Privacy Policy
This policy explains what personal data GOROB.ai collects, why, who receives it and what rights you have. Face images and voice recordings are also covered by our Consumer Health Data Privacy Policy.
1. Who we are
GOROB.ai is operated by [LEGAL NAME] LLC, [ADDRESS], USA, which is responsible for your personal data (the “controller”). You can reach us at [email protected]. Our representative in the EU under Article 27 GDPR is [EU REPRESENTATIVE], and our representative in the UK is [UK REPRESENTATIVE].
2. What we collect
- Account data: your name, email address and profile picture from Google sign-in, your date of birth (to confirm you are 18 or older), your settings and your choice about marketing emails.
- Your uploads and results: photos, videos, audio, voice recordings and texts, including lyrics, that you upload, the results you create, and voice clones if you create them.
- Payment data from Stripe and Link: your name, email address, billing country and address, any tax ID you provide, and your order and subscription details. We never receive your full card number.
- Technical data: your IP address and the country we detect from it, device and browser type, cookies, and records of how the site is used, including through Cloudflare, which protects the site.
- Messages you send us, and records of your consents.
3. Why we use your data and on what legal basis
- To provide the Service: your account, generations, storage of your files, pages you share, payments and support (performance of our contract with you).
- To keep the Service safe, prevent fraud and abuse, keep business and tax records, and deal with legal claims (our legitimate interests and legal obligations).
- To process the image or voice of other people in your uploads (our legitimate interest — see section 5).
- Analytics and advertising cookies — with your consent where the law requires it (see section 8); marketing emails — with your consent. You can withdraw consent at any time; this does not affect processing that happened before.
4. Faces and voices
We use the photos, videos and voice recordings you upload only to create, store and show the results you ask for and to check them for prohibited content (Terms of Use, section 11). The results are generated by our AI technology providers on our instructions. We do not use these materials to recognise or identify anyone, we do not create face or voice templates for that purpose, and we do not train AI models on them. If you create a voice clone, we and our provider keep it so that you can reuse it, until you ask us to delete it or close your account.
5. People in your uploads
If an upload shows or sounds like someone else, we process their image or voice only to provide the result you requested, relying on your promise under section 9 of our Terms of Use that they agreed (our legitimate interest under Article 6(1)(f) GDPR). We do not identify them. They can ask us to delete their image or voice by writing to [email protected].
6. Who receives your data
We share personal data only as needed for the purposes above:
- hosting, storage and content delivery providers, including Cloudflare;
- AI technology providers that create results on our instructions;
- email service providers;
- Google, for sign-in and Google Analytics (see section 8);
- Meta, for Meta Pixel (see section 8);
- Stripe and Link, which process payments as independent controllers;
- people you choose to share a page or result with;
- authorities, when the law requires it.
We do not sell personal data (on advertising pixels, see section 8).
7. Payments
Link (Sold through Link, LLC) is the merchant of record for your purchases, and Stripe processes the payments. They act as independent controllers of your payment data under the Link Privacy Policy (link.com/privacy) and the Stripe Privacy Policy (stripe.com/privacy). We never receive your full card number. Stripe shares with us your name, email address, billing country and address, any tax ID you provide, and your order and subscription details, which we use to provide the Service and keep our records. If you delete your Link account, Link cancels subscriptions bought through Link and deletes the billing data it holds; we keep our own account and order records as described in section 10.
8. Cookies, analytics and advertising
We use necessary cookies to keep you signed in, remember your settings and protect the site. We also use Google Analytics and Meta Pixel to understand how the site is used and to measure our ads. In the European Economic Area, Switzerland, the United Kingdom and Ukraine, they run only after you click “Accept all” in the cookie banner. Elsewhere, they are on by default. Anyone can turn them on or off at any time via “Cookie settings” at the bottom of every page. These tools do not receive the files you upload.
Under some US state laws, advertising pixels may count as “selling” or “sharing” personal data for targeted advertising; you can opt out of this in Cookie settings.
9. International transfers
We are based in the United States, and your data is processed in the US and in other countries where our providers operate. When we transfer personal data from the European Economic Area, Switzerland or the United Kingdom, we rely on the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework where the recipient is certified, and otherwise on standard contractual clauses approved by the European Commission and their UK equivalent.
10. How long we keep data
- Account data: while your account is open. After you close it, we delete it within 30 days, except records we must keep.
- Video trends: the photo you upload and the result are deleted automatically 30 days after they are created.
- Songs: audio is kept until you delete it or close your account, so that gift pages can be revisited later. Song photos and covers are kept too, unless you turn on automatic deletion after 30 days in your account settings.
- Other uploads and results (photos, videos, lip sync, voiceovers): kept until you delete them, ask us to delete them, or close your account.
- Voice clones: until you ask us to delete them or close your account.
- Backups: deleted data is removed from our backups within 15 days.
- Order and payment records: as long as needed for accounting, tax and legal claims, normally up to 7 years.
- Records of your consents: for 3 years after the related subscription ends; for other consents, 3 years after you withdraw them or close your account.
11. Your rights
Depending on where you live, you can ask us to access, correct, delete or export your data or to restrict our use of it; you can also object to our use of it and withdraw your consent at any time. Write to [email protected]; we reply within one month. If you live in a US state with a consumer privacy law, you can also opt out of targeted advertising (via Cookie settings) and appeal our decision on your request by replying to it.
You can complain to your data protection authority (in the UK, the Information Commissioner’s Office), but please contact us first so we can try to help; we acknowledge complaints within 30 days.
12. Children
GOROB.ai is only for adults aged 18 or older. We do not knowingly collect data from children. If we learn that an account belongs to someone under 18, we close it and delete its data. Do not upload images or recordings that show anyone under 18.
13. Security
We protect data with encryption in transit, access controls and regular backups. If a data breach affects your personal data, we will notify you and the authorities as the law requires — for example, Washington residents within 30 days, and the Washington Attorney General if more than 500 Washington residents are affected.
14. Users in Ukraine
Your data is processed in the United States and other countries outside Ukraine, as needed to provide the Service to you under our contract. You can complain to the Ukrainian Parliament Commissioner for Human Rights.
15. Changes to this policy
We will tell you about significant changes to this policy by email or in your account before they take effect.