Data Residency

Where your content is stored

Your content is stored and hosted in Australia, on Google Cloud Platform and Firebase in the australia-southeast1 (Sydney) region. That covers your brand profiles, your posts and drafts, your uploaded assets, your compliance documents and your audit history.

Where AI processing happens

• Text generation runs in Australia, in the australia-southeast1 (Sydney) region.
• Image generation runs on a global endpoint that pins no region, so your prompt and any reference image you supply may be processed outside Australia.
• Video, music, voice and presenter features process overseas, including the United States.

Some AI-powered features use a range of specialist AI providers, which may process your inputs in Australia or overseas, including the United States, and we take reasonable steps under Australian Privacy Principle 8 to protect them. Each receives only what the feature needs. Where a provider gives us the choice, we've opted out of our data being used to train its models.

A person's face and voice

Where a feature generates a presenter, a voice or a talking-head video from a real person, that person's photograph or voice sample is processed overseas. We record that person's permission before the feature runs, either given by them when they send us their photos and voice, or recorded by the account holder who has it. That record can be withdrawn at any time, which stops the presenter, photoshoot, look, voiceover and video features from using them again until their permission is recorded afresh.

You can ask us to delete the stored photographs, voice samples and generated material for a person at any time through our data deletion page.

What is held outside Australia

• Payments are processed by Stripe in the United States.
• Transactional email is sent through SendGrid in the United States.
• Sign-in identities, meaning your name, email address, sign-in method and any password hash, are held by Google in the United States.

Every service that receives any part of your data, and what each one receives, is listed on our subprocessors page.

Questions

If you need something here in writing for a procurement or compliance review, ask us through our contact form. Our full privacy terms are on the privacy policy.