Agency data controls
Guided Agency availability is controlled by its release status; a subscription alone does not activate it. The intended scope is for eligible US adult self-use customers on active Creator and Pro plans. The current release is a private four-week planning and review workspace. It does not connect Social accounts, publish automatically, ingest an Agency interview, clone a voice, or authorize likeness/publication use by itself. Full Automation is Coming soon and will be enabled platform by platform only after its separate capability, account, rights and safety gates are verified. This policy is not a claim of universal legal compliance.
Your permissions
The initial self-service scope is US residents who are at least 18 and adults under their state's law, using their own identity. Agency privacy settings record country, state and that confirmation without collecting a birth date. Interview processing, synthetic voice use and cloning, likeness use, and publication are separate permissions. The displayed notice, version, purpose, recipient policy, action time and expiry are recorded. Publication requires the exact package, revision, channel and account. No permission implies every right.
Necessary service processing and legally required records are separate from optional permissions. Reading privacy settings, withdrawing permission and requesting Agency deletion do not require a positive optional grant or an active Agency release. Withdrawal blocks affected new use. Existing external publications require separate resolution.
Private knowledge and disclosures
Personal Twin knowledge remains tenant-private. Private uploads, voice, likeness, prompts, results and embeddings are not admitted to shared knowledge or shared model training. General knowledge requires trusted source-rights and non-personal editorial review; public availability or removing a name is insufficient.
Required wording includes “AI-generated digital twin” and a separate “Ad / Sponsored” notice where applicable. Dashboard and email notifications do not establish that the exported media itself is labelled. Bare image, video and audio downloads, cropped variants, email attachments and Social uploads are blocked until a suitable labelled carrier is verified.
Deletion and retention
Immediate Agency deletion stops new Agency processing. Period-end subscription cancellation is separate and preserves the paid service period. Independent active Kynara product purposes are not ended by an Agency-only request.
Internal technical targets are primary erasure within 24 hours after purpose end or verified deletion; raw interviews within 24 hours after uptake or otherwise within 7 days from collection; transient copies and exports within 24 hours; minimized ordinary logs and regular own backups within 7 days. Shorter applicable source, permission, purpose or legal bounds prevail. The current Guided Agency plan carries an explicit four-week purpose bound so the plan is not erased by the generic seven-day fallback while its confirmed cycle is still active. These are internal operating targets, not permission to wait or guarantees of completed vendor erasure.
Deletion status distinguishes primary work, providers, backups and restricted legal or billing records. Local Agency erasure can remove enrolled private records and owned files without deleting independent products. Active or unknown external work and unresolved file inventory keep the affected work pending. An unknown provider result is not success. Restricted audit and billing records can remain personal even after account login is disabled.
The policy source reviewed on September 26, 2026 records that ElevenLabs Instant Voice Cloning is outside Zero Retention Mode and documents possible backup retention of up to 30 days after deletion. Actual account settings and contractual compatibility remain release gates. No blanket seven-day provider deletion or zero-residual promise is made.
Restores require an independent trusted withdrawal/deletion receipt registry and replay of newer receipts before Agency use. The independent Agency receipt registry has been provisioned. Recurring backup, retention and restore procedures must be verified before public activation; installed code alone does not demonstrate their operation. Provider deletion remains a separate obligation when a provider-backed feature is actually used; physical SQLite page sanitization is not claimed.