We hold a licence for a person's face and voice, so we hold some of the most sensitive material there is. This page says exactly what we keep, who else touches it, and how to make us stop.
Social Gravity AI, Inc. Last updated 2 August 2026. Version privacy-v1-2026-08-06.
The document never touches our storage. The check runs on Stripe Identity, and the key we hold is restricted so that it cannot read back document images, date of birth or ID number. What we receive is whether the check passed, and a reference to it.
What you record during onboarding: a voice sample, and a pack of five angles plus a short turnaround video. From those we derive templates used to match and to detect. They are held to generate content under licences you have signed, and for nothing else.
Your terms, the agreements you signed, the licences you hold, requests you answered, payments, and the hash-chained ledger entries behind every receipt.
Which pages you open, what you click, how far you read, and where you stopped. See Analytics, which is the part with the most detail because it is the part people most reasonably object to.
Everyone below is a processor acting on our instructions. There is nobody else.
| Processor | What they get | Why |
|---|---|---|
| Stripe Identity | Your document and selfie, directly from you | The identity check. We cannot read the document back. |
| Stripe Connect | Your name, email and bank details, directly from you | Paying you. Bank details never reach us. |
| Docuseal | Your name, email and signature | The signed agreement that is the consent of record. |
| Cartesia | Your voice sample and its clone | Generating speech under a licence. |
| Supabase | Everything above that we store | Our database, storage and functions. EU region. |
| Vercel | Requests to our website | Hosting. |
| Railway | Face, voice and watermark processing | Runs our own services. No third party sees the material. |
| PostHog | How you use the site, see below | Product analytics. EU cloud. |
| A timestamp authority | Hashes only, never content | Proving when a ledger entry existed. |
We use PostHog, on their EU cloud, to see how the product is actually used. It records page views, clicks, form interaction and scroll depth, and on some screens it records a replay of the session.
Session replay is off by default and switched on per screen, never the other way round. It is off entirely on the identity check, on the face and voice capture, on the public share page, on invite links, on password reset and on the sign-in return. Those are the screens that can show a government document, a live camera pointed at your face, or a credential in the address bar. All form inputs are masked everywhere, on every screen, including the ones that do record.
Before anything is sent, the address is rewritten: the parts of a link that identify a specific person or act as a key are replaced, and the rest of the query string is dropped.
If you are not signed in we set no cookie and store nothing that survives the tab. That is why there is no cookie banner: there is no persistent identifier to ask you about. Once you sign in we identify you by your talent id and nothing else. Your name, email and anything from your document are never sent to an analytics provider.
The landing page also counts visits with our own first-party counter, which records how far down the page a reader got and whether the film loaded. It stores one random id in your browser to avoid counting you twice.
Your face and voice are biometric data, and we hold them on your explicit consent, given in the agreement you signed after your identity check passed. That signature is the consent of record. You can withdraw it, and withdrawing it is not a favour we grant.
The licensing record itself we keep on the basis of the contract between us, and, for records that make a receipt checkable by a third party, our legitimate interest in the receipts remaining true after the fact.
Ask by writing to alvaro@socialgravity.ai. We answer inside 30 days, and normally the same week.
Our database and storage are in the EU. Stripe, Docuseal, Cartesia, Vercel and Railway process in the United States under their standard transfer terms.
Voice samples and face packs are kept while you are licensable, and deleted when you erase your record. Licensing records and ledger entries are kept for as long as a receipt referring to them can be checked, which is what makes them worth anything. Analytics is kept for a rolling year.
Nobody under 18 may be licensed here, and we do not knowingly hold anything about a child. The identity check is what enforces this rather than a checkbox.
If we add a processor or change what we hold, this page changes first, and the date at the top changes with it. If the change is material for people already licensed, we write to them.