Privacy Policy

Introduction

This Privacy Policy explains how BuildAvatar collects, uses, shares, and protects personal information when you use our website at https://buildavatar.ai and the services offered through it (the "Service").

BuildAvatar is a platform where you design and claim a trained AI avatar (an "Avatar", also called a "Creator") and gain access to (a) a Studio where you can preview your Avatar and run edits on it, and (b) a Resource Hub of operator training and prompts. The Avatar is an AI-generated, trained model; it does not depict a real, identifiable person.

This policy applies to the personal information we process as a controller in connection with your BuildAvatar account and use of the Service. It does not cover the separate services operated by TJP or Fanplace, each of which has its own terms and privacy policy that govern the information those platforms collect and process.

Who we are

The Service is operated by [BuildAvatar legal entity name] ("BuildAvatar", "we", "us", or "our"), registered at [registered address]. For any privacy question, or to exercise your rights, contact us at [email protected].

Lawful basis for processing

Where data protection law requires a lawful basis, we rely on the following:

• Performance of a contract — to create and secure your account, reserve and operate your Avatar, provide the Studio and Resource Hub, and deliver service communications you have requested.
• Legitimate interests — to keep the Service secure, prevent fraud and abuse, apply rate limits, understand how the Service is used through product analytics, and improve our features, balanced against your rights and interests.
• Consent — where we ask for it, such as for non-essential cookies. You may withdraw consent at any time.
• Legal obligation — to comply with laws that apply to us and to respond to lawful requests.

Important points

Please read these points before using the Service:

• Identity verification is handled by Fanplace, not by BuildAvatar. Any identity verification, and any government ID, passport, selfie-with-ID, or similar document, is collected and processed by Fanplace and its third-party verification providers under Fanplace's own terms and privacy policy. BuildAvatar does not collect, receive, or store these documents.
• Payments are handled by Fanplace, not by BuildAvatar. Subscriptions, pay-per-view, tips, messaging, and all other monetization occur on Fanplace and are processed by Fanplace and its payment processors. BuildAvatar is not a subscription or payment platform, never processes subscriber payments, and is not a party to any monetization transaction.
• Avatars are AI-generated. An Avatar is a trained AI model and does not depict a real, identifiable person.
• We do not sell your personal information, and we do not run third-party advertising trackers on the Service.

Information we collect

Information you give us

• Email address — used to create your account, verify it, and send you service communications.
• Password — stored only in hashed form; we never store your password in plain text.
• Nickname — a display name you choose.
• Avatar trait selections — the trait choices you make to design and build your Avatar.

Information we collect when you use the Service

• Usage and product-analytics events — actions and events that show how you use the Service, so we can operate and improve it.
• Generated and edit image references — your edit choices and the URLs referencing images generated or edited through the Studio.
• Device and IP data — your IP address and related technical data, used for rate-limiting, security, and abuse prevention.
• Cookies and similar technologies — including an anonymous session/tracking identifier and any referral relationship. See the Cookies section below.
• Email delivery and engagement events — delivery, bounce, complaint, and engagement events relating to the emails we send you.

Information we get from third parties

• Fanplace application and approval status — we receive your Fanplace application/approval status so we can unlock the relevant parts of the Service (for example, the Resource Hub) once your Fanplace setup is complete. We do not receive the underlying identity documents, verification results in detail, or payment information from Fanplace.

How we use information

We use the information described above to:

• create, secure, and administer your account, and manage email verification;
• let you design, claim, preview, and run edits on your Avatar, and hold a claimed-but-unverified Avatar for the reservation period before it is released back to the pool;
• provide the Studio and the Resource Hub, and unlock features based on your Fanplace approval status;
• send you transactional and service communications, and process delivery and engagement events;
• operate, maintain, secure, and improve the Service, including through product analytics;
• apply rate limits and detect, investigate, and prevent fraud, abuse, and security incidents;
• understand referral relationships and how users find the Service; and
• comply with our legal obligations and enforce our terms.

How we share information

We do not sell your personal information. We share it only in the following circumstances:

• With TJP and Fanplace to operate the linked services. Content is created on TJP (a separate studio), and monetization and identity verification happen on Fanplace (a separate platform). We share the limited information needed to connect your BuildAvatar account and Avatar to those services; each of TJP and Fanplace processes information under its own terms and privacy policy.
• With service providers who process information on our behalf under contract, including Resend (transactional email) and Cloudflare (hosting, CDN, and edge security). These providers may only use the information to provide services to us.
• For legal reasons — where we believe in good faith that disclosure is required to comply with applicable law, regulation, legal process, or an enforceable governmental request, or to protect the rights, property, or safety of BuildAvatar, our users, or the public.
• In a merger or acquisition — if BuildAvatar is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

What BuildAvatar does not collect

To be clear: BuildAvatar does not collect or store government ID, passport, or other identity documents, and does not collect or store payment-card or bank details. Identity verification and payments live entirely on Fanplace and are handled by Fanplace and its third-party verification and payment providers under Fanplace's own terms and privacy policy.

Cookies

We use cookies and similar technologies, including an anonymous session/tracking identifier and technologies used to remember referral relationships and to keep the Service secure. For details about the cookies we use and your choices, please see our Cookie Policy. Where required, we ask for your consent to non-essential cookies, and you can change your choices at any time.

Data retention

We keep personal information for as long as your account is active and for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and the purpose for which it was collected; for example, security and abuse-prevention data such as IP logs are kept only as long as needed for those purposes.

You can request deletion of your account and associated personal information through your account settings or by contacting [email protected] or [email protected]. Some information may be retained where we are required or permitted by law to keep it.

Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete your personal information;
• object to or restrict certain processing, and withdraw consent where processing is based on consent; and
• request portability of certain information.

To exercise any of these rights, contact us at [email protected]. We will respond within the time required by applicable law. You may also have the right to lodge a complaint with your local data protection authority. Note that requests relating to identity verification data or payment information should be directed to Fanplace, as we do not hold that information.

Children

The Service is strictly for adults aged 18 and over. It is not offered to, and may not be used by, anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date below and, where appropriate, provide additional notice (for example, by email or through the Service). Your continued use of the Service after an update takes effect means you accept the revised policy.

Contact

If you have questions about this Privacy Policy or how we handle your information, contact us:

• Privacy: [email protected]
• General/support: [email protected]
• Legal notices: [email protected]
• Postal address: [BuildAvatar legal entity name], [registered address]

Last updated: 15 July 2026