Privacy Policy
Techtree Pte. Ltd. is the organisation responsible for personal data in ReallyAvatar. This policy explains what we collect, why we use it, and the choices you have under the Personal Data Protection Act 2012 of Singapore. Contact ava@reallyavatar.com for a privacy request.
Account and billing data
When you create an account we store your name, email address, and either a password hash or the Google account identifier if you continue with Google. We do not receive your Google password.
If you subscribe or buy credits, Stripe processes the payment. We store the Stripe customer and subscription identifiers, the plan, invoices’ status, and the credit balance and expiry. We do not store the full card number or card security code. Stripe’s own privacy notice describes how they handle payment data.
Avatar and conversation data
To run an avatar we process:
- the instructions, voice, model, and tools you configure;
- documents you upload for the knowledge base, and the index built from them;
- messages between a visitor and the avatar, including the time of the conversation;
- audio you submit for speech-to-text, and the text we send to a voice provider for speech;
- files a visitor attaches in chat;
- learning progress, when learning mode is switched on for that avatar.
Visitors who talk to a published avatar are told, through the experience you embed, that they are speaking with an automated avatar. If you collect a learner’s name or email inside a conversation, you are responsible for telling them why. We process that content to provide the reply, to apply your plan’s usage limits, and to let you export a transcript from the console.
Usage and device data
We record metered usage: weighted input and output tokens, speech seconds, voice characters, knowledge searches, and storage. We also keep security logs such as sign-in time and the IP address presented to the server, so we can investigate abuse and failed payments. The session cookie keeps you signed in. A second cookie protects forms against cross-site requests. Google sign-in uses a short-lived cookie to match the return from Google. These cookies are required for the account. We do not use them to advertise to you on other sites.
Who we share data with
We share personal data only with processors that perform a service for ReallyAvatar:
- Stripe, for checkout, invoices, and the billing portal;
- Google, if you choose Google sign-in;
- OpenAI and Google AI, for the language models enabled on your plan;
- Amazon Polly and the selected voice provider, to synthesise speech;
- the cloud operator that hosts the application database and uploaded files.
Some of these providers process data outside Singapore. Where they do, we use providers that offer contractual protection appropriate for the Personal Data Protection Act. We do not sell personal data.
How long we keep it
Account details stay while the account is open. Conversation and file content stay until you delete them or close the workspace. Usage records and invoices are kept for up to seven years because they support billing and tax records. Server logs are kept for a shorter operational period, normally 90 days, unless we need them for a security investigation. Credit grants are kept until they expire and for the billing-retention period after that.
Your choices
You may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it where we have no duty to retain it. You may withdraw consent for optional processing, such as a message you sent us from the website, without affecting a contract we still need to perform. You may also complain to the Personal Data Protection Commission of Singapore.
A Free account can be closed by writing to us. A paid subscription should be canceled in Manage billing first, so a renewal is not charged after you leave. Details of prices and cancellation are in the Terms of Sale.
Questions about this document: ava@reallyavatar.com. Business hours are Monday to Saturday, 10:30 AM to 7:30 PM Singapore time.