photo and the resulting avatar asset so they can be re-rendered and served back to you.

Polsia Analytics — records anonymized page-view beacons (a randomly-generated visitor id stored in your browser's localStorage) to help us understand aggregate usage of the service.

TikTok (and similar live platforms) — when you opt to stream to those platforms, we hold the credentials you provide and forward stream metadata through OBS. Your use of those platforms is also governed by their own terms and privacy policies.

Data Retention

We keep your account information and avatar assets for as long as your account is active. If you delete your account or request deletion, we will delete your uploaded photos, generated avatar assets, and account record within 30 days, except where retention is required for legitimate business or legal purposes (for example, completed billing records).

Your Rights & Deletion

You can request access to, correction of, or deletion of your personal information at any time. To exercise these rights, contact us at privacy@livepersona.app from the email address associated with your account. We will respond within 30 days.

Cookies

We set a small number of cookies to operate the service: a user_email cookie that keeps you signed in across pages; an optional referral_code cookie (set when you arrive at LivePersona via a referral link, expiring after seven days) so we can credit the referring user; and standard session cookies used by Express. We do not use advertising cookies or third-party tracking cookies beyond the Polsia Analytics pixel described above.

Security

We protect your data with transport-layer encryption (HTTPS), access controls on our database and storage, and least-privilege credentials for our subprocessors. No method of transmission or storage is 100% secure, but we work to keep your information protected against unauthorized access, alteration, or destruction.

Children's Privacy

LivePersona is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at privacy@livepersona.app and we will delete the account.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide additional notice (such as an in-app banner or email) before the changes take effect.

Contact

If you have any questions about this Privacy Policy or our data practices, contact us at privacy@livepersona.app.

Mailing address: [MAILING_ADDRESS]

Operated by: [COMPANY_LEGAL_ENTITY]