Privacy Policy
Last updated: September 22, 2026
This Privacy Policy explains how CarnalVeil ("CarnalVeil", "we", "us", or "our") collects, uses, stores, and protects information when you use our AI avatar and video generation service (the “Service”). Because of the intimate nature of the Service, privacy is central to how we operate. By using the Service you agree to the practices described here.
1. Who Can Use CarnalVeil
The Service is strictly for adults aged 18 or older (or the age of majority in your jurisdiction, whichever is higher). We do not knowingly collect information from anyone under 18. If we learn that we have collected data from a minor, we will delete it immediately.
2. Information We Collect
We collect only what is needed to operate the Service:
- Account information: your name, email address, and a securely hashed password.
- Reference photos: the images you upload to create AI avatars of yourself or of individuals who have given you their explicit consent.
- Generation metadata: non-content details such as the length of a video, credits used, timestamps, and job status. We do not retain the generated video content after you download it.
- Payment information: processed by our payment provider (Stripe). We never see or store your full card details — only a customer reference and subscription status.
- Account linking data: the groups, partners, and agency relationships you create or join.
- Technical data: basic log data (such as IP address and device type) used for security and fraud prevention.
3. Reference Photos and Likeness Data
Reference photos are sensitive. They are stored in encrypted, access-controlled private storage and are only accessible to your account and any partner or group members you explicitly grant access to. We use them solely to generate your requested AI content. We do not use your reference photos to train public or shared AI models, and we do not sell or share them with advertisers. You may delete any avatar and its underlying reference photos at any time from your dashboard, and deletion is permanent.
4. Generated Content and Auto-Deletion
Generated videos are held only long enough for you to download them. Once a download is confirmed, the file is automatically and permanently deleted from our servers. We do not keep copies, backups, or archives of your generated content. What you do with a downloaded file — including uploading it to third-party platforms — is entirely under your control and responsibility.
5. How We Use Your Information
- To create, operate, and secure your account.
- To generate the AI avatars and videos you request.
- To process subscriptions, credits, and pay-per-generation charges.
- To enforce our Terms, prevent abuse, and comply with legal obligations.
- To provide support and respond to your requests.
6. Sharing With Third Parties
We share data only with service providers that make the Service possible, and only as needed:
- Payment processing: Stripe, for subscriptions and purchases.
- AI compute: the generation infrastructure that renders your content, which processes reference data transiently and does not retain it.
- Legal compliance: authorities, where we are legally required to respond to valid requests.
We never sell your personal data or intimate content to anyone.
7. Data Retention
Account data is retained while your account is active. Reference photos are retained until you delete the associated avatar or your account. Generated content is deleted automatically after download. When you delete your account, we permanently remove your personal data and reference photos, except limited records we must keep for legal, tax, or fraud-prevention purposes.
8. Your Rights
Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these rights directly from your dashboard, or by contacting us. We will not discriminate against you for exercising your rights.
9. Security
We use encryption in transit and at rest, hashed passwords, access controls, and private storage for sensitive files. No system is perfectly secure, but we work to protect your data with industry-standard safeguards and to minimize what we store in the first place.
10. Cookies
We use essential cookies to keep you signed in and to keep the Service secure. We do not use third-party advertising or tracking cookies.
11. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will notify you through the Service or by email. Continued use after changes take effect constitutes acceptance of the updated Policy.
12. Contact
Questions about this Policy or your data can be sent to [email protected].