Privacy policy

Your personal data is controlled by the administrator of the idclone.com service. You can reach the administrator about anything in this policy at support@idclone.com.

• Account data: your email address, a hash of your password, your plan, billing period and account settings.
• Face and voice recordings: the 2 minute training video, the 60 second voice sample, the live selfie check and the spoken consent recording.
• Clone models: the video clone and voice clone built from your recordings.
• Content you create: scripts, translations, pronunciation entries, brand kit files, templates and the videos and audio you render.
• Team data: names and emails of teammates you invite, their roles, approvals and the audit log of actions in the workspace.
• Billing data: plan, invoices and payment status. Card details are handled by our payment operator and never stored on our servers.
• Technical data: IP address, browser and device type, pages visited on idclone.com and the referring page or campaign tags when you sign up.
• Messages: emails you send to support@idclone.com and our replies.

Your training video, voice sample, live check and consent recording contain biometric identifiers (your face geometry and voiceprint). We collect them only after you give explicit consent on camera by reading the consent statement, and we use them for three purposes only: to confirm that the person consenting is the person in the training footage, to build your clone, and to run your clone when you render videos or audio.

Your recordings and clone models are never used to train shared models, never made available to other accounts, and never sold, leased or traded. A teammate's recordings belong to that teammate's clone and are collected through their own invite and their own consent.

When you delete a clone, its model files and training recordings are deleted from our active systems within 30 days and from backups within the following 30 days. Recordings for a clone that is never built, for example because the live check did not pass, are deleted within 30 days. In any case biometric data is not kept longer than three years after your last interaction with the service. The consent record is kept as long as any video made with that clone may be in circulation under your account, and at most three years after the clone is deleted, to show that the clone was made with consent.

• To provide the service you subscribed to: build and run your clone, render videos and audio, translate scripts and deliver files.
• To verify consent and prevent misuse: the live check, consent records, provenance metadata and review of misuse reports.
• To bill your subscription, send invoices and keep accounting records required by law.
• To send service emails: sign up codes, security notices, billing receipts and replies to your messages.
• To keep the service secure and working: logs, rate limits and investigation of abuse.
• To improve the website based on aggregated, non identifying usage information.

We do not use your data for advertising and we do not sell or share personal data for cross context behavioral advertising.

We share data only with service providers that process it on our instructions and under written agreements, and only to the extent needed to provide the service:

• a hosting provider that runs our servers and stores your files,
• a payment operator that processes subscription payments,
• an email delivery provider that sends account and billing emails,
• AI model providers based in the USA that process scripts, audio and video to render your outputs, without the right to use your data to train their own models.

We also disclose data when the law requires it, for example in response to a valid court order, and when it is needed to protect people from fraud or misuse of their likeness.

idclone.com uses only cookies that are essential for the site to work: a session cookie that keeps you signed in, a security token that protects forms, and a cookie that remembers settings you choose. There are no advertising pixels and no third party tracking cookies, which is why the site shows no cookie banner. Visit statistics are counted without cookies.

• Account data: while your account is active and up to 90 days after it is closed.
• Clone models and recordings: until you delete the clone or close your account, then as described in the biometric section above.
• Scripts and rendered files: until you delete them or close your account.
• Invoices and billing records: for the period required by tax and accounting law.
• Technical logs: up to 90 days, longer only when needed to investigate abuse.
• Support messages: up to two years after the conversation ends.

Data travels over encrypted connections and recordings and clone models are encrypted at rest. Access is limited to the people who need it to run the service, protected by strong authentication and logged. Clones are isolated per account, so a clone can be selected only inside the workspace it was recorded for. Business and Enterprise workspaces keep an audit log of actions, and Enterprise supports SSO (SAML) and SCIM. If a breach affecting your personal data occurs, we notify you and the authorities as the law requires.

You can ask to access your personal data, receive a copy of it, correct it or delete it, and you can delete a clone yourself at any time in your account. You can withdraw consent to the use of your biometric data, which deletes the clone built from it. Write to support@idclone.com from the email address of your account and we answer within 30 days.

Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect, use and disclose, to delete it, to correct it, and to limit the use of sensitive personal information, which includes your biometric data. We use sensitive personal information only to provide the service you asked for. We do not sell or share personal information and we do not discriminate against you for exercising your rights. You can use an authorized agent, and we verify requests by confirming control of the account email.

Residents of Illinois, Texas, Washington and other states with biometric privacy laws have specific protections. We collect biometric identifiers only with written consent given in the consent step, we do not sell, lease, trade or otherwise profit from them, we disclose them only to service providers needed to render your outputs, and we destroy them on the schedule in this policy. Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with consumer privacy laws can exercise access, correction, deletion and portability rights the same way, and can appeal a decision by replying to our answer.

IdClone is a business service for adults. We do not knowingly collect data from anyone under 18, and an account or clone found to belong to a minor is deleted.

When we change this policy, we update the date at the top and tell account owners about material changes by email before they take effect.

Questions and requests about privacy go to the administrator of the idclone.com service at support@idclone.com. See also the terms of service and the acceptable use policy.