Biometric Data Notice

PersonaForge will collect the following biometric data:

We also store the raw source files you upload — your photos and voice recordings — from which these biometric identifiers are derived.

This data will be used solely to generate your AI persona's avatar appearance and cloned voice. We do not use your biometric data to identify you across services, to build advertising profiles, or to train our own or any third party's models, and we never sell, lease, or trade it.

To provide the service we share your biometric data with carefully selected service providers ("subprocessors") who process it only on our instructions, under a Data Processing Agreement, and never to train their own models:

All subprocessors are located in the United States. The categories we use are listed in our Privacy Policy, and you can ask us for the identity of the specific providers at legal@persona-forge.ai. Except where a valid warrant, a subpoena issued by a court of competent jurisdiction, or a law requires disclosure, we will notify you and obtain your renewed consent before disclosing your biometric data to any new recipient.

Your raw biometric source files (photos, audio), stored with our cloud hosting and object-storage providers, and your voiceprint held by our voice-cloning provider are retained while your persona is active. They are permanently destroyed at the FIRST of these to occur: (1) you revoke the corresponding biometric consent; (2) your persona or account is deleted; or (3) 3 years pass since your last interaction with the persona (740 ILCS 14/15(a)). Some of our service providers may keep copies of data they process for us under their own terms. Where a provider may still hold a copy of your biometric data after a destruction trigger, we ask that provider to delete it, but we cannot guarantee that the provider completes the deletion within the timeframes in this notice. For each consent, we keep a consent record for six (6) years after the biometric data it covers is destroyed (longer only if a legal obligation requires it), so we can show that consent was lawfully obtained. The record shows the account and persona the consent was given for, when it was given, what it covered, which version of this notice was shown, how it was given, and when and how the data was destroyed. It is only a record of the consent: it never contains your biometric data (your photos, recordings, facial geometry or voiceprint), which is destroyed as described in this notice.

When a destruction trigger occurs, we permanently destroy the raw files stored with our cloud hosting and object-storage providers and delete the voiceprint from our voice-cloning provider, using secure deletion methods. Erasure triggered by revoking your consent begins without undue delay (target within 72 hours) and completes no later than 30 days. When you delete a persona you can restore it for 7 days, and when you delete your account you can cancel for 14 days; destruction triggered by deletion or by the 3-year inactivity limit still completes within 30 days of the trigger unless a legal obligation requires us to preserve the data. We release biometric data to law enforcement only under a valid warrant or a subpoena issued by a court of competent jurisdiction, or when a law requires us to report it. Encrypted backups may keep copies until they expire on their regular schedule.

You may revoke any biometric consent at any time, independently for each type (voice or face). Revoking a consent disables that capability and triggers erasure of that biometric type — including the raw source files stored with our cloud hosting and object-storage providers, the voiceprint held by our voice-cloning provider, and the source recordings or photos — without undue delay. Your persona is retained; the revoked capability stays disabled unless you consent again. You may also request access to or a copy of your data, ask us to delete it, or delete your persona or account entirely.