Privacy notice
Updated 3 October 2026
This notice explains what FaceDesk, the operator of facedesk.ai, collects when you use the studio, why we use it, and who else handles it. It covers the account and the product. Payments are handled by Paddle, who publish their own privacy notice.
Who we are
FaceDesk is the service at facedesk.ai. For questions about your personal data, email support@facedesk.ai.
What we collect
- Account data: your email address, a sign-in session, and whether your email is confirmed
- Billing state: your plan, subscription status, billing-cycle date, and credit ledger. Not your card number
- Influencer data: the name, age, gender, language, accent, and About you give an influencer
- Voice data: the voice descriptions you write, the voice samples, and the voice you keep for an influencer
- Face photos you upload, the likeness confirmation, and the trained Soul ID
- Look data: the look descriptions you write, the looks and identity sheets the studio generates from them, and your thumbs ratings of the sheets
- Prompts, job settings, and the stills, hooks, and talking videos the studio makes
- Support messages you send us
- Technical data needed to run the site, such as a session cookie and basic page-view analytics
Face photos
Face photos are used to train a likeness for that influencer. They are stored in private storage, and they are sent to Higgsfield so it can create the Soul ID and later render stills and hooks of that person. They are not used to identify you, the account holder, and they are not sold.
You confirm, before training, that you have permission to use the person’s likeness, or that the person is not real. Do not upload anyone under 18. See the Terms of Service.
Why we use it
- To run your account and keep you signed in
- To generate an influencer's look, train it, design its voice, and generate the stills, hooks, and talking videos you confirm
- To see how often identity sheets keep the same person in every view, from the thumbs ratings you give them
- To keep the credit ledger, apply a plan, and remove credits if a payment is refunded
- To answer a support request or a complaint
- To protect the service against misuse
Where the GDPR applies, we rely on the contract with you to provide the studio, and on a legitimate interest to keep the service secure and to understand basic traffic. Sign-in cookies are required for the account to work.
Who else handles it
We use these processors to run the studio. They handle data on our instructions, for the purpose named here.
- Supabase stores the account, the database, and private files, and sends sign-in email
- Vercel hosts the site and provides web analytics of page views
- Higgsfield receives face photos, prompts, stills, the look descriptions you write, and the generated looks and identity sheets, to train a Soul ID and to render Soul 2 stills, Kling 3 hooks, Seedance 2.5 hooks, Soul 2 looks, and Grok Image 2.0 identity sheets
- Google receives the look descriptions you write, with the influencer’s age and gender, and creates the first face, the four looks you pick from, with Nano Banana 2 through the Gemini API
- ElevenLabs receives the influencer's name, a voice description (yours, or one built from the profile: age range, gender, language, accent, and the start of About), sample text, scripts, and internal ids, and creates the voice audio: the voice samples, the kept voice, and the speech in talking videos
- HeyGen, on Creator and Studio, receives a still and the recorded speech to create a talking video for that influencer
- Resend may send authentication email when custom email is enabled
Paddle.com is the merchant of record for plans and credit packs. Paddle processes the payment, tax, invoices, and refunds as its own controller. FaceDesk does not receive or store your card number. Paddle’s privacy notice applies to that payment data. Buyer support is at paddle.net and help@paddle.com.
We do not sell personal data.
How long we keep it
We keep account data, influencer files, and the credit ledger while the account is open. You can ask us to delete the account and the files. Copies in backups disappear on the backup cycle. Ledger rows that accounting or tax law requires us to keep may be retained after the account is deleted, with the files and face photos removed.
Your rights
Depending on where you live, you can ask for a copy of your personal data, a correction, deletion, or a limit on how we use it, and you can object to a use based on legitimate interest. Email support@facedesk.ai. We aim to answer within 14 days.
You can complain to a data protection authority. In Israel, that is the Privacy Protection Authority. If you are in the EEA or the United Kingdom, you can complain to the authority where you live.
Cookies
The site sets cookies so your sign-in session stays active. Vercel Web Analytics measures page views. We do not use advertising cookies, and we do not use the session to build an advertising profile.
Where data is processed
FaceDesk is operated from Israel. Supabase, Vercel, Higgsfield, Google, ElevenLabs, HeyGen, Resend, and Paddle may process data in other countries, including the United States and the European Union. Where the GDPR requires a transfer tool, we use the provider’s contractual safeguards.
Changes
We post changes on this page. The date at the top is the date of the current notice.