Privacy Policy

AKAPULU PRIVACY POLICY Last updated: 2026-08-22 This Privacy Policy explains how Akapulu LLC ("Akapulu," "we," "us," or "our") collects, uses, discloses, and retains personal information when you use our websites, applications, APIs, and related services (collectively, the "Services"). By using the Services, you acknowledge this Privacy Policy. In this Privacy Policy, words and phrases such as "including," "for example," and "such as" mean "including, without limitation." 1. Scope This Privacy Policy applies to: - individual users of Akapulu websites and applications, and - individuals who submit contributor, talent, or contractor inquiries or applications through Akapulu websites (including before they create a Services account), and - developer/API users and organizations using Akapulu APIs and integrations. When Akapulu provides Services to a business customer under a separate contract, Akapulu may process information on that customer's behalf as a service provider/processor. In those cases, that customer's contract with Akapulu may control certain processing terms. If your data is processed on behalf of one of our business customers, requests about that data may need to be directed to that customer first. Website usage terms are addressed separately at https://akapulu.com/website-terms. 2. Information We Collect We may collect the following categories of information: 2.1 Account and profile information - account identifiers and contact information (such as first name, last name, and email address), - authentication/account metadata, - plan and account configuration details. 2.2 Avatar and training information - video and audio media recorded by users through Akapulu avatar creation workflows, - voice and likeness data used for avatar creation, - derived files and model-related artifacts generated in processing pipelines, - generated talking-clip audio and video and related processing artifacts, - avatar metadata (such as description and public/private settings). If you choose to make an avatar public, that avatar may be displayed in catalog/public contexts within the Services and made available for use by other logged-in Akapulu users in real-time conversations and for on-demand talking-clip generation through the Services (including our APIs). If your avatar is enabled as public, we may also use, reproduce, display, and distribute that public avatar and related output for Akapulu marketing and promotional purposes (for example on our website, social media, product demos, and sales materials). Akapulu may also publish catalog avatars that we created or generated (including avatars that are not a recording of a particular person). 2.3 Conversation and interaction information - conversation session metadata, - transcript content and transcript metadata, - recording-related metadata, including recording identifiers, references, links, and status data for recordings processed or stored by third-party media providers, - conversation configuration and tool settings. 2.4 Developer and integration information - API key metadata, - endpoint configuration data, - stored secret configuration values, - request/response operational metadata, - talking-clip request content (for example scripts or text you submit to generate a clip), clip identifiers, status, and related generation metadata. 2.5 Knowledge base and document information - uploaded documents and metadata, - embeddings/vectorized content and retrieval metadata. 2.6 Billing and usage information - billing/customer and subscription metadata, - usage metrics (for example minutes, concurrency, and usage limits), - payment-related metadata from billing processors. 2.7 Device, log, and operational data - service logs, timestamps, performance/error diagnostics, and security events, - technical metadata such as IP address, device/browser details, request metadata, and general usage telemetry. 2.8 Information about other people you upload or configure If you upload or submit personal information about another person (for example face/voice media, contact details, or identifying information), you represent that you have all rights and permissions required to do so. 2.9 Contributor and talent applications When you apply or inquire through a web form about paid or unpaid contributor, public-avatar, talent, or similar opportunities, we may collect: - contact and identifying information you submit (such as name and email address), - optional free-text you provide (for example time zone, links to a reel or portfolio, or brief messages), - application or screening materials you upload (for example a photo of your proposed recording setup, which may show your likeness), - technical metadata related to that submission (as described in section 2.7). This information may be collected and processed before you create a Services account. If you later create an account, sign a separate agreement, or use in-product avatar workflows, additional categories of information may be collected as described elsewhere in this Policy. 2.10 Marketing and attribution information When you visit our websites, we may collect information about how you arrived, such as the referring website or link, campaign parameters contained in the URL you clicked (for example UTM parameters), and advertising click identifiers (for example a Google Click ID ("gclid") and similar identifiers from advertising platforms). We may also ask how you heard about us. If you create an account, submit an inquiry, or subscribe to a newsletter, we may associate this acquisition-source information with your account, inquiry, or subscription to understand how people discover the Services and to measure the effectiveness of our marketing. This information is collected using first-party, essential website mechanisms (such as our own session), and where required by law we rely on legitimate interests or your consent as the applicable legal basis. 3. Sensitive and Biometric-Related Information Our Services process voice and visual likeness data to create and operate avatars. Depending on applicable law, this may be treated as biometric or biometric-related information. Examples may include facial geometry inferred from in-app recorded video and voice characteristics inferred from in-app recorded audio. Photos or other images you submit for contributor screening or setup verification may contain visual likeness data and may be treated similarly to other likeness-related information under applicable law. We use this information to provide avatar creation and operation features, improve service quality/model performance, and support security, abuse prevention, and legal compliance. You are responsible for obtaining all legally required notices, rights, and consents for any person whose voice, image, likeness, or personal data you submit to the Services. 3.1 Biometric Data Notice Where required by applicable law, this section serves as notice regarding biometric or biometric-related processing. We may collect, infer, use, store, and process biometric or biometric-related data included in user-submitted media to provide avatar functionality, identity and misuse controls, safety and abuse prevention, legal compliance, and model/platform improvement. We may disclose this data to service providers only as necessary to deliver the Services and only subject to contractual data protection obligations. We retain biometric or biometric-related data according to the retention principles in this Policy, including operational, legal, safety, and compliance needs, and may delete or de-identify such data when no longer required. 4. How We Use Information We use personal information to: - provide, operate, maintain, and improve the Services, - create and run avatars and related AI features, - process recordings, transcripts, conversation flows, and on-demand talking clips, - support developer and API functionality, - evaluate and respond to contributor, talent, or contractor applications and inquiries, and communicate with you about opportunities and next steps, - send account-related, transactional, and service communications (for example security alerts, billing notices, and support messages), - send product update and promotional communications about the Services (for example new features, platform announcements, and company news), - understand how visitors discover the Services and measure the effectiveness of our marketing and campaigns (including acquisition source, referral, and campaign information), - enforce safety, abuse prevention, fraud prevention, and security, - manage billing, metering, and account limits, - comply with legal obligations and respond to lawful requests. If you create an account or otherwise provide your email address to us, we may send you emails about the Services, including product updates and announcements about new features. Product update emails may be promotional in nature. You can opt out of product update and other promotional emails at any time by using the unsubscribe link in those emails or by contacting [email protected]. Even if you opt out of promotional emails, we may still send you non-promotional communications related to your account or the Services (for example billing, security, or support messages). We may also use submitted and generated content to develop, evaluate, maintain, and improve our models and platform performance. If you want to opt out of model-improvement use of your content, contact [email protected]. We review and process opt-out requests in good faith according to operational and legal constraints. Opt-out requests may apply prospectively and may not require removal of prior training, derived artifacts, safety records, or previously completed processing. 5. How We Share Information We may share information with: - infrastructure and hosting providers, - realtime media, transcription, and AI processing providers, - storage/database and data-processing providers, - payment and billing processors, - email delivery and newsletter providers, - analytics and marketing measurement providers (for example Google Analytics and related Google advertising features, where enabled), - security and compliance providers, - professional advisors and legal/compliance recipients where required. For biometric, conversation, and generated-media processing (where used), providers may include third parties used for cloud infrastructure, realtime media, speech processing, model serving, AI processing, and related operations. For other service functions, providers may include third parties used for billing, payments, database infrastructure, security, email delivery, analytics/marketing measurement, and AI/ML functionality. A list of subprocessors may be made available upon request. We may also disclose information: - to comply with law, regulation, legal process, or government request, - to protect rights, safety, security, and prevent abuse/fraud, - in connection with a merger, acquisition, reorganization, financing, or sale of all or part of our business. 6. Sales and Advertising We do not sell personal information. We may use analytics and marketing technologies (including cookies and similar tools from providers such as Google) as described in Section 7. Where required by law, we obtain your consent before using non-essential cookies for analytics or marketing. We do not currently share personal information for cross-context behavioral advertising as defined under California law. If that changes, we will update this Policy and provide any required notices or opt-out mechanisms. 7. Cookies and Similar Technologies We use cookies and similar technologies on our websites for: - essential purposes (for example session, security, and preference features needed to operate the Services), - analytics (for example understanding how visitors use our websites), and - marketing purposes (for example measuring campaign effectiveness and supporting advertising features). Our analytics and marketing technologies may include Google Analytics and related Google advertising features. These tools may collect information such as IP address, device/browser details, pages visited, referral information, and similar usage data. Where required (including for visitors in the EEA, UK, and Switzerland), we present a cookie consent banner and only use non-essential analytics and marketing cookies if you accept. You can change your choice later using the "Cookie preferences" link in the website footer. Rejecting non-essential cookies does not prevent you from browsing our public websites, though some measurement and marketing features will be limited. We may also use necessary technical mechanisms (for example session/local storage or equivalent functionality) required to operate core service features. 8. Data Retention We retain information for as long as reasonably necessary for business operations, model/platform improvement, security, safety, abuse prevention, legal compliance, dispute resolution, and enforcement. Retention periods vary by data type and legal/operational requirements. Depending on service operations and legal requirements, some data may be retained long-term or indefinitely unless deletion is requested and applicable law requires or permits deletion. We may delete, de-identify, or aggregate data when no longer needed, subject to legal and operational exceptions. If you request that a public avatar be removed, we will stop future platform-wide use of that avatar. You may also request broader data deletion by contacting us. Certain records may still be retained where required or permitted by law, including conversation recordings and talking clips already created using that avatar. 9. Your Privacy Rights and Requests Depending on your jurisdiction, you may have rights to request: - access to personal information, - correction of inaccurate personal information, - deletion of personal information, - portability of certain data, - information about our data practices, - opt out of promotional or product update emails (for example by using the unsubscribe link in those emails or contacting [email protected]). You may also request that an avatar be switched from public to private by contacting us. To submit a privacy request, contact: [email protected] If your data is processed by Akapulu on behalf of a business customer, we may direct you to submit your request to that customer and coordinate with that customer as required by applicable law and contract. We may request information to verify your identity and authority before fulfilling a request. We respond within timelines required by applicable law. In some cases, we may decline or limit requests where permitted by law, including for security, fraud prevention, legal compliance, or technical/operational reasons. Where permitted by law, you may submit a request through an authorized agent. We may require proof of the agent's authority and may still require identity verification from you directly. If we deny your request, you may contact us to appeal or request additional review at [email protected]. We will not unlawfully discriminate against you for exercising applicable privacy rights. 10. California Privacy Disclosures For California residents, this section summarizes our practices under applicable California privacy law (including CPRA, where applicable): - categories collected: identifiers, account data, application and recruiting information (which may include images submitted for screening), audio/video content (including generated talking-clip media), transcript and interaction data, talking-clip request text, internet/network activity, usage and billing metadata, and other information described in this Policy, - purposes: service delivery, recruiting and contributor onboarding, security/fraud prevention, billing, analytics and marketing measurement, legal compliance, and service/model improvement, - sources: directly from users, from user-integrated tools/configurations, and from service providers, - disclosures: to service providers, contractors, and other recipients described above for business purposes (including analytics and marketing measurement providers where used), - sale/share: we do not sell personal information and do not currently share personal information for cross-context behavioral advertising. California residents may submit requests using [email protected]. 11. International Data Processing If you access the Services from outside the United States, your information may be processed and stored in the United States or other jurisdictions where our providers operate. Data protection laws in those jurisdictions may differ from those in your location. 11.1 Notice for EEA/UK users If you are located in the EEA or UK, where applicable we process personal data under one or more of these legal bases: contract necessity, legitimate interests, legal obligations, and consent. Where personal data is transferred internationally, we use legally recognized transfer mechanisms where required by applicable law (for example, adequacy decisions, standard contractual clauses, or comparable lawful mechanisms). 12. Security We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security. 13. Children's Privacy The Services are not directed to children. You must be 18 or older to use the Services. 14. Changes to This Privacy Policy We may update this Privacy Policy from time to time. For material updates, we may provide notice by email, in-product notice, posting, or similar means. Updates are effective when posted unless otherwise stated. Your continued use of the Services after an update means you acknowledge the updated Policy applies. Previous versions may be available upon request. 15. Contact Akapulu LLC Email: [email protected] Mail: c/o UNITED STATES CORPORATION AGENTS, INC. (1505 Corporation), 500 N Brand Blvd, Suite 890, Glendale, CA 16. Other Sites and Services The Services may link to or interoperate with third-party websites, applications, and services. We are not responsible for the privacy practices of third parties, and you should review their policies separately.