Colossyan
Colossyan · Image and video · US · www.colossyan.com
services/colossyan.yamlVendor data-handling terms
The policy addresses training-data collection as a separate, consented engagement. It does not state whether customer scripts and uploads are excluded from training.
“Further if we are engaging you to create stock avatars, or to participate in a training data collection exercise, you will need to provide us with images and/or recordings of your likeness and/or voice.”
“We will retain your personal data as long as it is needed to fulfill the purposes specified above (for example, to provide you with our Services), unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements).”
“Our Services are hosted in Germany and the UK and Colossyan is located in the United States (“Applicable Regions”).”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.colossyan.com | api | observed |
| app.colossyan.com | app | observed |
| colossyan.com | app | observed |
Assessment
Reasoning: An AI video generator with avatars, hosted in Germany and the UK, which is unusual for the category and good for EU deployers. The gap is that training use of customer content is not addressed, only the separate consented collection of likeness data. Uploads are typically training scripts and internal communications.
Flags: Training use of customer uploads not stated · Synthetic likeness and voice (impersonation risk) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Likeness-collection, retention, and hosting terms verified against the Colossyan privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.