GDPR Compliance Statement.

1. Lawful basis & consent

Where Clone13 processes personal data of individuals in the EU/UK, we rely on consent (for biometric data — photos and voice samples) and contractual necessity (to deliver the service you signed up for). Consent for biometric processing is captured before any collection begins: the Studio will not accept a photo or voice sample from a salesperson until they have signed our AI Likeness, Voice and Video Consent, and that consent can be withdrawn at any time.

2. Data minimisation & purpose limitation

We collect only the personal data needed to generate and deliver video intros and to run dealership accounts and billing. Biometric data is used solely to animate the salesperson's own likeness — never sold, never repurposed.

3. Your GDPR rights

Individuals in the EU/UK have the following rights regarding their personal data:

• • Access — request a copy of your personal data.
• • Rectification — correct inaccurate data.
• • Erasure — request deletion ("right to be forgotten").
• • Restriction & objection — limit or object to processing.
• • Portability — receive your data in a structured format.
• • Withdraw consent — at any time, for biometric processing.

To exercise a right, submit an inquiry on our Contact page.

4. International data transfers

Clone13 processes data in the United States. Where we transfer personal data from the EU/UK to the US, we rely on appropriate safeguards, including Standard Contractual Clauses with our subprocessors. Because our biometric processing is consent-based, the transfer also rests on that explicit consent.

5. Data retention

Personal data is retained only as long as necessary to provide the service and meet legal obligations. Biometric data is held only while the salesperson is active and their consent is in force. Withdrawing consent, or being removed from the dealership's roster, stops all use immediately — no further video can be generated and every shared link stops working — and the covered data is permanently destroyed within three business days of that moment. Account closure is handled on the same schedule.

6. Data protection officer & complaints

Clone13 does not currently require a formally appointed Data Protection Officer, but privacy inquiries are handled by our team — submit an inquiry on our Contact page. You also have the right to lodge a complaint with your local supervisory authority.

7. Contact

Clone13, LLC · 333 N Michigan Avenue #616, Chicago, IL 60601, USA · Contact us