audit rights dpa residency · Privacy Policy

HeyGen policy finding

“ For purposes of this Privacy Policy, HeyGen's role as controller or processor depends on the specific processing activity. HeyGen acts as a data processor when processing personal data on behalf of, and under the instructions of, our customers in connection with their use of the Services (e.g., processing Customer inputs, generating outputs, and hosting content on behalf of a Customer). HeyGen acts as a data controller when processing personal data for its own independently determined purposes, including account administration, platform security, service improvement, AI model training, analytics, and marketing, as further described in Section 4. Where HeyGen acts as a processor, the applicable Customer is the controller and determines the purposes and means of processing; HeyGen processes such data only in accordance with the Customer's documented instructions and applicable data processing agreement. HeyGen complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. HeyGen has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. ”

Document

Privacy Policy

Captured

2026-06-07

Location

Privacy Policy › “Los Angeles, CA 90094”

Snapshot SHA-256

45098b320498defa81c0cf59e3857a979b5c103c663e7c27536e557979571d6c

Informational only, not legal advice. Terms change; verify the source and capture date.