What we collect
To run your clone we collect: your name + email, billing details, a reference photo, voice samples, writing samples, knowledge base content you upload, and usage analytics (which pages you visit, what you generate). That's it.
Why we collect it
Three reasons only:
- To train and run your clone (never anyone else's)
- To bill you correctly
- To improve product reliability — anonymised aggregate analytics
We do not sell data. We do not share data with advertisers. We do not train shared models on your inputs.
Where it lives
Encrypted at rest with AES-256. Default region: EU-Frankfurt. Optional US-East-1 on Studio plan. Voice biometric templates are stored separately with additional encryption — they can never be exported, only matched against.
Your rights
You can request — at any time — to:
- Export all your data (one click in Settings)
- Delete your clone and all training data (48-hour purge)
- Delete your account entirely (30-day grace, then irreversible)
- Know exactly what we have on you (data subject access request — 7 days)
GDPR + CCPA + Brazil LGPD compliant.
Cookies
Two cookies only. access_token (your session) and cookie_pref (whether you wanted to know about this). No advertising trackers. No third-party analytics that fingerprint you.
If something goes wrong
If we detect a breach affecting you, we notify within 72 hours with what happened, what data was involved, what we did about it, and what you should do.
Children
Double You is for 16+. We do not knowingly collect data from anyone under 16. If you believe a minor's data is in our system, email safety@getdoubleyou.com immediately.
Contact our DPO
Data Protection Officer · dpo@getdoubleyou.com. We respond to DSARs within 7 days.