Skip to content
bitHuman
Join DiscordSign up

Privacy Policy

Last updated: October 28, 2026

Introduction

bitHuman, Inc. ("bitHuman," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.

Information We Collect

Information You Provide

  • Account Information: Name, email address, and password when you create an account
  • Payment Information: Billing address and payment details (processed by our payment provider)
  • Content: Images, videos, audio, and text you upload or create using our Services
  • Your voice in bitHuman Live: During a call, your voice is sent to bitHuman's servers and to our speech and language provider, OpenAI, to understand and answer you.
  • Communications: Messages you send to us for support or feedback

Information Collected Automatically

  • Usage Data: Information about how you interact with our Services, including API calls, features used, and time spent
  • Device Information: Device type, operating system, browser type, and IP address
  • Cookies: We use cookies and similar technologies to improve your experience and analyze usage
  • Page views: We count page views on our websites without cookies, recording the page, the referring site, the country and the device type (not who you are), to see which pages are useful.

How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our Services
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments and questions
  • Analyze usage patterns to improve our Services
  • Detect, prevent, and address fraud and abuse
  • Comply with legal obligations

How We Use Your Content

We don't sell your avatars, conversations or generated content. We use them to provide our Services, and share them only as described in this policy.

AI Model Training

We may use photos and videos you upload to train and improve bitHuman's own models. We don't sell them. This use is internal: we never share your data for anyone else's training. Data already used this way may stay in our models after you delete it.

Data Sharing

We may share your information with:

  • Service Providers: Third parties that help us operate our Services: our cloud database and file storage (Supabase); our website's hosting and usage analytics (Vercel); delivery of public avatar images and videos (Cloudflare); editing the photos you upload to make an avatar and turning them into video (fal.ai); reading the web pages you add to an avatar's knowledge base (Jina); sending you email, with your email address and the message (Resend); handling your support emails (Google); tracking your support requests and our work with your account (GitLab); and other hosting and content delivery, payment processing and analytics
  • AI Providers: To understand you and reply, we send your words (and, during a bitHuman Live call, your voice) to OpenAI (language, speech recognition and voice) and Cartesia (voice). An avatar's creator may also connect Anthropic, Google (Gemini), xAI, DeepSeek, Deepgram or ElevenLabs for that avatar, using the creator's own key for that provider. We share it with providers who process it on our behalf to provide our Services. OpenAI does not use API data to train its models by default. Cartesia handles what we send it under its own terms, which allow it to use that data to improve its models.
  • Sign-in providers: Clerk, our authentication provider, processes your sign-in on our website and in our apps. If you choose to sign in with Google, Apple or Microsoft, that provider also receives the sign-in request, under its own terms. On our sign-in and sign-up pages, Google's sign-in prompt may load from Google.
  • Voice clones: When you clone a voice in the dashboard, we keep your recording with your avatar and send it to our voice provider (Cartesia). Recordings you send through the API by link are passed to Cartesia and not kept by us; audio files you upload to us through the API are kept, can be opened by anyone who has the file's link, and are sent to Cartesia when you use them to clone a voice.
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

Voice calls in bitHuman Live. When you talk to a character in the bitHuman Live app, your voice, anything you type, and the character's instructions are sent through bitHuman's servers to our speech and language provider, OpenAI, which processes them on our behalf to understand you and to generate the character's replies. We don't send OpenAI your name, email address or account ID. OpenAI does not use this data to train its models, and may keep it for up to 30 days to detect abuse, unless the law requires longer. bitHuman does not store the audio of your calls. If you report a conversation, we keep the captions you report for up to 180 days after we review the report.

Characters on websites and in apps built with bitHuman. When you talk to a character that a business has put on its website or app, your voice and the conversation pass through our media provider (LiveKit). Replies are generated by our language provider (OpenAI). Speech is transcribed by OpenAI, and voices are produced by Cartesia or OpenAI, unless the business chooses its own provider. Conversations with an agent in the bitHuman cloud are kept as transcripts until the agent is deleted, unless conversation logging is switched off for that agent. Today bitHuman switches logging off on request; there is no dashboard switch or API field for it. Agent owners can view their transcripts in the dashboard, export them as JSON and read them with the API. They can't delete a single transcript; deleting the agent deletes its transcripts. Transcripts of agents deleted before September 2, 2026 may still be stored. With memory turned on, an agent's conversations are sent to OpenAI to pick out what the agent remembers about the people it talks to. Memories are not deleted after a set time. Questions visitors ask about an agent's knowledge base are stored word for word and are not deleted after a set time, even when conversation logging is switched off. People who talked to an agent can ask about their conversations by writing to team@bithuman.ai.

Zoom sessions with a character. Sessions run on Zoom. The avatar listens to the meeting so it can answer, so Zoom shows a recording notice while it is there.

We do not sell your personal information to third parties.

Data Retention

We keep your information while your account is open. When you delete your account (in bitHuman Live, or at bithuman.ai/account/delete), we delete your sign-in, cancel subscriptions you bought on bithuman.ai, and remove your credits, API secrets and the organizations you own. A subscription bought in the App Store or Google Play is not cancelled by deleting your account: cancel it in that store. The avatars you made are removed from your account right away. The files behind them are removed in a separate cleanup that runs regularly. We keep:

  • A closed record of your account: your name, email address, sign-in ID and payment-provider customer ID. We don't delete it today.
  • The email addresses and sign-in IDs linked to your account, including social sign-in IDs, so welcome credits can't be claimed again by signing up anew. We don't delete these.
  • What the avatars you made remembered about the people they talked to. We may keep these for a while after you close your account. If you connected your own memory provider account to an avatar, what it stored there stays with that provider.
  • Some copies of the files behind avatars you made, until our cleanup removes them.
  • Your Knowledge Hub: your knowledge bases, the files and web links you added, and the text, questions-and-answers and search index we built from them. We don't delete these today. To have them deleted, email team@bithuman.ai and we'll delete them within 30 days. Copies in our backups are deleted on our backup schedule, within about 13 months.
  • Records of sessions with the avatars you made, until our cleanup removes them. It deletes their conversation transcripts and IP addresses, then the records themselves, except records of credit use, which we keep for accounting. Records of your other sessions, and any voices you created, with the recordings you uploaded to make them. We don't delete these today. For bitHuman Live calls, these records hold the call's times, the credits used and the account, not what was said.
  • Avatars we feature, or that another organization still uses, are kept, along with their memories and their session records.
  • Records of your purchases and credit use, which we keep for accounting. Our payment provider, Stripe, also keeps its own records.
  • Reports you sent about an avatar's reply: we clear their content 180 days after we resolve them, or one year after you sent them if they're never resolved.
  • A record that an account was closed because of the age requirement, with its sign-in ID, which we replace with a code that no longer identifies the account after 30 days.
  • The IP address you signed up from and your email's domain, which we keep for 30 days to detect automated or abusive sign-ups, then delete the IP address.

Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit and restricted access to our database. However, no method of transmission over the Internet is 100% secure.

Your Rights

Depending on your location, you may have the right to:

  • Access and receive a copy of your personal data
  • Correct inaccurate personal data
  • Request deletion of your personal data
  • Object to or restrict processing of your data
  • Data portability
  • Withdraw consent at any time

International Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law.

Children's Privacy

Our Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact us

If you have questions about this Privacy Policy or our data practices, please contact us at team@bithuman.ai