Privacy Policy

1. Who We Are

Twiny ("we", "us", "our") is a platform that enables creators and businesses to build AI-powered digital twins that interact with their audience via WhatsApp and other channels. Our service is operated by Matar Loum and accessible at twiny.live.

2. Information We Collect

We collect the following categories of data:

• Account data: name, email address, and profile information provided during registration via Clerk.
• Twin content: text, URLs, documents, and other knowledge base materials you upload to train your digital twin.
• Conversation data: messages exchanged between fans and digital twins, stored to maintain conversation context and improve responses.
• Fan phone numbers: stored in hashed (irreversible) form only — we never store raw phone numbers.
• Usage analytics: aggregated event data such as message counts and conversation starts, used to provide analytics dashboards.
• Payment data: billing information is handled entirely by Stripe — we do not store card details.

3. How We Use Your Information

• To provide and operate the Twiny platform and AI twin services.
• To process payments and manage subscriptions.
• To send transactional communications (account, billing, service updates).
• To improve our AI models and platform features using anonymised data.
• To comply with applicable laws and regulations.

4. Data Sharing

We share data only with the following trusted service providers:

• OpenAI — AI response generation and knowledge base embeddings.
• Neon (PostgreSQL) — secure database hosting.
• Vercel — web application hosting.
• Clerk — authentication and user management.
• Stripe — payment processing.
• Meta (WhatsApp Cloud API) — message delivery to end users.
• ElevenLabs — voice synthesis for audio responses (where enabled).

We never sell your personal data to third parties.

5. Data Retention

We retain account data for as long as your account is active. Conversation history is retained for 12 months by default. You may request deletion of your data at any time by DMing us on X at @loumidea (https://x.com/loumidea). Upon account deletion, all personal data is removed within 30 days.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, DM us on X at @loumidea (https://x.com/loumidea).

7. Cookies

We use strictly necessary cookies for authentication and session management. We do not use tracking or advertising cookies.

8. Security

We implement industry-standard security measures including HTTPS encryption, hashed storage of sensitive identifiers, HMAC signature verification for webhook endpoints, and access controls on all data stores.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related questions or requests, please contact:
X: @loumidea (https://x.com/loumidea)
Website: twiny.live