Privacy notice

Who we are

Inmagine Lab Pte. Ltd., Singapore, is the controller of your personal data. That means we decide why and how it is used. In this notice, we means that company.

On our service, brands find real, verified people and license their face, and their voice where offered, or order ad videos we make with them. People also make short AI videos with their friends and the creators they love.

You can reach us through the Support page, which works even when you cannot sign in.

Who this notice covers

Everyone with an account, verified creators, people who act for a brand, visitors to a share page, a check page or a public page, people who report misuse or write to support, and people on the waitlist.

Our service is open worldwide, except a short list of countries where the law blocks us for now. We read your country from your network when you sign up and each time you start a video. To decide whether we are open for you, each person also has one country: the one you told us, else the country of your first passed ID check, else your ID’s issuing country, else the country of your newest consent or sign-in.

A video start checks everyone in it, the scene’s creators too. So a creator whose country is off cannot be made into new videos anywhere, and their scenes leave Home, Scenes, creator pages and search. If we cannot tell your country, or it is on the list, the service is off for you. You can still read this notice, contact support and join the waitlist.

What we collect

We collect what we need to run the service:

• Account: your email, your Google or Facebook sign-in if you use one, the display name you pick, your date of birth, your country, and your sign-in sessions. There are no passwords: we email you a 6-digit code.
• Consents: every consent you give or withdraw, with its version, time, country and controller.
• Your ID check, only when a rule asks for it: your verified legal name, the country that issued the ID, and a keyed fingerprint of the document number. The ID images stay with the ID-check provider and are dropped after the check. We never keep the document itself.
• Your videos and scenes: the scenes you start and who can join them, the emails you invite, the people you block, your videos with their fingerprints, licenses and receipts, each with its certificate, your share pages, and your answer to “Looks like you?”.
• A clip you upload to start a scene, and any prompt you type. We remove the clip’s sound.
• Linked social accounts, for verified creators: their follower counts, kept current, and daily checks that a campaign post is still up.
• Your rules, for verified creators: the kinds of brands and uses you allow, the story types you may be cast in, whether you may be shown in swimwear and beachwear, in lingerie and underwear, or smoking or drinking as a character, your countries, prices and exclusivity choices, and any outside exclusive deal you declare.
• Reports and support: what you send us, the email you give, and what we decided.
• Copyright notices and counter-notices, with the name, address, phone number, email and signature the law asks for. We forward a counter-notice, with its sender’s details, to the person who sent the notice, as US copyright law requires.
• Waitlist: your email and country.
• Records: audit events for every consent, license, pause, deletion and payout, and for every staff action, so we can prove what happened.

Your face

Face data is biometric data, the most sensitive thing we hold. Our biometric data notice explains it in full and is part of this notice. It covers:

• Your face capture: the photos from one head-turn in front of the camera. We remove hidden data from them, such as location and any motion clip.
• Your character card: your saved face’s close-up, front and 45° photos, with the few facts videos need: your height if you give it, glasses, your own head covering, and marks you ask us to keep. It is sent with every video you are in.
• The checks: a live face check that proves a real person is there, an age estimate, and whether each photo matches your live face.
• Face checks on your videos: each face in a finished video must match its person’s character card. A video made from your own clip gets a strict check that only you appear.
• Your ID-check selfie, if you had an ID check.
• The clip you upload to start a scene, which shows your face.

Verified creators who take brand hires

If you take brand hires, we also hold:

• Your casting card, taken in one live session: a head turn (with chin up and down), four expressions you can skip, a waist-up front and 45° view, a full-body turnaround, the head turn and body turn also as two short video clips, and, if you choose, close-ups of marks, the back of your head and a photo with glasses. With it, your height and casting facts, such as playing age, build, hair, eyes and languages.
• Uploaded photos: professional photos you add, such as headshots or a comp card. Each is matched to your live casting photos, stripped of hidden data, and labeled as uploaded by you, with its date.
• Your public portrait, if you approve one: one front photo from your casting session, shown publicly.
• Pictures for brands, if you agree: AI pictures of you in roles, made from your casting photos.
• Your voice, if you record it: the recordings from your voice sessions (Quick, about 3 minutes; Core, about 30 minutes; and optional Full, with emotion sets), their transcript and tags, the language, the consent sentence you read aloud, the results of the live checks on every line and of the face match and same-speaker check, and, for Core and Full, a video of the session with your face framed. We keep voice recordings and that video like face photos; the video is never given to a brand.

Money, free balance and referrals

• Paying for videos: what each payment paid for, its price, tax and total, how much free balance it used, and any refund.
• Your card: our payment provider holds your saved card in a payment form inside our page. We never see or keep your full card number. Saving a card runs a US$0 check that moves no money. The provider gives us a fingerprint of the card, never its number, so the welcome gift goes once per card and nobody can invite themselves.
• Free balance: each grant, such as the welcome gift, a referral reward or an extra grant to an invited talent, with its amount, its expiry and what it paid for.
• Referrals: your invite link, who joined through it, and whether each reward was given, held or refused. To stop self-invites, we compare the friend’s card, device and verified ID with yours.
• Verified creators: what you earned, your payouts, your bank details in your verified name, and any tax details a payout needs.
• Brands: payments by card, PayNow or bank transfer, invoices, refunds, and the hires, ads and campaigns they pay for.

Brands

• The brand’s legal name, registration number and address, which its invoices show, one company document, its category and countries, and the name of an authorized adult.
• If the person who holds a brand also has their own side on our service, we link the two, so a brand can never hire, license or run a campaign with its own holder’s face.
• Campaigns: the product, brief, claims, channels, countries, dates, budget, and the brand’s own words, logo and product photos.
• Hires: the order and its terms, the minutes a brand declares for each episode, each finished piece it uploads for checking, and any dispute and its evidence.
• Ads we make for a brand: the product card (a link or 2 to 4 product photos, the logo, the exact words the ad speaks and the claims it may make) and each version of it, the order, and the delivered videos with their fingerprints.

Fraud and security signals

We keep failed sign-ins and failed card attempts. We limit failed card attempts per account, device and network, to stop card testing. We compare cards, devices and verified IDs to stop repeat welcome gifts and self-invites. The network address you signed up from, with your card and ID fingerprints, flags a hire where the brand and the creator share them. The payment provider also screens payments for fraud and runs 3-D Secure where it applies.

Face data never goes into our logs or analytics.

Why we use it

We ask for each consent separately. None is pre-checked or bundled. We record each one with its version, time, country and controller.

• To run your account and sign you in.
• To check you are 18 or over, a real person, and using your own face.
• To make your videos from your character card, run safety checks on each one, and check each face matches its card.
• To issue licenses and receipts, each with its certificate, and keep proof of consent, so anyone can check a video was made with permission.
• To take payments, give free balance, pay verified creators and handle tax.
• To stop card testing, repeat welcome gifts and self-invites.
• Only if a verified creator says yes: to list them for hires, show their public portrait and role pictures, give a brand their casting card or voice pack under a hire, make the ads a brand orders with them, and show them in our own marketing.
• To keep countries that are off closed, for everyone in a video.
• To handle reports, takedowns, copyright notices, appeals, disputes, fraud and chargebacks.
• To send service emails, news if you asked for it, and to use analytics and ad cookies where you agreed.

Checks that run automatically

Some checks run on their own and act at once:

• Age: under 18 by date of birth is blocked for good. An age estimate that could be under 21 (under 25 to start a scene) asks for the ID check.
• Your own face: a second face, someone else’s face or a child stops the process.
• Video safety: every video is checked before delivery. One that fails is not delivered, and your payment comes back.
• Face match: a video whose faces do not match their character cards is rejected. Your payment comes back and you can try again free. Nothing is retried automatically.
• Uploaded clips, prompts, brand campaign videos, hire pieces and ads we make are checked automatically. An unclear upload, prompt or hire piece goes to a person; any other video that fails is rejected.
• A hire request or ad order inside a creator’s rules is accepted automatically. One that clashes with another brand’s exclusivity, or goes into a country that is off, is refused.
• A video start is refused when anyone in it has a country that is off or unknown.
• The welcome gift is refused for a card that already got it, and a referral reward when the friend’s card, device or verified ID matches the inviter’s. Anything unusual goes to a person.
• An account is suspended only in severe cases or when a chargeback arrives, and a person can lift it.

Who sees your data

Companies that work for us see your data only for their job, on our instructions: the video provider, the ID-check provider, the face-check and moderation provider, the automated video-check provider, cloud hosting and storage, email delivery, our payment provider, our bank for payouts, and analytics and ad companies after you agree.

The video provider deletes your photos after each job, with proof. The automated video-check provider keeps what it is sent for up to 55 days for abuse checks. No real face goes to a company that touches faces until it signs a data agreement that bans training and requires deletion with proof. The voice same-speaker check runs on our own server, so no company gets your voice for it.

Outside those companies, face photos go only to a brand under a hire, and only what the creator chose. A brand that orders ads we make gets the finished videos, never the photos.

Other people on the service see your videos, scenes and public page as you set them. A public page shows the display name you pick, never your real name. The public check page for a video shows nothing about the person who joined.

The hire catalog and a listed creator’s page show their public portrait, labeled a live capture with its date, their approved role pictures, labeled AI-made, their hire profile and prices, and their height and languages only if they choose. Brands also see how many photos the creator uploaded before paying. No other casting photo or fact is shown.

Ads we make show the creator’s face wherever the brand runs them, in its chosen countries and channels. A hire’s public check page shows the license terms and the brand’s name, but no face, no person’s name and no fee.

Authorities see data when the law requires it. Our legal, tax and insurance advisers see it under confidentiality. If our company is reorganized, merged or sold, we will tell you who the new controller is.

What a brand gets

• Under a hire: only the casting-card views the creator chose for brand deals, any photos the creator uploaded, their height and casting facts, and a voice pack if the brand bought one.
• The brand deletes the photos, with proof, within 10 business days after the hire ends, or within 12 months for a one-title license. It deletes a voice pack and any voice model at the end of the term.
• If a creator deletes an uploaded photo, a brand that already has it under a live hire keeps it until that hire ends, then deletes it with proof.
• For ads we make: the finished videos, with a ready caption naming the creator and saying it was made with AI. For the Philippines, also a document pack for the ad regulator: the license, a summary of the creator’s consent and the certificate.
• In a campaign, a brand may reuse a joiner’s video only if that joiner signed the campaign release.
• A brand never gets anyone’s face capture, selfie, ID data or face vectors.

Google, YouTube and Facebook

Signing in with Google or Facebook gives us your name, email and an account ID, to sign you in. Nothing else.

When a verified creator links YouTube, we read the channel’s follower counts. We use them only to show the badge and counts, to choose which public scenes Home and Browse feature, to let brands choose, and to check campaign posts. We never sell or share this data except as this notice says.

You can remove our access in your Google or Facebook settings at any time. YouTube’s Terms of Service and Google’s Privacy Policy also apply to YouTube data.

Other countries

Some of the companies that work for us, some of our staff, and brands that license a creator under a hire may be in other countries. Before your data goes to another country, we make sure it is protected there as the law requires. Face checks are processed in the United States.

What we never do

• We never sell your personal data.
• We never use your face in ads except where you allow it: a brand hire, an ad we make that you turned on, or our own marketing if you say yes.
• We never match your face against outside databases.
• We never put face data in logs or analytics.
• We never train an AI model on your face, and our providers must agree in writing not to either.
• We never keep face vectors, only photos, and never a voiceprint.
• A creator’s voice is made with AI only for one licensed project: by the brand that licensed it, under its voice-model rules, or by us for an ad we make for that brand, only where the creator gave their voice permission and the order includes it. Never an open voice library, and never anyone else’s voice.

How long we keep your face

You choose before your first video. Starting a scene always saves your face, since every join uses it.

• Use once: your photos are deleted within 24 hours of the video finishing, including copies held by our vendors.
• Saved face: valid for one year. You can delete it at any time. Your character card’s photos go with it.
• The selfie from your ID check stays while you use the service, so you do not retake it for each video. It is deleted after a year unused, or when you remove it or withdraw consent. A verified creator keeps theirs for their verification.
• A verified creator’s replaced face capture is kept until they leave. Their casting card is kept while they are a verified creator, and a replaced one until they leave.
• Uploaded photos: kept while you are a verified creator, or until you delete one. We keep our copy of a deleted one only while a hire that already got it runs.
• Public portrait: while you keep it approved. Withdrawing it, or deleting the face it came from, deletes its public copy, with proof.
• Pictures for brands: until you withdraw that permission or remove a picture. Then they are deleted, with proof.
• Voice recordings, transcripts and the voice-session video: until you withdraw the voice permission or leave. Then they are deleted, with proof. The same-speaker comparison is discarded at the end of the session.
• An unfinished face capture is deleted after 24 hours.
• A clip you upload to start a scene: the clip as you sent it is deleted once its checks pass. The cleaned clip is kept while the scene lives and 30 days after it ends, and deleted at once if you delete your face, close your account or withdraw the movement and performance permission. A clip waiting for staff is kept 72 hours; a clip whose scene never goes live is deleted after 7 days.

How long we keep other data

Deletion reaches our own storage, our providers and our backups, with proof, with two limits we told you about above: the automated video-check provider may keep a video up to 55 days for abuse checks, and a brand that licensed you keeps its copies under its license until they must be deleted. A deletion without proof stays open and alerts our team until it is done. If we ever restore a backup, we replay every deletion made since, so deleted faces never come back.

• Sign-in sessions last 30 days after you last used them, and 90 days at most.
• Your videos and share pages stay until you close your account.
• A scene’s video is deleted 30 days after the last started video finishes, or later while a takedown or dispute is open.
• Our copy of a brand’s hire piece is kept 30 days after the hire ends, or 30 days after we certify a one-title piece, unless a dispute is open.
• Evidence in a hire dispute: only what the dispute needs, until it is decided.
• ID document fingerprints are kept while your account is open, and 180 days after you close it. Then they are erased, unless the account was banned or fraud was found.
• Your data export file is kept 7 days.
• A signed-out reporter’s email is deleted 30 days after the decision, or once any counter-notice window closes, whichever is later.
• A waitlist email gets one message when your country opens. Then it is deleted, or after 12 months.
• Closing an account keeps your email, sign-in, name, date of birth, country, linked accounts and payout details only until nothing is owed to you. Then we delete them with proof.
• Consent, license, receipt, certificate and audit records, and video fingerprints, stay after the data itself is deleted, as proof. They hold no face data.
• Payment, invoice, payout and tax records are kept as long as the law requires.

Your choices

You can do most of this yourself, from My face and data and Settings:

• Pause your face: new videos and sales stop, your scenes are hidden, you are unlisted from hires, and no new brand deals start. One tap undoes it.
• Open your character card page to see your card, retake it live and edit its facts. A verified creator’s casting card, uploaded photos, portrait and voice are on the same page.
• Delete an uploaded photo: new hires never get it.
• Turn off ads we make: brands can no longer order ads with you. Ads already delivered run their license term.
• Withdraw your public portrait or your voice: your portrait comes off at once and you are unlisted, or your voice recordings are deleted and no new voice hires start. Hires already licensed run their term.
• Withdraw a consent, one at a time. It stops what has not happened yet and deletes that consent’s data. It never reaches videos already delivered.
• Delete your saved face. We warn you first, because your scenes end.
• Ask for a copy of your data. We deliver it within 30 days.
• Correct your details in Settings. Records of what happened, such as a consent, a receipt or an audit record, cannot be edited.
• Close your account. We prompt you to download your videos first. Joiners keep their own videos.
• Complain to us, through Contact support, or to your data protection authority at any time.

Our promises on your requests

We confirm a deletion within 72 hours, and reply to support messages within 2 business days. A dispute, a suspension or a ban never stops you from withdrawing a consent or deleting your data. A ban gets one appeal, within 30 days, decided by a person within 7 days.

Email

Service emails, such as a video is ready, a scene ended, a payout, or a security alert, need no opt-in. We send news only if you ticked the unticked box asking for it, and every one has an unsubscribe link.

Cookies and analytics

The sign-in cookie keeps you signed in and needs no choice. With your agreement only, we also use Google Analytics 4, Meta Pixel and TikTok Pixel, to see how people use our service and to measure our ads. Saying no is as easy as saying yes. You can change your choice any time with Cookie settings, in the footer of our public pages and in Settings. Cookies never carry face data. Our Cookie notice has the details.

Keeping it safe

Face photos and voice recordings are encrypted, in private storage of their own, and reached only through short-lived links for one purpose. Staff accounts are invite-only with two-factor sign-in, and every staff action logs who did it and why. Backups are encrypted, and restores are tested. Audit records can only be added to, never edited. We use no real personal data in development.

No system is perfectly safe. If a breach affects you, we tell the authority, and you when required, within the time the law sets.

Adults only

Our service is for adults only. Anyone under 18 is blocked for good. No identifiable child may appear in anything given to us, including a brand’s material. If you think a child’s data reached us, tell us through the Support page. The item is hidden at once, and the child’s data is deleted unless the law requires it kept or reported.

Changes to this notice

Each version has a number and a date, and we keep old versions. We tell you before a material change takes effect. A new purpose for your data needs your new consent.