Privacy Policy

This policy explains what personal data [Company legal name] ("we") collects when you use Larkroot, how we use it and the choices you have. For data about the people in your content, you decide what to upload and we process it on your behalf.

1. What we collect

• Account: your email address, sign-in details and workspace membership.
• Your content: product details and links, scripts, images, voice recordings, generated videos and other files you create or upload. This can include a real person's face or voice.
• Consent records: the name, relationship and confirmation you give when uploading a real person's likeness or voice.
• Billing: credit purchases, balances and the cost of each action. Card payments are handled by our payment processor; we do not store full card numbers.
• Technical: IP address, browser and device details, and logs of requests and errors, used to run and secure the service.

2. How we use it

• To provide Larkroot: generate, store and deliver your content, and keep your workspace working.
• To show cost estimates, charge credit and keep billing records.
• To secure the service, prevent abuse and enforce our Terms.
• To send service emails such as sign-in links, receipts and important notices.
• To comply with legal obligations.

We do not sell your personal data, use it for third-party advertising, or use your content to train AI models. Faces and voices are used only to produce the content you ask for, never to identify people.

3. AI processing

When you generate something, the relevant inputs (for example a script, product images, a creator's reference images or a voice sample) are sent to the AI provider that produces it, which returns the result to us. When you import a product page, we fetch that page from the link you give. Providers process this data to deliver the result under their own terms and data policies.

4. Who we share it with

We share data only with service providers that help us run Larkroot, and only as needed:

• Supabase: database, sign-in and file storage.
• fal.ai and ArgoLink: AI generation of video, images, speech and audio. ArgoLink routes requests to model makers such as ByteDance, Google and OpenAI.
• Anthropic (directly or through ArgoLink): AI text for concepts, scripts and writing help.
• Our hosting, email delivery and payment providers.

We may also disclose data when required by law, to protect rights and safety, or as part of a merger or sale of the business.

5. Retention and deletion

• We keep your account and content while your account is active. Projects and creators you remove are archived, not erased.
• To permanently erase specific content or your whole account, email [legal@your-domain.com]. We erase it within 30 days; backups expire on their normal schedule.
• We keep billing records as long as tax and accounting law requires, and technical logs only as long as needed for security and debugging.

6. Your rights

Depending on where you live (for example under the GDPR in the EU and UK or the CCPA in California), you can ask to access, correct, delete or export your personal data, or object to or restrict how we use it. Email [legal@your-domain.com]; we will respond within the time the law requires. You may also complain to your local data protection authority.

If you appear in content someone else created with Larkroot and did not agree to it, contact us and we will investigate and remove it where appropriate.

7. Cookies

We use only the cookies needed to keep you signed in and to secure the service. We do not use advertising or cross-site tracking cookies.

8. Security and international transfers

Data is encrypted in transit, stored files are private by default, and access within each workspace is restricted to its members. No system is perfectly secure; we will notify you of a breach affecting your data as the law requires. Our providers may process data in other countries, including the United States, under appropriate safeguards such as standard contractual clauses.

9. Children

Larkroot is not for anyone under 18, and we do not knowingly collect their data.

10. Changes and contact

We will post changes here and notify you of material ones. Questions or requests: [legal@your-domain.com], [Company legal name], [Registered business address].