Privacy Policy
GSK Media is operated by GSK Group LLC (“we”, “us”). This policy explains what we collect when you use GSK Media, why, who helps us process it, and the choices you have. Questions: support@gskmedia.app.
What we collect
- Account details: your name, email and sign-in provider (Google or email link).
- Business information: what you tell us in setup and in the interview (your business, audience, offer, tone, topics), and your brand assets such as logo, colors and photos you upload or pick from Google Drive.
- Face and voice: the recording you make or upload to create your AI twin, the voice clone made from it, and the drawn character made from your photos. See “Face and voice data” below.
- Content: ideas, scripts, edit plans and videos we make for you, and your messages to the assistant.
- Social accounts and statistics: when you connect a social network, the access needed to post your videos and read their statistics (views, watch time, followers).
- Payments: handled by Stripe. We receive your plan, payment status and the last digits of your card, never the full card number.
- Usage and technical data: what you use and how often (to apply plan limits), and basic logs (IP address, browser, errors) to keep the service safe and working.
How we use it
- To make and post your videos: scripts, your AI twin speaking them, editing, and publishing to the networks you connect.
- To improve your next videos from how the previous ones performed. This learning is about your account only.
- To bill you, apply your plan limits, support you and keep the service secure.
We do not sell your personal information and do not use your face, voice or content to train AI models for anyone else.
Face and voice data
Your face and voice can be biometric information under some laws (for example Illinois BIPA, Texas, Washington, and the GDPR). We create your AI twin and voice clone only with your explicit consent, given in setup, and use them only to make content for your own business. We never sell, lease or trade them, and never let anyone else use them. You can withdraw consent at any time by writing to support@gskmedia.app; we then stop using your twin and delete it.
Retention: your twin, voice clone and source recordings are deleted within 30 days after your subscription ends or you withdraw consent, and in any case no later than three years after your last use of the service.
Who processes data for us
We share data only with providers that run parts of the service for us, under their data-processing terms:
- Supabase (database, sign-in, file storage, United States)
- Anthropic (the Claude AI that writes scripts and plans and runs the assistant)
- HeyGen (your live AI twin and voice)
- OpenRouter and the image models it routes to (drawings, covers)
- Upload-Post (posting to your social networks and reading their statistics)
- Stripe (payments), Resend (sign-in emails), Google (sign-in and Google Drive photos you pick)
- Our hosting provider (servers in North America)
We may disclose information when the law requires it, or to protect the rights and safety of our users and the public.
Google user data
If you sign in with Google we receive your name, email and profile picture. If you connect Google Drive, you choose the individual files we may open; we cannot see the rest of your Drive. We use these files only to put them into your videos. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Your rights and choices
- See, correct, export or delete your data: write to support@gskmedia.app, or edit it in your dashboard.
- Disconnect a social network or Google Drive at any time in your dashboard or in that service’s settings.
- People in the EU, UK and some US states have additional rights (access, deletion, objection, portability, appeal). We answer within 30 days.
Retention
We keep your account data while your account is open. After you cancel, we delete your twin and voice within 30 days and the rest of your data within 90 days, except what we must keep for tax and accounting.
Security
Data is encrypted in transit, stored with access limited to the service and our team, and protected by row-level access rules in the database.
Children
GSK Media is a business service for adults. We do not knowingly collect data from anyone under 18.
Changes
We will post changes here and email you about important ones before they take effect.
Contact
GSK Group LLC, Florida, United States. support@gskmedia.app