Privacy Policy
Last updated: April 2026
1. Who We Are
Double You is operated by Beltech Corp Holdings ("we," "us"). This policy describes how we collect, use, store, and protect your personal information.
2. Information We Collect
2.1 Account Information
- Email address (required for account creation)
- Name (optional)
- Authentication data from Google or Facebook if you use social login
2.2 Content You Provide
- Photos: Reference images you upload for character creation
- Voice recordings: Audio samples for voice cloning
- Writing samples: Text you provide for style training
- Brand assets: Product info, CTAs, links you add
2.3 Generated Content
- Images, videos, scripts, and voice recordings generated by the Service
- Publication history (what you published and where)
2.4 Usage Data
- Generation history (timestamps, models used, credit usage)
- IP address and browser information (for security and rate limiting)
- Pages visited and features used
2.5 Payment Information
Payment processing is handled by Stripe. We do not store credit card numbers. We store Stripe customer IDs and subscription IDs to manage your billing.
3. How We Use Your Information
- Service delivery: Your photos, voice, and writing samples are processed by AI systems (fal.ai, ElevenLabs, Anthropic Claude) solely to generate content for you
- Account management: Email for authentication, notifications, and support
- Billing: Subscription management and credit tracking
- Security: Rate limiting, fraud prevention, abuse detection
- Improvement: Aggregate, anonymized usage data to improve the Service
4. Third-Party Data Processors
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, auth, storage | Account data, content metadata |
| fal.ai | Image and video generation | Reference photos, text prompts |
| ElevenLabs | Voice cloning and TTS | Voice recordings, script text |
| Anthropic (Claude) | Script generation | Writing samples, topics |
| Stripe | Payment processing | Email, payment method (via Stripe) |
| Meta/TikTok/YouTube/LinkedIn | Content publishing | Generated content, captions (when you publish) |
5. Data Retention
- Active accounts: Data retained while your account is active
- Deleted accounts: Data deleted within 30 days of account deletion
- Generated content: Removed from our servers within 30 days of deletion (may persist on third-party platforms you published to)
- Billing records: Retained for 7 years for tax/legal compliance
6. Your Rights
All Users
- Access: Request a copy of all data we hold about you
- Deletion: Delete your account and all associated data
- Export: Download your content and data
- Correction: Update inaccurate personal information
EU/EEA Residents (GDPR)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
California Residents (CCPA)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we do not sell personal information)
- Right to non-discrimination
7. Data Security
- All data transmitted over HTTPS/TLS encryption
- Database access restricted via Row Level Security policies
- Social media tokens stored encrypted at rest
- Rate limiting to prevent brute force attacks
- Security headers on all responses (XSS, CSRF, clickjacking protection)
- Regular security reviews
8. Children's Privacy
The Service is not intended for users under 18. We do not knowingly collect data from minors. If we discover a minor's account, it will be terminated immediately.
9. International Transfers
Your data may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to such transfers.
10. Do Not Track
We do not track users across third-party websites. We do not respond to Do Not Track signals because we do not engage in cross-site tracking.
11. Changes to This Policy
We will notify you of material changes via email at least 30 days before they take effect.
12. Contact
Privacy inquiries: privacy@doubleyou.ai
Data protection requests: Submit via Settings > Account > "Request My Data" or email privacy@doubleyou.ai