HeyOz Privacy Policy

Last updated: August 19, 2026

This Privacy Policy describes how Webaverse, Inc. ("we", "us", or "our") collects, uses, shares, and processes personal information when you use HeyOz (the "Service").

By creating an account or using the Service, you agree to this Privacy Policy and consent to the collection, use, sharing, and processing of information as described here, including the processing of uploaded images, video, and audio by third-party AI model providers, and the sharing of your information with advertising platforms, as set out below. If you do not agree, do not create an account or use the Service.

Information We Collect

We collect information necessary to provide and improve the Service, including but not limited to:

Account and identification information — such as your name and email address. We use passwordless sign-in (email codes and third-party login), so we do not store account passwords.
Access permissions — authorized tokens or similar access provided by social media and advertising platforms (we do not store your platform credentials).
Business information — information about your products, brand, and marketing preferences.
Brand website content — when you provide a website URL, we and our service providers retrieve content from that site to build your brand profile.
User Content you upload or generate — images, video, audio, text, and prompts that you submit to the Service. This content may include the faces, likenesses, portraits, and voices of real people (including you and individuals you have authorization to include), which may constitute biometric or special-category personal data under some laws.
Payment and transaction information — payments are processed by our payment providers (such as Chargebee and Stripe); we do not store full card numbers, but we store limited payment-related data such as your subscription status, transaction history, and a payment-card fingerprint and last four digits used for fraud and abuse prevention.
Device and technical information — such as your IP address, device type, browser, operating system, and device identifiers.
Location information — your approximate location, such as the city and country derived from your IP address.
Login history — a record of your sign-ins, including the IP address, approximate location, and device used.
Usage data — performance metrics, interactions with generated content, log information, and other analytics, including session replays (recordings of how you interact with the Service's interface, such as pages viewed, clicks, inputs, and navigation).
Conversations with AI features — messages you exchange with AI assistant features, which may be retained as conversation history and memory to provide those features.

How We Use Your Information

We use your information to:

generate images, video, audio, and other content in response to your inputs, including by transmitting your User Content and prompts to third-party AI model providers;
create, post, and manage advertisements and marketing content on your behalf;
monitor and analyze content and campaign performance, including A/B testing;
operate, secure, maintain, and improve the Service;
send you service-related communications, and marketing and promotional emails about our products and offers; and
measure, target, and optimize advertising, including by sharing information with advertising platforms as described below.

Cookies, Analytics, and Session Recording

We and our partners use cookies, pixels, SDKs, and similar technologies to operate the Service, keep you signed in, remember how you found us (including campaign, referral, and affiliate identifiers), analyze usage, and measure and optimize advertising. These include:

Analytics and monitoring tools — such as Google Analytics, PostHog, and Grafana Faro, which collect device, usage, error, and performance information and may be associated with your account identifiers (such as your email address and name). We use session recording, which captures your interactions with the Service's interface (such as pages viewed, clicks, inputs, and navigation) to help us understand usage and improve the product.
Advertising pixels and conversion tracking — such as Meta (Facebook), TikTok, Google, X (Twitter), and OpenAI pixels and server-side conversion APIs, which may receive information such as hashed identifiers (for example, a hashed email address), IP address, device and browser information, and advertising click identifiers, to measure and attribute sign-ups and purchases.
Affiliate and attribution partners — such as Tapfiliate, Awin, and Dub, which receive order and referral information to attribute purchases and pay commissions.

Most browsers allow you to control or delete cookies through your settings. If you disable cookies, parts of the Service may not function properly.

AI Processing and Third-Party AI Providers

Core features of the Service are powered by third-party AI model providers, including BytePlus / ByteDance (including ModelArk, Seedance, and Seedream models), fal.ai (an AI gateway through which requests are routed to model providers such as ByteDance, Kling / Kuaishou, Alibaba, Google, and OpenAI), OpenAI, Anthropic, Google, ElevenLabs (voice), HeyGen (avatar video), Suno (music), ZapCap and Submagic (captions), and other providers such as those powering Veo, Kling, Sora, and transcription features, together with their affiliates and subprocessors ("AI Providers").

When you use these features, the User Content and prompts you submit — which may include images, video, and audio containing your personal data and the likeness or voice of other real people — are transmitted to and processed by these AI Providers in order to generate the content you request. This processing, and any associated storage, may occur on the AI Providers' infrastructure and is subject to their applicable terms and policies.

By using the Service, you consent to this processing and confirm that, where your User Content includes any real person, you have obtained that person's consent for their image, likeness, and voice to be processed by us and by these AI Providers.

Voice features. If you use voice features, including voice cloning, the audio recordings you upload or record — which may include your own voice or the voice of another person for whom you have authorization — are transmitted to and processed by third-party voice-AI providers (such as ElevenLabs) to create, store, and operate a synthetic voice.

Actor and likeness assets. Images and videos you provide for AI-actor features may be registered into an AI Provider's asset library (such as the BytePlus asset library) associated with your account, where the provider applies its own automated content moderation and may reject content that appears to contain a real person, celebrity, or public figure. This moderation does not verify identity or authorization.

Biometric and Likeness Data

Photographs, video, and voice recordings that identify a real person may be treated as biometric or special-category personal data in some jurisdictions. Where we process such data, we do so:

on the basis of your consent and your representation that you have obtained the consent of every identifiable person included in your User Content; and
through consent and authorization mechanisms in the product (such as the consent confirmation required when creating an AI actor from photos of a real person). We do not ourselves verify the identity of, or authorization for, persons appearing in User Content, and provider content moderation is not a consent mechanism.

You are responsible for ensuring you have a lawful basis and appropriate consent for every real person appearing in your User Content.

International Data Transfers

Because we and our AI Providers operate globally, your information — including User Content containing personal data and likenesses — may be transferred to, stored in, and processed in countries other than the country in which you are located, which may have different data-protection laws. By using the Service, you consent to these cross-border transfers. Where required by law, we take steps intended to ensure appropriate safeguards for such transfers.

Sharing Your Information

We do not sell your personal information for money. However, some laws (such as California's) may treat the sharing of identifiers with advertising platforms, described below, as a "sale" or "sharing" of personal information. You may opt out of this sharing at any time by contacting us at support@heyoz.com. We may share your information:

with AI Providers, to generate the content you request, as described above;
with advertising and marketing platforms (such as Meta, Google, TikTok, X, and OpenAI), to run, manage, measure, and optimize advertising campaigns, we share information such as your account details, usage data, device and identifier information (including hashed identifiers and IP address), and related data. By creating an account and using the Service, you consent to this sharing;
with payment providers (such as Chargebee and Stripe), to process subscriptions, payments, and refunds;
with affiliate and attribution partners (such as Tapfiliate, Awin, and Dub), who receive order and referral information to attribute purchases and pay commissions;
with service providers necessary to deliver the Service (for example, cloud hosting, storage, analytics, error monitoring, and email delivery);
if required by law, regulation, or legal process; and
to protect our rights, property, or safety and that of our users and third parties.

Security of Your Information

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, or disclosure. However, no internet-based service can guarantee complete security.

Data Retention

We retain your personal information and User Content for as long as your account is active and as necessary to provide the Service, to meet the purposes described in this Policy, or to comply with legal obligations. You may request deletion of your account and associated personal data at any time, as described under "Your Privacy Rights" below.

Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent (including consent for AI processing or biometric-data processing), subject to applicable law. These rights are handled on a per-request basis: to exercise them — including to request deletion of your account and personal data — email support@heyoz.com from the email address associated with your account. We will verify your request and respond within the time required by applicable law. Withdrawing consent may mean we can no longer provide certain features.

You can opt out of marketing emails at any time by using the unsubscribe link in those emails or by emailing support@heyoz.com with "unsubscribe" in the subject line; we will honor opt-out requests promptly. We may still send you service-related communications.

Children's Privacy

The Service is intended for users aged 18 and older, and is not directed to children. We do not knowingly collect personal information directly from children under 13. In addition, you must not upload or generate content depicting a minor without verifiable consent from that minor's parent or legal guardian and compliance with applicable child-protection laws. If we learn that we have collected such information without a lawful basis, we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will communicate changes by posting the updated Policy and revising the "Last updated" date above. Please review it periodically.

Contact Us

For questions or concerns about this Privacy Policy, or to exercise your privacy rights, contact us at:
support@heyoz.com

Webaverse, Inc.
4023 Kennett Pike, #50427, Wilmington, DE 19807, USA