Our giving pledge: 10% of profits committed to SOS Børnebyerne, Land of Hope, Løkkefonden & Psykiatrifonden — learn more

Privacy Policy

Version 1.0 — Last updated: April 2026

1. Who We Are

MyAvatar ApS ("we", "us", "our") is the data controller for personal data processed through the MyAvatar platform. We are registered in Denmark, CVR DK39431009.

2. Data We Collect

Category Examples Purpose
Account dataName, email, passwordAccount management
Payment dataBilling address, last 4 digits of cardPayment processing (via Stripe)
Usage dataVideos created, features used, session logsService improvement, billing
Content dataScripts, uploaded images, generated videosService delivery
Technical dataIP address, browser type, deviceSecurity, analytics

We do not store full payment card numbers — these are handled by Stripe (PCI-DSS compliant).

3. Legal Basis for Processing (GDPR)

Processing Legal Basis
Account managementContract (Art. 6(1)(b))
Payment processingContract (Art. 6(1)(b))
Service improvementLegitimate interest (Art. 6(1)(f))
Legal complianceLegal obligation (Art. 6(1)(c))
Marketing (if opted in)Consent (Art. 6(1)(a))

4. Data Sharing

We share data with:

We do not sell your personal data to third parties.

Google User Data & Google API Services

If you choose to connect your Google Ads account, MyAvatar requests access to the Google Ads API using the https://www.googleapis.com/auth/adwords scope. This connection is optional and is always initiated by you.

We use this access solely to let you create, review, and manage your own advertising campaigns from within MyAvatar's Campaign Engine, acting on your behalf and at your direction. We access only the Google Ads account(s) you explicitly authorise.

MyAvatar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:

You can disconnect your Google Ads account at any time from your MyAvatar connection settings, which revokes MyAvatar's stored access and refresh tokens. You may also revoke access directly at myaccount.google.com/permissions.

5. California Residents (CCPA)

If you are a California resident, you have the right to:

We do not sell your personal information.

To exercise your rights, contact: privacy@myavatar.dk

6. Your Rights (GDPR)

You have the right to:

To exercise your rights: privacy@myavatar.dk

You may also lodge a complaint with the Danish Data Protection Authority (Datatilsynet): www.datatilsynet.dk

7. Data Retention

Data type Retention period
Account dataUntil account deletion + 30 days
Billing records5 years (legal requirement)
Generated videosUntil deleted by user or account termination
Usage logs12 months

8. International Transfers

We operate from Denmark (EU). Some third-party providers are located outside the EU/EEA. For such transfers, we rely on Standard Contractual Clauses approved by the European Commission.

9. Cookies

We use essential cookies for authentication and session management. Analytics cookies require your consent. See our Cookie Policy for details.

10. Children

MyAvatar is a B2B SaaS platform intended exclusively for business users aged 18 and over. Our Service is not directed at children, and we do not knowingly collect personal data from minors.

MyAvatar is a tool for creating video content. Users who produce content targeting children's audiences are solely responsible for ensuring their content complies with applicable regulations (including COPPA, GDPR-K, and advertising standards) in their respective jurisdictions. MyAvatar does not assume liability for the end use or distribution of user-generated content.

11. Changes

We will notify you of material changes to this Privacy Policy by email or prominent notice on the platform at least 30 days before they take effect.