Privacy Policy
Last updated: September 10, 2026
This policy explains what Sosie collects, why, where it goes and how long it stays. It is written to be read.
1. Who is responsible
Yiriba LLC, 11041 Shadow Creek Pkwy, Pearland, TX 77584, United States, operates Sosie and is the data controller for the processing described here. Contact: bonjour@sosie.live.
2. What we collect
Account data: your email address, password hash, chosen language, and the timestamps of sign-ins.
Content you provide: the videos you upload, presenter images you upload, text descriptions you write, and the videos generated from them. Videos of people contain faces and voices; we process them solely to produce your render and never to identify anyone.
Billing data: handled by Stripe. We receive a customer identifier, the plan purchased and payment status. We never see or store card numbers.
Technical data: IP address, browser, approximate country (used only to pick a language), and server logs kept for security and debugging.
3. Why, and on what legal basis
To provide the service you asked for and take payment: performance of a contract.
To keep the service secure, prevent abuse and enforce our terms: our legitimate interest.
To meet accounting and tax obligations: legal obligation.
Uploading the likeness of another person requires their consent, which you confirm you hold when you upload.
To investigate reports that a face or voice was used without consent, to protect the rights of people depicted in content, and to answer lawful requests from authorities: our legitimate interest and, where a law or order applies, legal obligation.
4. Who processes it
Supabase (authentication and database, hosted in Paris, EU). Amazon Web Services (file storage, Paris region, EU). Runway (AI generation, United States: your driving video and presenter image are sent to Runway to produce the render, under its data processing terms and standard contractual clauses). Stripe (payments). Vercel and Google Cloud (hosting). Each processes data only on our instructions.
5. How long we keep it
Uploaded videos and presenter images: 7 days, then deleted automatically. Generated videos: 30 days on the Départ plan and Essai pack, one year on Pro, Standard and Volume, and until you delete them on Studio. Account data: until you close your account. Billing records: as long as accounting law requires.
5a. Misuse, investigations and disclosure
Where we receive a credible report that content breaches our terms, or a request from a court, regulator or law enforcement, we may keep the content concerned, the account that produced it and the related logs for as long as the investigation, the legal claim or the request requires, even past the periods above. We may share them with law enforcement, courts, regulators, the platform where the content appeared and the person whose likeness was used, where we believe in good faith the law or the protection of a person's rights requires it.
We keep a record of the consent representations you make when you upload, so that we can answer a person who asks whether and on what basis their likeness was processed.
If you believe your face or voice appears in content produced with Sosie without your consent, write to bonjour@sosie.live with enough detail to identify it. You do not need an account. We will tell you what we found and what we did.
6. Your rights
You can access, correct, export or delete your data, object to processing based on legitimate interest, and withdraw consent at any time by writing to bonjour@sosie.live. You may also complain to your national data protection authority (in France, the CNIL). These rights are also open to people who appear in someone else's uploads.
7. Cookies
We use only strictly necessary cookies: your session, your language choice and an inactivity timer that signs you out after an hour. No advertising or cross-site tracking cookies.
8. Security
Data is encrypted in transit and at rest. Files are stored in a private bucket reachable only through short-lived signed links. Access to production systems is restricted and logged.
9. Children
The service is for adults. We do not knowingly collect data from anyone under 18.
10. Changes
We will announce material changes to this policy by email before they take effect.