HeyGen

HeyGen · Image and video · US · www.heygen.com

Last verified 2026-09-16
Entry services/heygen.yaml
Training on your data (default tier)
Input used to train and enhance the models, including avatar models; opt-out by email
Retention
Deleted within 72 hours of request; backups purged after 60 days
Data residency
US corporation; EU data under the EU-US Data Privacy Framework

Vendor data-handling terms

Training on your data (default tier)
Input used to train and enhance the models, including avatar models; opt-out by email
To train and enhance the models that power our products and services, including to make our avatar creation models more accurate. / You may request to opt-out of this training and enhancement by contacting us at [email protected] .
checked 2026-09-16
HeyGen Privacy Policy
Retention
Deleted within 72 hours of request; backups purged after 60 days
After you delete the information or the account, it is kept in the backups for the purpose of disaster recovery for 60 days and then automatically and permanently erased. / If you submit a request to delete your information, we strive to take steps to delete that information within 72 hours of your request, unless we are required or permitted to retain such information under applicable law.
checked 2026-09-16
HeyGen Privacy Policy, Retention
Data residency
US corporation; EU data under the EU-US Data Privacy Framework
We are a domestic corporation established in the United States. / Pursuant to the DPF Program, EU, UK, and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States.
checked 2026-09-16
HeyGen Privacy Policy, Data Privacy Framework

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
heygen.comappobserved

Assessment

Personal and Creator plans: highEnterprise: unrated

Reasoning: An avatar video generator that trains on uploaded video and audio by default, with opt-out by email. Likeness and voice are the inputs, and an avatar of an employee is reusable after they leave. Deletion timelines are short and the DPF covers the transfer, which is better than most in the category. Enterprise terms are separate.

Flags: Training on likeness and voice unless opted out · Synthetic likeness (impersonation risk) · GDPR Chapter V (US, DPF-certified) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Training, retention, and DPF terms verified against the HeyGen privacy policy.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub