DOLPHIN AI — PRIVACY POLICY

Dolphin AI (the "Service") is an AI-powered video production platform operated by Greenhorn Wellness Private Limited ("Dolphin AI", "we", "us", or "our"). The Service allows teams to generate talking-head videos, AI avatars, voiceovers, and branded video content from text scripts, using generative-AI pipelines such as talking-head (A-Roll), voiceover + visuals (B-Roll), and combined (A+B Roll) generation.

This Privacy Policy explains what information we collect about you when you access or use the Service (available at trydolphin.ai and associated applications), how we use and share that information, the rights and choices available to you, and the measures we take to protect it. This Policy applies to individual users, administrators, and organization owners who interact with the Service in any capacity.

By using the Service, you acknowledge the practices described here. If you do not agree with this Policy, please do not use the Service.

Important notices. Certain jurisdictions grant you additional rights — see the regional addenda at the end of this Policy, including: (i) Notice to European Users (EU/EEA and United Kingdom); (ii) California Consumer Privacy Act (CCPA) Addendum; (iii) Virginia Consumer Data Protection Act (VCDPA) Addendum; and (iv) Colorado Privacy Act (CPA) Addendum.

1. Who We Are & How to Contact Us

Dolphin AI is operated by GreenHorn Wellness Private Limited, a company incorporated on Feb 20, 2020 in India. It is registered at Registrar of Companies, ROC Bangalore. For privacy-related questions, rights requests, or complaints, please contact us using the details below.

• Entity: Greenhorn Wellness Private Limited
• Registered address: 1257/37, 2nd & 3rd Floor, Hanto Orion Center, 14th Main St, Sector 7, HSR Layout, Bangalore South, Karnataka, India, 560102
• Support: support@dolphinai.pro

2. Scope of This Policy

This Policy applies to personal information we collect:

• Through our websites, mobile applications, and any other digital property that links to this Policy;
• When you create a personal or organization account and use our generation features (avatars, voice, scripts, video generation);
• When you receive an invitation to join an organization or workspace and accept it;
• When you interact with us via email, chat, support channels, or marketing communications; and
• When we receive personal information about you from third-party sources described below.

This Policy does not apply to third-party websites, applications, or services that may be linked to or integrated with the Service. Please review the privacy practices of any third-party service you interact with.

3. Key Concepts: Organizations, Workspaces, and Roles

The Service is structured around organizations and workspaces within them. Understanding this structure is important because it affects who within your team can see your content and activity on the Service.

• Owner. The individual who first creates an organization becomes the Owner. There is one Owner per organization. The Owner controls org-level settings, billing, administrator membership, and ownership transfers.
• Admin. The Owner may appoint one or more Administrators. Admins manage workspaces, invite and remove members, manage workspace asset libraries, control credit allocations, and view all projects and analytics within the organization.
• Member (User). Members are individuals who have been invited into one or more workspaces to create and collaborate on video projects.

What this means for your privacy. If you join an organization by invitation, the Owner and Admins can view your profile information, the projects you create, the scripts and prompts you submit, the characters/avatars you generate, the audio and video outputs you produce, and your activity and usage within the organization, including credit consumption.

4. Information We Collect

4.1 Information You Provide to Us

We collect the following categories of personal information when you provide it to us directly:

• Contact data: first and last name, email address, phone number, billing and mailing address, professional title, and company name.
• Account credentials: username and authentication identifiers. Dolphin AI uses email one-time-password (OTP) verification and/or single sign-on (e.g., Google OAuth).
• Profile data: profile photo (optional), job title, bio, preferences, and any other information you choose to add to your profile.
• Organization data: the name of the organization and workspaces you create or administer, team-member lists, role assignments, and workspace descriptions.
• Communications data: the contents of messages, support tickets, feedback, survey responses, and other communications you send us.
• Transactional data: information related to purchases of subscriptions or credits, including plan type, credits purchased, invoices, and transaction history.
• Payment data: payment card information or bank account details are collected and processed directly by our third-party payment processor and are not stored by Dolphin AI.
• Marketing preferences: your preferences for receiving marketing communications and details about your engagement with them.

4.2 Content You Generate or Upload

• Scripts and prompts: text scripts, dialogue, character descriptions, scene descriptions, commands, and other instructions you submit for video generation.
• User-uploaded media: photos, reference images, video clips, audio files, brand logos, fonts, color palettes, outro templates, and other assets you upload.
• Generated outputs: AI-generated avatars, voiceovers, synthesized video segments, stitched video files, and associated metadata.
• Metadata: information about how, when, where, and by whom content was submitted or generated.

4.3 Biometric Information (Face and Voice Data)

Face data for avatar generation. When you use avatar-generation features and upload or submit a face image, we process that image to extract facial geometry and coordinates that enable lip-sync, expression mapping, and avatar animation.

Voice data and voice cloning. If you choose to use our voice-cloning or custom-voice features, we collect voice samples you upload or record and process them to create a voice profile.

Biometric notice and consent. Facial coordinates, facial-appearance vectors, and voice prints may qualify as biometric identifiers under certain laws. We collect and process biometric data only with your consent and strictly for the purpose of delivering the requested feature. You may withdraw consent and delete biometric data at any time by deleting the relevant avatar or voice profile from your account settings or by contacting support@dolphinai.pro.

No sale of biometric data. We do not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information.

4.4 Information Collected Automatically

• Device data: operating system, browser type, screen resolution, language settings, IP address, and unique device identifiers.
• Usage data: pages viewed, features used, time spent, navigation paths, click and scroll behaviour, referrer URLs, and audit events.
• Approximate location: we infer city- or region-level location from IP address for analytics and fraud prevention.
• Cookies and similar technologies: see Section 9.

4.5 Audit Log Data

The Service maintains an audit log at the organization and workspace level, recording actions such as member invitations and removals, role and permission changes, asset uploads and deletions, workspace creation and archival, credit limit changes, and administrative events.

4.6 Information from Third Parties

• Authentication providers such as Google (when you sign in with Google OAuth).
• Organization owners and admins who may provide your email and role when inviting you to a workspace.
• Service providers and analytics vendors who provide us with information to help us operate and improve the Service.
• Publicly available sources, where permitted by law.

5. How We Use Your Information

5.1 To Provide and Operate the Service

• Create and maintain your personal or organization account;
• Authenticate you and route you to the correct workspace;
• Process your scripts, prompts, uploaded media, and voice samples through our generation pipelines to produce video outputs;
• Generate avatars, perform lip-sync, synthesize voice, and stitch video scenes;
• Store your projects, drafts, and generated assets;
• Process payments, manage subscriptions, track credit balances, and send billing notifications;
• Maintain audit logs and role-based access controls;
• Provide customer support and respond to your inquiries.

5.2 To Improve the Service

• Analyze how the Service is used, identify bugs, and monitor performance;
• Develop new features, models, and generation pipelines;
• Perform research and testing on aggregated or de-identified data.

Use of your content to train AI models. By default, we do not use your scripts, prompts, uploaded images, face data, voice samples, or generated outputs to train our general-purpose generative models. If we ever change this default, we will provide advance notice and, where required by law, obtain your consent.

5.3 Personalization and Recommendations

• Remember your pipeline, voice, and style preferences;
• Suggest appropriate pipelines based on your script content;
• Recommend assets from your workspace library that may be relevant to a project.

5.4 Communications

• Send you service-related messages;
• Send you product announcements, tips, and marketing communications (you may opt out at any time);
• Respond to your support requests and feedback.

5.5 Security, Fraud Prevention, and Legal Compliance

• Detect, prevent, and investigate fraud, abuse, security incidents, or violations of our Terms of Service;
• Enforce our agreements and protect our rights, property, and safety;
• Comply with applicable laws, regulations, legal processes, and lawful government requests;
• Maintain records for tax, accounting, and audit purposes.

5.6 Aggregated and De-Identified Data

We may create aggregated, de-identified, or anonymized data from personal information. Once data can no longer reasonably be associated with an individual, we may use and share it for any lawful business purpose.

6. How We Share Your Information

6.1 Within Your Organization

Your profile, projects, generated content, asset uploads, credit usage, and audit-log activity are visible to the Owner and Admins of any organization you belong to, and — depending on workspace settings — to other members of the same workspace.

6.2 Service Providers and AI Subprocessors

We share personal information with third-party vendors that perform services on our behalf, including cloud hosting (AWS), generative-AI subprocessors, payment processors, email delivery, analytics, and customer support.

6.3 Authentication and Linked Services

If you sign in with Google or another single-sign-on provider, we exchange information with that provider as needed to authenticate you.

6.4 Legal, Safety, and Compliance

We may disclose personal information when reasonably necessary to comply with applicable law, enforce our Terms, protect rights and safety, or detect fraud and security incidents.

6.5 Business Transfers

If Dolphin AI is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any change in ownership.

6.6 Professional Advisors

We may share personal information with our lawyers, auditors, accountants, bankers, and insurers where necessary.

6.7 With Your Consent or at Your Direction

We share personal information with third parties when you direct us to do so or provide your consent.

6.8 What We Do Not Do

We do not sell your personal information in exchange for monetary consideration. Some U.S. state laws define "sale" or "sharing" broadly enough to include certain cookie-based advertising. Please review the regional addenda for state-specific opt-out rights.

7. Legal Bases for Processing (Users in Europe)

If you are located in the EEA, UK, or Switzerland, we rely on the following legal bases under the GDPR:

• Contractual necessity — processing necessary to provide the Service you have requested.
• Legitimate interests — where necessary for our legitimate interests in operating and improving the Service.
• Consent — where you have given consent to a specific processing activity. You may withdraw consent at any time.
• Legal obligation — where processing is necessary to comply with a legal or regulatory obligation.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy. General retention periods:

• Account data: retained while your account is active. On deletion, purged from active systems within 90 days.
• Projects and generated content: retained while the relevant workspace is active. Individual items can be deleted at any time.
• Biometric data: retained only while the corresponding avatar or voice profile exists.
• Audit logs: retained for 12-24 months.
• Transaction and tax records: retained for the period required by applicable law (typically up to 7 years).
• Backups: data in encrypted backups is overwritten on a rolling 30-90 day cycle.

9. Cookies and Similar Technologies

We use cookies, pixels, web beacons, local storage, and similar technologies to operate the Service, remember your preferences, keep you signed in, measure performance, and understand how users engage with the Service. Categories include:

• Strictly necessary: required for authentication, session management, and security.
• Functional: remember your preferences such as pipeline defaults or voice choice.
• Analytics: measure how users interact with the Service so we can improve it.
• Marketing: used only where you have given consent or as permitted by law.

You can control non-essential cookies using the cookie-preferences tool on our website. Most browsers also allow you to block or delete cookies through browser settings.

10. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete information.
• Deletion — request deletion of your personal information.
• Portability — request a machine-readable copy of personal information you have provided to us.
• Restriction — request that we restrict certain processing.
• Objection — object to processing based on our legitimate interests, or to direct marketing.
• Withdrawal of consent — where processing is based on consent, withdraw it at any time.
• Complaint — lodge a complaint with your local data-protection authority.

How to exercise your rights. Many of these rights can be exercised directly in your account settings. For anything else, email support@dolphinai.pro. We will generally respond within the time required by applicable law.

10.1 Marketing Opt-Out

You may opt out of marketing emails by clicking the "unsubscribe" link at the bottom of any marketing email, by adjusting preferences in your account, or by emailing support@dolphinai.pro.

10.2 Do Not Track

Our Service does not currently respond to "Do Not Track" browser signals, because no industry standard has been adopted.

11. Security

We take reasonable and appropriate technical, administrative, and physical safeguards to protect personal information. These include encryption of data in transit using TLS, encryption of data at rest, access controls and least-privilege permissions, audit logging, secure software-development practices, employee confidentiality obligations, and periodic security reviews.

No method of transmission or storage is perfectly secure. If we become aware of a security incident that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

12. International Data Transfers

Dolphin AI is headquartered in India and we use service providers located in the United States and other countries. Your personal information may be transferred to, stored, or processed in countries whose data-protection laws differ from those of your country of residence.

Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or adequacy decisions.

13. Children

The Service is not directed to, and we do not knowingly collect personal information from, individuals under 16 years of age. If you believe a child has provided us with personal information, please contact support@dolphinai.pro and we will take appropriate steps, including deletion, as required by law.

14. Third-Party Links and Integrations

The Service may contain links to, or integrations with, third-party websites and services. Those third parties operate under their own privacy policies, which we do not control. We encourage you to review the privacy policies of any third-party services you use.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through an in-product notice before the changes take effect. Your continued use of the Service after the effective date constitutes your acknowledgment of the updated Policy.

16. Contact

For any questions, concerns, complaints, or rights requests related to this Privacy Policy, please contact:

• Email: support@dolphinai.pro
• Postal address: 1257/37, 2nd & 3rd Floor, Hanto Orion Center, 14th Main St, Sector 7, HSR Layout, Bangalore South, Karnataka, India, 560102