Privacy Policy
What we do
We verify whether a performer's consent to the use of their identity in AI-generated content is currently valid, and we provide a signed, timestamped record of that verification.
Our role in data processing
Digital Double Technologies Inc acts as a data controller with respect to consent records, permission states, verification receipts, and audit events: we determine the purposes and means of processing this data as part of the consent verification infrastructure we operate. When a studio, platform, or other requesting party queries our verification system, we act as a data processor on their behalf, processing the query according to their request and returning a permission state and signed receipt. This distinction determines which legal basis applies to each data flow under applicable data protection law.
Data we collect and retain
We permanently retain consent terms (what uses a performer has authorized, for which territories, for which requesting parties, and for how long); permission states (whether consent is currently active, revoked, expired, or suspended); signed verification records documenting what the permission state was at each moment it was checked; and audit events recording every significant action taken on a consent record, including its creation, any state changes, and its eventual deletion. These records contain identifiers and cryptographic digests only. They do not contain biometric data.
We retain consent records, permission states, verification receipts, and audit events for the duration of the consent relationship and for a period thereafter sufficient to satisfy applicable statute of limitations requirements for legal claims arising from authorized or unauthorized use of identity. This retention serves the interests of both performers and requesting parties, as verification records are the evidentiary basis for demonstrating that consent existed, or did not exist, at a specific moment in time.
Data we process transiently and do not retain
Biometric reference material such as facial images and voice samples. When a performer enrolls or when content is scanned, the performer or their authorized representative provides reference media. We process that media locally to generate short cryptographic digests (one-way mathematical summaries that cannot be reversed into the original media). The reference media itself is used only during the session, is never transmitted to any external server during processing, and is destroyed immediately upon completion of the enrollment or scanning session, with destruction documented by a signed audit event. We retain the cryptographic digest, which identifies a record but cannot reconstruct the person. We do not operate a database or vault of biometric reference material.
Content-derived data
When content is registered with our system, we may compute and retain perceptual fingerprints or hashes of the content itself. These identify the content file, not the person depicted in it, and they enable the content to be recognized if it appears elsewhere. This data is derived from the media asset, not from any person's biometric characteristics.
Consent is granular and revocable
A performer's consent can specify different terms for different uses, different territories, and different requesting parties. Consent can be revoked at any time, and revocation can be scoped narrowly: a performer can revoke consent for a specific party or a specific use without affecting other authorized uses. When consent is revoked, the change propagates to all future verification queries within seconds. Automated responses to unusual activity default to a suspended state that preserves the performer's position while allowing review, rather than taking irreversible action.
Authorized representatives
A performer may designate an authorized representative, such as a talent manager, agent, or union, to manage their consent record on their behalf. We verify the identity and authorization of any representative before granting access to a consent record. Designation of an authorized representative does not transfer ownership of the consent record; the performer retains the right to revoke, suspend, or modify their consent directly at any time, regardless of any representative designation. An authorized representative may exercise deletion rights and other data subject rights on the performer's behalf, subject to verification of their authorization.
Deletion rights
A performer or their authorized representative can request deletion of their consent record at any time. Deletion removes all data associated with the record, including all biometric-derived digests, from our active systems. Verification records already issued are retained as historical proof of what the permission state was at past moments, because those records protect both the performer and any party that relied on them. Deletion is irreversible and documented with a signed audit event. After deletion, any query for the record returns an unknown state indistinguishable from a record that never existed.
No sale of data
We never sell, license, or share biometric data, consent records, or verification records with any third party for their own commercial purposes. Verification records are issued to the party that requested verification and retained by us as the audit trail.
Processing location
All biometric processing (facial recognition, voice analysis) runs locally on infrastructure we control. No biometric data is transmitted to any external server, cloud API, or third-party processor during analysis. Our verification endpoint operates over encrypted connections and returns only permission states and signed records, never biometric data.
Children and minor performers
Our services are designed for professional performers and rights holders and are not directed at children under 18. We do not knowingly collect personal data from individuals under 18. For performers under 18, consent must be provided by a parent or legal guardian in accordance with applicable law, including any requirements imposed by union agreements governing the use of minor performers' digital likenesses. The minor performer retains the right to revoke consent upon reaching the age of majority in their jurisdiction.
Regulatory alignment
Our data handling is designed to comply with the Illinois Biometric Information Privacy Act, the EU General Data Protection Regulation, the EU AI Act, and applicable state performer protection laws including the New York synthetic performer disclosure law effective June 2026. Our retention and destruction practices default to the strictest applicable standard.
International data transfers
Our verification infrastructure may process queries originating from outside the United States, and consent records held in the United States may be queried by parties in other jurisdictions. For transfers of personal data outside the European Economic Area or the United Kingdom, we will implement appropriate safeguards as required by applicable law, which may include Standard Contractual Clauses approved by the European Commission, reliance on adequacy decisions, or other lawful transfer mechanisms. We do not transfer biometric reference material across borders; such material is processed locally and destroyed before any cross-border data flow occurs.