HeyGen privacy & data

HeyGen acts as a data processor when processing personal data on behalf of, and under the instructions of, our customers in connection with their use of the Services

When you create an account, we collect your name, email address and account password.

We may also collect other information associated with your account, such as your phone number, business/company name and position, mailing address and social media handles.

Depending on the plan that you subscribe to, we may collect payment information and transaction history.

Location information, such as approximate location based on IP address

clickstream data (including referring site, the types of content that you view or engage with, the features that you use, and other actions you take on the Services

Device information, such as device type, operating system, unique device identifier, and IP address.

Some of the features of the Services require us to process parts of faces or bodies within a video or photo, and this may include face imagery.

Providing and managing your Account and access to and use of our Services.

To train and enhance the models that power our products and services, including to make our avatar creation models more accurate.

Understanding the usage of our services, understanding trends and preferences, improving and repairing errors in the services

Enhancing the safety and security of our Services, such as conducting troubleshooting, data analysis, testing, evaluation and system reporting.

Sending you marketing communications, including news and offers on our products or services

We also use Tracking Technologies for advertising related purposes, including for remarketing and to deliver targeted ads to you

We only keep your personal information for as long as we need to provide our products and services as described in this Privacy Policy and/or for as long as we have your permission to keep it.

After you delete the information or the account, it is kept in the backups for the purpose of disaster recovery for 60 days and then automatically and permanently erased.

If we store statistics for your videos, we refresh or delete them at least every 30 days.

HeyGen complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF)

We use standard contractual clauses (SCCs) to ensure adequate protection for personal data transferred outside the EU, UK, and Switzerland.

The current list of sub-processors can be found here .

We enter into Data Protection Agreements with all of our sub-processors.

If you submit a request to delete your information, we strive to take steps to delete that information within 72 hours of your request, unless we are required or permitted to retain such information under applicable law.

Access. You may have the right to request access to the information we hold about you, how we use it, and who we share it with.

Delete. You may have the right to request that we delete information we hold about you.

Correct. You may have the right to request that we correct inaccurate information we maintain about you.

Opt out of targeted advertising. You may have a right to opt-out of the processing of your information for the purposes of targeted advertising.

Portability. You may have the right to receive a copy of personal information we hold about you and request that we transfer it to a third party.

Objection. You may have the right to object to our processing of personal information, including to object to (i.e., opt out of) your information being used to train our models

Withdrawal of consent. Where we rely on consent to process your personal information, you may have the right to withdraw this consent at any time.