1. What We Collect
Account information: name, email, and billing details. Payments are processed by Stripe; Varynt never stores your full card number.
Content: what you upload and what you generate.
Usage data: device, log, and interaction data used to operate, secure, and improve the Service.
Biometric data: facial geometry and voice prints, collected only when you choose to train an AI likeness, and only with your express written consent.
2. Biometric Information
Before any face or voice training, you receive a written disclosure stating what is collected, the purpose, and the retention period, and you must provide written consent.
Retention: biometric identifiers are permanently destroyed when the purpose for collection ends, or within 3 years of your last interaction with Varynt, whichever comes first, and immediately upon your verified deletion request.
Varynt never sells, leases, trades, or otherwise profits from your biometric data, and never uses your biometric data to train models for any other person.
Biometric data is encrypted in transit and at rest using AES-256 and stored in user isolated storage paths.
3. Children
Varynt does not knowingly collect personal information from children under 13. AI Kids Corner operates entirely through adult account holders. If we learn we have collected a child's personal information without verifiable parental consent, we delete it. Parents may contact the Help Center with any concern.
4. How We Use Information
To provide, secure, and improve the Service; to process payments; to communicate with you about your account; and to meet legal obligations.
We do not sell personal information, and we do not use your private content or biometric data for advertising.
5. Who We Share With
Service providers under contract: Stripe for payments, hosting and content delivery providers, AI model providers that process your generation requests, and analytics providers. A current subprocessor list is available at varynt.app/help. We disclose information if required by law or to protect users and the platform.
6. Your Rights
Access, correct, download, or delete your data from account settings. Deletion requests are honored within 30 days, or 45 days with notice where state law allows.
California residents: we do not sell or share personal information as defined by the CCPA; the Do Not Sell or Share link in the footer records your preference regardless.
EU and UK users: you may exercise GDPR rights and lodge complaints with your supervisory authority. International transfers are protected by Standard Contractual Clauses.
7. Security and Retention
Encryption in transit and at rest, multi factor authentication for staff, role based access, audit logging, and tested incident response. We retain personal data only as long as needed for the purposes above, then delete or de-identify it.
8. Contact
Questions about these Terms: visit the Help Center at varynt.app/help.
Varynt, Inc.,
3379 Peachtree Road NE,
Suite 655-M24,
Atlanta, GA 30326.

