Synthesia — privacy & data policy

Provider: Synthesia. PromptPrivacy score: 63/100. Last verified August 26, 2026.

What happens to your data?

Synthesia processes customer-uploaded scripts, media, and avatar verification data to generate AI videos according to customer instructions. Usage metrics and provided feedback are analyzed to maintain platform security and enhance AI model capabilities. Synthesia does not sell user data and deletes biometric verification data shortly after authentication.

Does it train on your data?

Synthesia uses usage information and feedback to improve its platform, underlying technologies, and model capabilities and safety. Additionally, user-submitted media samples are used for fine-tuning AI models specifically to generate custom avatars.

Can you opt out?

Users can withdraw consent for consent-based processing at any time, manage cookies via cookie settings, and request to opt out or object to legitimate interest processing by emailing support@synthesia.io.

Data retention

Customer Data (videos, scripts, and inputs) is retained in accordance with the customer's instructions and contract terms. Biometric data extracted for avatar verification is retained only until comparison completes (usually within minutes), while avatar generation data is kept for as long as the avatar remains active. Other account and operational data are retained as necessary to fulfill services, resolve disputes, and comply with legal requirements.

Encryption & security

The policy states that security procedures and measures are in place to prevent misuse, unauthorized access, disclosure, or modification, and refers users to a separate Security Practices page for full details; specific encryption protocols (e.g., TLS, AES-256) are not detailed within the policy text itself.

Is it safe for work?

Yes, Synthesia is generally safe for business use. It provides enterprise-ready terms where the customer acts as the data controller and Synthesia acts as the data processor under a Master Subscription Agreement and Data Processing Addendum (DPA). Organizations should ensure they obtain required employee consents when creating custom biometric avatars.

Source policy: https://www.synthesia.io/legal/privacy-policy