Privacy Policy

Last updated October 18, 2026

Everygen is an AI video and image service run by Viewmax LLC, a Delaware company doing business as Everygen and formerly as Viewmax. In this policy "Everygen", "we" and "us" mean Viewmax LLC. This policy covers our website, app, API, MCP connectors and marketing (the "Service").

The short version

• We collect what you give us, such as your account details, uploads and prompts, and what your device sends us, such as your IP address and the pages you use.
• We send your prompts and media to the AI providers that make what you ask for. Our subprocessor list names every one.
• We do not use your content to train AI models.
• We do not sell personal information for money. We share some data with Meta and Google for advertising, which some US laws call "sharing", and you can opt out.
• Only upload faces or voices you have the right to use. We delete that data on the schedule in our Biometric Data Policy.
• You can download your data and delete your account from your account page.

1. Who we are and how to reach us

Viewmax LLC, doing business as Everygen, is responsible for your personal information. For privacy questions and requests, email support@viewmax.io.

2. What we collect

This section is also our notice at collection under California law. The table lists what we have collected in the last 12 months and whether we share it with advertising partners. Section 7 says how long we keep each kind of information. We do not sell any of it for money.

Where it comes from. From you; from your device; from Google if you sign in with Google (your name, email and profile picture); from Stripe and Chargeblast about your payments; and from public web pages and social posts when you ask us to fetch a link.

Connected Instagram and Facebook accounts. If you choose to connect an Instagram professional account or Facebook Page, we receive the account or Page identifiers, app-scoped user identifier, username or Page name, granted permissions, access tokens and their expiration information. When you use Analytics, we request available follower counts, account performance insights and information about published posts, including captions, publication dates, links and engagement counts. We use this information to identify your connected account and display its performance to you. This integration is read-only: it does not publish content, send messages, manage comments or manage advertising on your behalf. Connecting a social account is optional and separate from signing into Everygen.

We do not ask for Social Security numbers, government ids, precise location or health information. Please keep that kind of information out of your prompts and uploads.

3. How we use it

• To run the Service: your account, your projects, your generations and messages about them.
• To make what you ask for: we send your prompts and media to the AI provider for the tool or model you use and return the result.
• For payments: charging you, credits, subscriptions, refunds, chargebacks and fraud checks.
• For support: answering you and fixing what went wrong.
• For safety: preventing fraud and abuse, handling reports and copyright notices, and enforcing our Terms.
• To fix and improve the Service: logs, error reports, session replays, analytics and A/B tests.
• For marketing: emails you can turn off, and measuring our ads with Meta and Google.
• For legal reasons: tax and accounting, answering lawful requests and defending claims.

We may also make aggregated or de-identified statistics, such as how many videos were made in a week, and we do not try to re-identify them. We do not make decisions with legal or similarly significant effects about you by automated means alone.

4. AI and your content

• We do not use your uploads, prompts or results to train or fine-tune AI models. What an AI provider may do with what we send it is set by its terms for API customers.
• The providers we use are OpenAI, Anthropic, Google, Groq, ElevenLabs, Kling, BytePlus (ByteDance), fal, Black Forest Labs, xAI, Modal, Tavily, HikerAPI, ScrapeCreators, and RapidAPI. Some keep a copy of what we send: cloned voices are stored at ElevenLabs, reference media for Seedance is stored in a BytePlus asset library, characters can be registered as elements at Kling, and some Google video requests are sent with storage turned on.
• Our staff look at your content only to answer a support request you made, to handle a report or suspected abuse, or when the law requires it.
• Videos you export from the editor carry a tag in the file's metadata saying they are AI-generated.
• AI output can be wrong. Do not rely on it for decisions about people.

5. Face and voice data

Cloning a voice, or turning a photo of a face into an avatar, character or AI Clone, creates data that may count as biometric data. You agree to how we handle it when you accept our Terms at sign-up and use a face or voice feature, and every face or voice upload reminds you to upload only faces or voices you have the right to use. We use this data only to make what you ask for, we never sell it, and we delete it after 12 months without use. Our Biometric Data Policy has the details, including the full retention schedule and the notice for Washington residents.

6. Cookies, pixels and error recordings

We use cookies, local storage, pixels and similar tools. Our Cookie Policy describes them.

• In the EEA, UK and Switzerland the Meta Pixel and Conversions API, Google Ads and Google Analytics cookies, and our own A/B test, experiment and referral cookies wait until you click Accept in the cookie banner. Google's tag still loads, in a mode that sets no cookies until you accept. Until then we send Meta nothing. You can change your choice at any time with Cookie settings.
• Everywhere else these run by default. You can opt out on Your Privacy Choices or with a Global Privacy Control signal. After you opt out we tell Meta and Google to limit how they use the data (Meta's Limited Data Use and Google's restricted data processing).
• Ad pixels do not run on password reset pages, shared project pages or Learn pages.
• Error recordings. Sentry, our error monitoring provider, receives error reports from everyone. It also records session replays: the whole session for anyone who has ever had a paid plan, 1% of other sessions, and any session where an error happens. A replay shows the page layout and the text on screen. Anything you type is hidden and images and video are left out. The content of the app's requests to our servers is recorded, except for sign-in, payment, account, support, referral, upload and AI Clone requests. We give Sentry your user id, but not your email, name, cookies or IP address, although a replay shows your email or name if it is on screen. Replays are not covered by the cookie banner.

7. How long we keep it

We keep information for the periods below and then delete it.

Legal holds. If we must keep an account's data for a legal claim or an investigation, we place it on hold. While the hold lasts, account deletion and the 12-month face and voice deletion skip that account. Both run once the hold ends.

Connected accounts. We store Instagram and Facebook identifiers and connection metadata while the connection is on, and we encrypt the saved access tokens. Disconnecting removes the saved connection and token from the active database. It does not delete your Instagram or Facebook account, its posts, or revoke the app in Meta. A keyed hash of the provider identifier is kept briefly so an authorization already in progress cannot restore the deleted connection; that record has no access token and is removed by periodic cleanup.

Reports and takedowns. When we take shared content down after a report or a copyright notice, we turn off its link and keep the file and the report as a record.

8. Deleting your account and downloading your data

Delete your account

Go to your account page and choose Delete account. We ask for your password, or a recent sign-in if you use Google. When you confirm:

• Your plan is cancelled. An active plan runs to the end of the period you paid for; a paused or overdue plan ends at once. We do not refund it.
• You are signed out everywhere, connected apps lose access and auto top-up turns off.
• We email you a link to undo the request. You can also undo it by signing in. Either works for 30 days.

When the 30 days end, a daily job erases the account. It deletes your cloned voices at ElevenLabs, your reference media at BytePlus, your files in our storage, and your projects, generations, Studio chats and other content, then removes your name, email and sign-in methods from your account record. Section 7 lists the records we keep after that.

Account deletion does not reach these yet:

• Records of Studio and AI requests at Langfuse, our AI request tracing provider, stay until we delete them. Account deletion does not remove them yet.
• Error reports and session replays at Sentry are deleted when the retention period of our Sentry plan ends.
• Copies of your files held in Cloudflare's cache can stay reachable at the same web address until the cache drops them.
• Characters we registered with Kling stay at Kling. Delete a character before you delete your account to remove it from Kling.
• Your contact record and email history at Resend, our email provider, stay until we remove them. Account deletion does not remove them yet. Email us and we will.
• If you are in a list of paying subscribers we give Meta so it stops showing you our ads, a hashed copy of your email is in it. We rebuild that list every night, so it drops out once your plan has ended or your account is erased.
• Videos you export from the editor are rendered on Amazon Web Services, and the rendered file stays in our AWS storage. Account deletion does not remove these yet.
• Copies AI providers keep under their own terms, described in section 4.

Download your data

On your account page, choose Email me my data. We email you a link to a file with your profile, plan, credit history, generation records with links to the files, projects, voice, and your consent and Terms records. The link works for 7 days and then we delete the file. You can ask for one copy a day. Studio chats are not in the file yet; email support@viewmax.io if you want them.

9. Who we share it with

We do not sell personal information for money, and we have not in the last 12 months. We share it with:

• Service providers that work for us: the AI providers in section 4; Vercel, PlanetScale, Cloudflare, Amazon Web Services, Upstash, Inngest, and Resend for hosting, storage, background jobs and email; Stripe and Chargeblast for payments and chargebacks; and Sentry, Langfuse, and Axiom for error monitoring, AI request tracing and logs. The subprocessor list says what each one does and what it receives.
• Advertising partners, Meta and Google, to measure our ads and to keep paying subscribers out of them. US state laws call this "sharing" or "targeted advertising". Opt out on Your Privacy Choices.
• People and services you choose, when you turn on a share link, or connect an app or AI assistant to your account through our API or MCP connectors.
• Professional advisers such as lawyers, accountants and insurers.
• Authorities, when the law requires it or to protect someone from serious harm. Our law enforcement guidelines explain how we handle requests.
• A buyer or successor in a merger, financing, acquisition or bankruptcy, who must honor this policy for data collected under it.

If you share content publicly, anyone with the link can see, copy and use it.

10. Where your data goes

We are based in the United States and most of our providers process data there. Kling and BytePlus process data at endpoints in Singapore. Kling (Kuaishou) and BytePlus (ByteDance) are headquartered in China.

For people in the EEA, UK and Switzerland, transfers to US providers certified under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions rely on that framework. Transfers to other providers rely on the European Commission's Standard Contractual Clauses in the provider's data processing terms, where those are in place. Email support@viewmax.io to ask which safeguard applies to a provider.

11. Security

We use HTTPS, store passwords hashed and Google sign-in tokens encrypted, limit admin tools to staff, and log every change staff make through them. No system is perfectly secure.

Files you upload and generate are stored at long, unlisted web addresses. Anyone who has the exact address can open the file, including after you delete the item from your library, until the file itself is deleted (section 7).

If a breach affects your personal information, we will tell you and regulators as the law requires. Report security issues to security@everygen.ai, the contact in our security.txt file.

12. Your choices and rights

Wherever you live, you can:

• Get a copy of your data from your account page (section 8) or by email.
• Correct it in your account settings or by email.
• Delete your account from your account page (section 8), or delete single items from your library. Removing an item from your library does not delete every copy we or our providers hold.
• Stop marketing email with the unsubscribe link or your email settings. If you sign up from the EEA, UK, Switzerland or Canada, marketing email starts off and stays off until you turn it on. We still send receipts, payment notices and security messages.
• Opt out of ad sharing on Your Privacy Choices, with Cookie settings, or with a Global Privacy Control signal.
• Disconnect Instagram or Facebook from Account → Connected accounts, or remove the app in Meta's settings. We process Meta deauthorization and data-deletion requests and return a confirmation code. Email support@viewmax.io to ask us to remove a connected account directly. Do not send passwords or access tokens.
• Withdraw face or voice consent by deleting the voice, avatar or character, or by emailing us.

How to make a request. Email support@viewmax.io from the email address on your account. We may ask you to confirm your identity. We answer within 45 days in the US and within one month in the EEA, UK and Switzerland, and if we need longer we will tell you why. Requests are free. You can ask someone to make a request for you; we will ask for your signed permission and may ask you to confirm your identity with us directly. We will not treat you differently for using your rights.

13. US state privacy rights

Depending on your state, including California, Colorado, Connecticut, Virginia, Texas, Oregon and others with similar laws, you may have the right to:

• know what we collect, use and disclose, and get a copy;
• correct or delete it;
• opt out of the sale or sharing of personal information and of targeted advertising;
• opt out of profiling with legal or similarly significant effects, which we do not do;
• limit the use of sensitive personal information;
• get a list of the third parties we have disclosed your data to, in states that give that right;
• appeal our decision on your request.

Sensitive information. We collect account login details and face and voice data. We use them only to provide the Service you ask for, so the right to limit does not change how we use them. We collect face or voice data only when you use a feature that needs it.

Do not sell or share. While we do not sell personal information for money, our use of Meta and Google advertising tools may count as a "sale" or "sharing" under some state laws. Opt out on Your Privacy Choices, by email, or with a Global Privacy Control signal, which we treat as an opt-out. When you are signed in, your choice follows your account.

Appeals. If we turn down your request, reply to our decision with "Appeal" or email support@viewmax.io. We will answer within 60 days. If you disagree with the result, you can contact your state attorney general.

California Shine the Light. We do not give personal information to third parties for their own direct marketing. You can ask us about this at support@viewmax.io.

Nevada. We do not sell covered information as Nevada law defines it. You can ask us to opt you out of any future sale at support@viewmax.io.

14. Children

Everygen is for people 18 and over, and we ask you to confirm your age when you sign up. If we learn that someone under 18 has an account, we will close it and delete their data. Parents can contact us at support@viewmax.io. Do not upload the face or voice of anyone under 18.

15. EEA, UK and Switzerland

Viewmax LLC is the controller of your personal data. Our legal bases are:

• Contract for running your account, making what you ask for, and payments.
• Consent for face and voice data, given when you accept the Terms and use a face or voice feature. You can withdraw it at any time (section 12).
• Consent for advertising cookies and pixels, analytics and A/B test cookies, and marketing email.
• Legitimate interests for security, fraud and abuse prevention, error monitoring and session replays, server logs, support and de-identified statistics. You can ask us how we weighed these.
• Legal obligation for tax and accounting records and lawful requests.

You can ask us to access, correct, delete, restrict or port your data, and you can object to processing based on legitimate interests and to direct marketing. You must give us an email address to have an account, and payment details to buy a plan or credits; everything else is optional.

You can complain to the data protection authority where you live, to the UK Information Commissioner's Office (ico.org.uk) or to the Swiss Federal Data Protection and Information Commissioner. We would like the chance to fix things first at support@viewmax.io.

16. Changes to this policy

When we change this policy we post the new version here with a new date. If a change is material, we will tell you by email or in the app before it takes effect, and we will ask for your consent before using information we already hold in a materially different way.

17. Contact

Email support@viewmax.io. To report content on Everygen, use our report page. For copyright, see Copyright and DMCA. Related: Biometric Data Policy and Accessibility statement.