Privacy Policy

1. Who we are

Live Layer is a platform for building and deploying AI avatar agents for websites, apps, and fullscreen experiences. This policy covers what we collect when you use livelayer.studio, our dashboard, our embedded widgets, or any of our SDKs.

2. What we collect

Account information

When you sign up, we collect your email, name, and organization name through our auth provider (Clerk). If you connect an OAuth provider like Google, we receive your basic profile.

Content you upload

• Avatar photos (headshots) used to generate video avatars
• Voice recordings used to clone voices
• Knowledge-base documents (PDFs, text, URLs) your avatar uses to answer questions
• Agent configurations, prompts, and workflow definitions

Session data

When an end-user talks to one of your deployed avatars, we process and store: audio and video streams for the duration of the session, text transcripts, tool-call events, and standard usage metadata (timestamps, duration, region). Session audio is retained for 30 days by default; transcripts are retained with your agent until you delete them.

Visitor tracking

If you enable the LiveLayer Tracker on your site, we generate a device-level visitor fingerprint (via FingerprintJS) so your avatar can recognize returning visitors. You can disable tracking per agent in your dashboard.

Operational data

Standard server logs (IP, user agent, request paths), billing records from Stripe, and basic product analytics to help us improve the platform.

3. How we use it

• To run Live Layer and keep your avatars working
• To bill you accurately and manage your subscription
• To send product updates and security notices (you can unsubscribe from marketing anytime)
• To debug problems and prevent abuse of the platform

We do not train our AI models on your content. Avatar photos, voice clones, knowledge bases, and conversations stay yours.

4. Who we share it with

We use a small set of subprocessors to run Live Layer. Each only receives the data it needs to do its job:

We do not sell your data and we do not share it with advertisers.

5. Your rights

You can always:

• Export your agents, transcripts, and uploaded files
• Delete any or all of your data from your dashboard
• Request a full account deletion by emailing privacy@livelayer.studio
• Ask us what we have on file about you

If you’re in the EU, UK, or California, you have additional rights under GDPR, UK GDPR, and CCPA/CPRA. We honor all of them.

6. Data security

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to on-call engineers and requires SSO + 2FA. We run automated vulnerability scans on our codebase and dependencies. If a breach happens that affects you, we’ll tell you within 72 hours.

7. Avatar likeness & voice biometrics

When you upload a photo or clone a voice, you’re providing biometric-adjacent data. Treat this seriously:

• Only upload likenesses you have rights to use
• We store the source media encrypted and only process it for avatar/voice generation
• Delete the avatar or voice from your dashboard at any time and we remove the underlying source within 30 days

8. Children

Live Layer is not intended for users under 16. We don’t knowingly collect data from children. If you believe we have, contact us and we’ll delete it.

9. Changes to this policy

If we make a material change, we’ll email you and update this page. The “Last updated” date at the top always reflects the latest version.

10. Contact

Questions? Email privacy@livelayer.studio.