Privacy Policy

Muzecast (“we”, “us”) operates muzecast.ai. This policy explains what we collect, why, who we share it with, and what you can ask us to do about it.

Operator: Muze Group. Contact: privacy@muzecast.ai

• Your email address. It is the whole of your account — we sign you in with a link rather than a password, so we never hold one.
• Photos and videos you upload to build an avatar, attach as a look, or flip.
• Voice recordings you upload, and the audio of any video you record in the app.
• Scripts and prompts you write, and the URLs of videos you ask us to analyse.
• API keys, if you choose to connect your own HeyGen or ElevenLabs account. These are encrypted before storage and are never shown back to you in full.

Everything the service makes for you: rendered videos, generated images, character boards, voice clones, and the record of what each run cost in credits.

Payments are handled by Stripe. We never see or store your card details — we keep only a Stripe customer reference, what you paid, and when.

This is the part that matters most, so it is stated plainly rather than buried.

• Voiceprints. When you clone a voice, a model of that voice is created at ElevenLabs. That is biometric data.
• Facial imagery. Photos and video frames used to build an avatar are uploaded to HeyGen, which derives a face model from them.

We collect these only to provide the feature you asked for. We do not use them to identify you, we do not sell them, and we do not share them with anyone except the providers listed in section 7 who perform the rendering.

You must have the right to the face and voice you upload.Your own, or someone who has given you written permission. This applies with particular force to Avatar Flip, where you supply someone else's video.

Retention. Biometric data is deleted when you delete the avatar or voice it belongs to, when you close your account, or three years after your last use of the service — whichever comes first.

• To render the videos, images and voices you ask for.
• To keep your projects so you can return to them.
• To charge credits accurately and show you what a run will cost.
• To sign you in, and to email you about your account.
• To find and fix faults, and to keep the service secure.

We do not train AI models on your content. Your photos, voice, scripts and videos are used to produce your results and nothing else. We do not build models, and we do not sell or license your content to anyone who does.

Rendering means sending parts of your content to the providers in section 7, who process it under their own terms. We choose providers that do not train on submitted data, but their terms govern what happens on their side — the links are on our sub-processor page.

Making a video means sending parts of it to the providers that render it. These are processors acting on our instructions, not partners we sell to.

If you connect your own HeyGen or ElevenLabs keys, that work runs in your accounts instead of ours, under those providers' own terms.

We may also disclose information where the law requires it, or to protect our rights or someone's safety. We do not sell personal information, and we do not share it for targeted advertising.

Projects, avatars, voices and generated media are visible only to the account that made them. Where a voice is cloned into our shared provider account, it is tagged to you and filtered out of everyone else's view.

We use a single cookie, which holds your signed-in session. No advertising cookies, no third-party trackers, no cross-site profiling. Clearing it signs you out.

Deleting an avatar removes its looks, voice and references with it. Deleting your account removes everything attached to it, including the voice clones held at our providers — not only our own records of them.

Deleting your account is self-serve. Settings → Delete account removes your avatars, looks, voices, videos and projects, and deletes any voice clones held at our providers. You do not have to ask us.

For anything else — a copy of what we hold, a correction, or to stop processing — email privacy@muzecast.ai and we will respond within 30 days.

In the EU and UK, our basis for processing is performing our contract with you, your consent for biometric data, and our legitimate interest in keeping the service working and secure. You may complain to your data protection authority.

In California, you have the rights to know, delete, correct and opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We will not discriminate against you for exercising a right.

In Illinois, Texas and Washington, our handling of voiceprints and facial data is covered in section 5. You consent to it when you create a voice or an avatar, and you can withdraw that consent by deleting them.

Traffic is encrypted in transit. Any API keys you give us are encrypted at rest. Access to production systems is limited to people who need it. No system is immune, and we will tell you promptly if a breach affects your data.

We are hosted in the United States, and the providers in section 7 process data there. If you are in the EU or UK, that means your information leaves your country. Each provider sets out its own transfer safeguards in its privacy policy, and we link to all nine on our sub-processor page.

Muzecast is not for anyone under 18. We do not knowingly collect information from children, and we will delete any we discover.

We will update the date at the top when this changes, and email you if the change is significant.