Skip to content
bitHuman
Join DiscordSign up

Privacy Policy

Last updated: October 13, 2026

Introduction

bitHuman, Inc. ("bitHuman," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.

Information We Collect

Information You Provide

  • Account Information: Name, email address, and password when you create an account
  • Payment Information: Billing address and payment details (processed by our payment provider)
  • Content: Images, videos, audio, and text you upload or create using our Services
  • Your voice in bitHuman Live: During a call, your voice is sent to bitHuman's servers and to our speech and language provider, OpenAI, to understand and answer you.
  • Communications: Messages you send to us for support or feedback

Information Collected Automatically

  • Usage Data: Information about how you interact with our Services, including API calls, features used, and time spent
  • Device Information: Device type, operating system, browser type, and IP address
  • Cookies: We use cookies and similar technologies to improve your experience and analyze usage
  • Page views: We count page views on our websites without cookies, recording the page, the referring site, the country and the device type (not who you are), to see which pages are useful.

How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our Services
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments and questions
  • Analyze usage patterns to improve our Services
  • Detect, prevent, and address fraud and abuse
  • Comply with legal obligations

How We Use Your Content

We don't sell your avatars, conversations or generated content. We use them to provide our Services, and share them only as described in this policy.

Data Sharing

We may share your information with:

  • Service Providers: Third parties that help us operate our Services: our cloud database and file storage (Supabase), hosting and content delivery, payment processing and analytics
  • AI Providers: To understand you and reply, we send your words (and, during a bitHuman Live call, your voice) to OpenAI (language, speech recognition and voice) and Cartesia (voice and speech recognition). An avatar's creator may also choose Anthropic, Google, xAI, DeepSeek, Together AI, Groq, Mistral, Deepgram, AssemblyAI, Microsoft Azure, ElevenLabs, Inworld or Rime for that avatar. We share it with providers who process it on our behalf to provide our Services. OpenAI does not use API data to train its models by default.
  • Sign-in providers: Clerk, our authentication provider, processes your sign-in on our website and in our apps. If you choose to sign in with Google, Apple or Microsoft, that provider also receives the sign-in request, under its own terms. On our sign-in and sign-up pages, Google's sign-in prompt may load from Google.
  • Voice clones: When you clone a voice in the dashboard, we keep your recording with your avatar and send it to our voice provider (Cartesia). Recordings you send through the API by link are passed to Cartesia and not kept by us; audio files you upload to us through the API are kept, can be opened by anyone who has the file's link, and are sent to Cartesia when you use them to clone a voice.
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

Voice calls in bitHuman Live. When you talk to a character in the bitHuman Live app, your voice, anything you type, and the character's instructions are sent through bitHuman's servers to our speech and language provider, OpenAI, which processes them on our behalf to understand you and to generate the character's replies. We don't send OpenAI your name, email address or account ID. OpenAI does not use this data to train its models, and may keep it for up to 30 days to detect abuse, unless the law requires longer. bitHuman does not store the audio of your calls. If you report a conversation, we keep the captions you report for up to 180 days after we review the report.

Characters on websites and in apps built with bitHuman. When you talk to a character that a business has put on its website or app, your voice and the conversation pass through our media provider (LiveKit). Replies are generated by our language provider (OpenAI). Speech is transcribed by Cartesia or OpenAI, and voices are produced by Cartesia or OpenAI, unless the business chooses its own provider. Conversations with an agent in the bitHuman cloud are kept as transcripts until the agent is deleted, unless conversation logging is switched off for that agent. Today bitHuman switches logging off on request; there is no dashboard switch or API field for it. Agent owners can view their transcripts in the dashboard, export them as JSON and read them with the API. They can't delete a single transcript; deleting the agent deletes its transcripts. Transcripts of agents deleted before September 2, 2026 may still be stored. With memory turned on, an agent's conversations are sent to OpenAI to pick out what the agent remembers about the people it talks to. Memories are not deleted after a set time. Questions visitors ask about an agent's knowledge base are stored word for word and are not deleted after a set time, even when conversation logging is switched off. People who talked to an agent can ask about their conversations by writing to hello@bithuman.ai.

We do not sell your personal information to third parties.

Data Retention

We keep your information while your account is open. When you delete your account (in bitHuman Live, or at bithuman.ai/account/delete), we delete your sign-in, cancel subscriptions you bought on bithuman.ai, and remove your credits, API secrets and the organizations you own. A subscription bought in the App Store or Google Play is not cancelled by deleting your account: cancel it in that store. The avatars you made are removed from your account right away. We delete the files behind them in a separate cleanup. We keep:

  • A closed record of your account: your name, email address, sign-in ID and payment-provider customer ID. We don't delete it today.
  • The email addresses and sign-in IDs linked to your account, including social sign-in IDs, so welcome credits can't be claimed again by signing up anew. We don't delete these.
  • What the avatars you made remembered about the people they talked to. We don't delete these today.
  • Some copies of the files behind avatars you made, until our cleanup removes them.
  • Records of your sessions, including IP addresses and any conversation transcripts, and any voices you created, with the recordings you uploaded to make them. We don't delete these today. For bitHuman Live calls, these records hold the call's times, the credits used and the account, not what was said.
  • Records of your purchases and credit use, which we keep for accounting. Our payment provider, Stripe, also keeps its own records.
  • Reports you sent about an avatar's reply: we clear their content 180 days after we resolve them, or one year after you sent them if they're never resolved.
  • A record that an account was closed because of the age requirement, with its sign-in ID, which we replace with a code that no longer identifies the account after 30 days.
  • The IP address you signed up from and your email's domain, which we keep for 30 days to detect automated or abusive sign-ups, then delete the IP address.

Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit and restricted access to our database. However, no method of transmission over the Internet is 100% secure.

Your Rights

Depending on your location, you may have the right to:

  • Access and receive a copy of your personal data
  • Correct inaccurate personal data
  • Request deletion of your personal data
  • Object to or restrict processing of your data
  • Data portability
  • Withdraw consent at any time

International Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law.

Children's Privacy

Our Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact us

If you have questions about this Privacy Policy or our data practices, please contact us at hello@bithuman.ai