Autoplay
Last updated: July 6, 2026
Account data: your email address and profile details, via Firebase Authentication. Content you create: scripts, prompts, reference images, generated images and videos, and project data, stored in Google Cloud (Firestore and Cloud Storage). Voice data: voice samples you upload or record, and the private voice models cloned from them — voice recordings can be biometric-adjacent data, so we treat them with extra care (see section 3). Usage data: generation counts and job status, used to operate limits and recover interrupted renders.
We use your data to run the studio: authenticate you, store your projects, fulfil the generations you request, recover paid renders after interruptions, enforce per-account limits, and provide support. We do not sell your personal data, and we do not use your content to train our own models.
Voice samples are uploaded only when you choose to give a character a voice. They are stored in your account's storage area and sent to our voice providers (Fish Audio, Kling AI) solely to create a private clone and synthesize the dialogue you direct. Clones are marked private, scoped to your account, and never published or shared with other users. Deleting a voice model in the studio's voice manager deletes it from our voice provider; removing a voice from a character unlinks it without deleting the model, and remaining provider-side clone copies are purged on request.
Infrastructure: Google Firebase / Google Cloud (auth, database, file storage, functions). Generation providers, which receive the prompts and media needed to fulfil your requests: Google (Gemini/Veo), Kling AI, MUAPI, Fish Audio, sync.so, HeyGen, ElevenLabs (audio transcription for quality checks), OpenAI, and Anthropic. Payments (where offered): Stripe — we never see your full card details. Each processor handles data under its own privacy terms.
Your projects and media stay in your account until you delete them. Deleting a project removes it from your workspace immediately; the underlying media files and any provider-side copies are purged on request or on periodic cleanup (typically within 30 days). To request full account deletion — including all stored media and voice models — contact us at the address below.
Access to your data is gated by Firebase Authentication; paid endpoints require a verified sign-in token; voice models are ownership-checked server-side; and media URLs served from storage are access-scoped. No system is perfectly secure — report suspected issues to the contact below and we will investigate promptly.
You can access, export, correct, or delete your data by using the studio's own controls or by emailing tyler.murray@autoorder.io. Depending on where you live, you may have additional statutory rights (GDPR, CCPA, and similar); we honor verified requests under those laws. Material changes to this policy will be reflected in the date above.