Version 1.0 — Last updated: April 2026
MyAvatar ApS ("we", "us", "our") is the data controller for personal data processed through the MyAvatar platform. We are registered in Denmark, CVR DK39431009.
Contact: privacy@myavatar.dk
| Category | Examples | Purpose |
|---|---|---|
| Account data | Name, email, password | Account management |
| Payment data | Billing address, last 4 digits of card | Payment processing (via Stripe) |
| Usage data | Videos created, features used, session logs | Service improvement, billing |
| Content data | Scripts, uploaded images, generated videos | Service delivery |
| Technical data | IP address, browser type, device | Security, analytics |
We do not store full payment card numbers — these are handled by Stripe (PCI-DSS compliant).
| Processing | Legal Basis |
|---|---|
| Account management | Contract (Art. 6(1)(b)) |
| Payment processing | Contract (Art. 6(1)(b)) |
| Service improvement | Legitimate interest (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
| Marketing (if opted in) | Consent (Art. 6(1)(a)) |
We share data with:
We do not sell your personal data to third parties.
If you choose to connect your Google Ads account, MyAvatar requests access to the Google Ads API using the https://www.googleapis.com/auth/adwords scope. This connection is optional and is always initiated by you.
We use this access solely to let you create, review, and manage your own advertising campaigns from within MyAvatar's Campaign Engine, acting on your behalf and at your direction. We access only the Google Ads account(s) you explicitly authorise.
MyAvatar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:
You can disconnect your Google Ads account at any time from your MyAvatar connection settings, which revokes MyAvatar's stored access and refresh tokens. You may also revoke access directly at myaccount.google.com/permissions.
If you choose to connect your Gmail account, MyAvatar requests a single Google permission: https://www.googleapis.com/auth/gmail.send. This is the narrowest Gmail permission Google offers. It allows MyAvatar to send an email on your behalf. It does not allow MyAvatar to read, search, modify, or delete any message in your mailbox, and we do not do so.
At the moment you connect your account, we make one call to Google to retrieve the email address associated with it, so we can show you which account is connected.
We send an email only when you explicitly click send on a message you have reviewed, to a recipient you have specified. No background process, scheduled job, or automated agent sends email from your account. Messages sent this way come from your own address and appear in your own Gmail Sent folder.
We store your connected email address and an encrypted OAuth token that allows us to send on your behalf. Tokens are encrypted at rest. We do not store the contents of messages you send beyond what is required to display your own sending history within MyAvatar.
You can disconnect your Gmail account at any time from within MyAvatar, which deletes the stored token. You can also revoke MyAvatar's access directly through your Google Account at myaccount.google.com/permissions.
MyAvatar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
MyAvatar's YouTube features use YouTube API Services.
By using MyAvatar's YouTube integration, you agree to be bound by the YouTube Terms of Service. Any personal data processed by Google in connection with these features is handled in accordance with the Google Privacy Policy.
If you choose to connect your YouTube channel, MyAvatar requests two permissions:
https://www.googleapis.com/auth/youtube.upload — allows MyAvatar to upload a video to your channel when you choose to publish one.https://www.googleapis.com/auth/youtube.readonly — allows MyAvatar to read your channel name and ID, and to read public performance statistics (views, likes, comment counts) for videos published through MyAvatar.We do not request permission to edit or delete your videos, manage playlists, change thumbnails, moderate comments, or otherwise modify your channel, and MyAvatar does not perform any of these actions.
We upload a video only when you initiate publishing — either by clicking publish directly, or by scheduling a publication that you have set up yourself. We read channel information at the time you connect, so we can show you which channel is linked. We read video statistics in order to display performance data for your own published videos inside MyAvatar.
We store your channel ID and channel title, an OAuth token allowing us to publish on your behalf, and performance statistics for videos published through MyAvatar. We do not store copies of videos already on your channel, and we do not access videos that were not published through MyAvatar.
You can disconnect your YouTube channel at any time from within MyAvatar, which deletes the stored token and stops all further access. You can also revoke MyAvatar's access directly through your Google Account at myaccount.google.com/permissions.
If you wish to have stored YouTube data deleted, contact us at the address in the Contact section of this policy.
MyAvatar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If you are a California resident, you have the right to:
We do not sell your personal information.
To exercise your rights, contact: privacy@myavatar.dk
You have the right to:
To exercise your rights: privacy@myavatar.dk
You may also lodge a complaint with the Danish Data Protection Authority (Datatilsynet): www.datatilsynet.dk
| Data type | Retention period |
|---|---|
| Account data | Until account deletion + 30 days |
| Billing records | 5 years (legal requirement) |
| Generated videos | Until deleted by user or account termination |
| Usage logs | 12 months |
We operate from Denmark (EU). Some third-party providers are located outside the EU/EEA. For such transfers, we rely on Standard Contractual Clauses approved by the European Commission.
We use essential cookies for authentication and session management. Analytics cookies require your consent. See our Cookie Policy for details.
MyAvatar is a B2B SaaS platform intended exclusively for business users aged 18 and over. Our Service is not directed at children, and we do not knowingly collect personal data from minors.
MyAvatar is a tool for creating video content. Users who produce content targeting children's audiences are solely responsible for ensuring their content complies with applicable regulations (including COPPA, GDPR-K, and advertising standards) in their respective jurisdictions. MyAvatar does not assume liability for the end use or distribution of user-generated content.
We will notify you of material changes to this Privacy Policy by email or prominent notice on the platform at least 30 days before they take effect.