Privacy Policy

This Privacy Policy describes how PersonAizer ("we", "us") collects, uses, and shares information when you use our web platform, mobile and kiosk applications, and related services (collectively, the "Service").

Information We Collect

Account information. When you create an account, we collect your email address, name, and authentication identifiers (for example, a Google account ID if you sign in with Google).

Microphone audio. Our interactive persona experiences capture audio from your device microphone in order to detect speech, identify speakers, and generate responses. Audio is streamed to our speech-to-text provider, transcribed, and then discarded — we do not persist raw audio.

Camera and images. Certain features may use your device camera — for example, to detect that a user is present in front of a kiosk, to enable video-based interactions, or to capture a photo you choose to share with a persona. The camera is only activated after you grant the relevant operating system permission, and you can revoke that permission at any time in your device settings. Camera frames are processed in real time by our computer-vision provider and are not retained after the session ends.

Conversation content. Transcribed speech and text you send to a persona are processed by our AI systems to generate replies. We may retain conversation transcripts in aggregated or anonymized form to improve the Service.

Avatar and persona data. If you create or customize an avatar, we store the configuration you provide (appearance, voice, persona description).

Device and usage data. We collect technical information such as device model, operating system, application version, IP address, and interaction events (for example, session start/end times, feature usage). This data is used for analytics, security, and troubleshooting.

How We Use Your Information

We use the information we collect to: (a) operate, maintain, and improve the Service; (b) generate AI persona responses based on your speech or text input; (c) authenticate you and secure your account; (d) communicate with you about your account, updates, and support; (e) detect, prevent, and address fraud, abuse, or technical issues; and (f) comply with legal obligations.

AI Processing

The PersonAizer Service is powered by large language models, speech models, and computer-vision models provided by Microsoft Azure (Azure OpenAI, Azure Speech, Azure Cognitive Search, Azure Vision) and Google (Vertex AI / Gemini, Google Cloud Speech). These services are configured in their enterprise tiers, which contractually do not use your conversation content to train AI models. We do not sell your conversation data.

Third-Party Services

We use third-party services to deliver the Service. AI processing: Microsoft Azure (Azure OpenAI, Azure Speech, Azure Cognitive Search, Azure Vision) and Google (Vertex AI / Gemini, Google Cloud Speech), primarily in EU regions. Web search and AI re-ranking: Brave Search and Cohere (United States). Stock images: Freepik (European Union). Authentication: Google (for "Sign in with Google"). Billing: Flitt, a payment product of TBC Bank (Georgia). Infrastructure: Microsoft Azure (Sweden Central — EEA). These providers process data on our behalf under their own privacy policies; we maintain data processing agreements with each where applicable.

Data Sharing

We do not sell your personal information. We share data only with service providers acting on our behalf, with your explicit consent, when required by law or legal process, or in connection with a corporate transaction (such as a merger or acquisition), in which case affected users will be notified.

Data Retention

We retain account information for as long as your account is active. Audio captured during persona interactions is processed transiently and is not stored after the session ends, unless you have enabled an explicit recording feature. Conversation transcripts, where retained, are kept for the period necessary to operate and improve the Service. You may request deletion of your data at any time (see "Your Rights").

Data Security

We implement administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is fully secure, however, and we cannot guarantee absolute security.

Cookies

We use a single HTTP-only cookie that stores an anonymous identifier for end users of public AI personas. This cookie is strictly necessary for rate-limiting and abuse-prevention purposes and expires after approximately 30 days. We do not use cookies for advertising, behavioral tracking, or cross-site profiling.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete the personal information we hold about you, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at the address below. We will respond within the time required by applicable law.

Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

International Transfers

Our primary storage and processing infrastructure is located in the European Economic Area (Sweden Central). A limited subset of processing operations involve service providers outside the EEA — specifically web search (Brave, United States), AI re-ranking (Cohere, United States), and Google authentication (where applicable, United States). Where required, we rely on Standard Contractual Clauses or equivalent safeguards for these transfers. Payment processing (Flitt, a TBC Bank product) operates in Georgia.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date below and, where appropriate, provide additional notice. Your continued use of the Service after a change becomes effective constitutes acceptance of the revised policy.

Contact

For privacy-related inquiries, including requests to access or delete your data, please contact us at privacy@personaizer.com.