Biometric information notice
Last updated 27 October 2026
What Is Measured, and by Whom
To dub a video, a provider analyses the voice and produces a synthetic voice speaking the new words. To lip-sync it, a provider analyses the face and redraws the mouth. The print of a voice and the geometry of a face are biometric data under the law of Illinois, Texas and Washington, and under the GDPR.
Cralio does not extract, compute or store a faceprint, a voiceprint or any biometric template. There is no way to upload a voice sample or pick a cloned voice. We hold your files and send them only to the provider that does the work for the mode you chose. The subprocessors page says which company does what, where it is, how long it keeps what it receives, and which two may use it to improve their models.
Purpose, and No Sale
Your files are processed only to produce the output you ordered. We never sell, lease, trade or otherwise profit from biometric data, and nobody pays us for access to it.
Retention and Destruction
We keep your files for the window in the retention table, shown on every job, or for a window of up to 30 days we have agreed with you; to ask, write to info@cralio.app. Work in a live review link is kept until the link ends, up to 30 days after delivery. Access ends when the window closes, and the files are usually deleted within six hours after it. The one exception is material the law requires us to preserve, described in the acceptable use policy. What a provider keeps is governed by its own retention; we cannot delete from its systems for you.
The Consent You Must Hold
You collect the face or the voice, and you are its controller. Laws including the Illinois Biometric Information Privacy Act require written, informed consent from each person before their biometric data is collected or disclosed. You need that consent from every person whose face, voice or name is in what you send — in a file or in the words you write — and from anyone whom you describe in what you send.
You give that promise by accepting Terms §3. Until you have accepted the current version, Cralio refuses a new video, a new set of creatives, a new track or a new generation, and charges nothing for the refusal.
It is required just the same where nothing asks you. A retry, a re-render, a refinement, a caption edit, a second opinion or a visualiser for a job you already sent runs on the acceptance under which that job was sent.
The consent has to cover:
- that their likeness or voice will be reproduced by an AI model;
- which languages the result will speak;
- where it may be published;
- how long the data will be kept;
- which companies will process it, named or as a class that includes them;
- that the provider may use the material to improve its own models where its terms allow that, as HeyGen’s and WaveSpeed’s do;
- for a creative ordered at a banner size, its transfer to WaveSpeed outside the EEA, where there is no adequacy decision or Standard Contractual Clauses, consented to explicitly.
You will produce that consent to us within five business days of our asking. You will not upload, or ask a model to produce, the face or voice of anyone under 18. A model release, an employment contract, a talent agreement or the fact that a video is already public is not that consent.
If You Appear in a File
If your face or voice is in something someone else uploaded, the person who uploaded it decides what happens to it, and we act on their instruction. Write to info@cralio.app: we pass your request to them without undue delay and help them answer, and we reply to you within one month, or within three for a complex request, as the privacy policy sets out.
We cannot search for you by face or voice, because nothing here measures one. If you tell us whose account it is likely to be, we can look at that account’s jobs. Deleting a file and stopping a job are the uploader’s controls; what we do ourselves is put the account on hold and preserve material where the law requires it.
This notice is part of the terms of service. We will not change this notice so as to reduce the protection it gives without your agreement; any other change is published here with a new date. For anything not covered here, write to info@cralio.app.