Welcome to Sublimate! Sublimate is an AI identity management company that trains and deploys bespoke, private AI models built on a single person’s likeness,
This Privacy Notice describes how Sublimate AI, Inc. (“Sublimate”, “we”, “us” and/or “our”), handles the personal information that we collect from and about you in connection with our owned and operated websites, https://sublimateai.studio and star-weaver.ai (the “Site(s)”), as well as all related web applications, APIs, mobile applications, content, and features, including without limitation any new features and applications (collectively, the “Services”). This Privacy Notice also describes certain legal rights you may have, subject to applicable law, and how you can exercise them.
For the purposes of this Privacy Notice, “Personal Information” means information about an identified or identifiable person, as defined by applicable law. This includes information that alone or in combination with other information may be used to identify, contact, or locate you, such as your name, address, email address, or phone number.
As used in this Privacy Notice, “Biometric Identifiers” includes both “biometric identifiers” and, where applicable, “biometric information”, as such terms are defined under the Illinois Biometric Information Privacy Act, The Texas Capture and Use of Biometric Identifiers Act, and any other applicable laws based on your state of residency (“Applicable Biometric Data Privacy Law”).
A Note on Information We Process on Behalf of Customers: This Privacy Notice describes how Sublimate collects, uses, and discloses Personal Information when Sublimate determines the purposes and means of processing, including when individuals create personal accounts, purchase subscriptions, purchase Credits or Products, upload content, create Identity Models, or otherwise interact with the Services.
Sublimate also provides the Services to business customers, including talent agencies, studios, and brands, that may submit Personal Information to Sublimate or instruct Sublimate to process Personal Information on their behalf pursuant to separate agreements, including data processing agreements. In those circumstances, Sublimate processes such Personal Information solely on behalf of and under the instructions of the applicable customer, and our use of such Personal Information is governed by our agreements with that customer, including any applicable data processing agreement.
We do not control how our business customers collect, use, disclose, or otherwise process Personal Information. If your Personal Information was provided to us by or on behalf of one of our business customers and you would like to access, correct, delete, or otherwise exercise rights relating to that information, please contact the applicable business customer directly.
Other capitalized terms not defined in this Privacy Notice have the meanings given to those terms in our Terms of Service, which govern your use of the Services.
1. Information We Collect
1.1 Information You Give Us Directly
Some information we collect directly from you. For instance, we collect information that you voluntarily provide in the following ways:
When you fill in forms on our Sites, request a demo, or sign up to receive newsletters or other email communications from us. When you fill in forms on our Sites, including when you request a demo or sign up for email updates from us, we collect information such as your name, email address, and phone number. If you are a business customer, we also collect your organization name, title/role, and business contact details. We will also collect any other information you provide to us as part of your request (such as how you heard about us, which offerings you’d like to learn more about, and a description of your intended use case).
When you subscribe to our Services. If you are completing the initial subscription to our Services on behalf of your organization, you will be asked to provide your name, business email address, and organization/role. You will also be required to provide a billing address and banking information to facilitate payment/invoicing. We may also ask for the name and business email address of individuals within your organization that will be using the Services under your Admin Account.
When you create an account and populate your profile. To access most features of our Service, you must maintain an active subscription and register for an account. When registering, you must create a username and password for your account (or choose a third-party authentication method) which we will use to authenticate you at sign-in. The information we collect depends on the type of account you create and the features you choose to use. For instance, when you set up a Brand or Agency account, we collect information about your organization, including your business or trading name, primary contact name and email address, billing details, industry focus, roster, and Campaign needs or details. When you set up a Talent account, we may collect your legal name, professional name (if applicable), preferred display name, profile picture, email address, phone number, professional category (e.g., sports/team/league), social media handles (optional), and Biometric Identifiers and Model Training Data (selfie video and images submitted for model training).
When we verify your age or identity. We may request information in order to verify your age, identity, eligibility to use the Services, and prevent fraud and misuse. This may include your date of birth, government-issued identification, selfies, verification results, and information provided by verification providers acting on our behalf.
When you complete a model training intake form. In order to create and maintain an AI-generated representation of yourself for use in Generated Assets, such as advertisements, videos, and social media posts, we collect certain Personal Information. This may include your legal name, preferred name, contact email, phone number, professional or content preferences, and Biometric Identifiers (such as physiological, facial, voice, or motion-pattern data derived from selfie photos, videos, and audio recordings) used to capture your appearance, voice, and mannerisms. We use this information to train, generate, and manage your AI representation in connection with the Service. We obtain your explicit, written consent, in accordance with Applicable Biometric Data Privacy Law, prior to collecting or processing any Biometric Identifiers, and provide required disclosures regarding its use and retention.
When you use our Services. Because of the nature of our Services, we may collect and process a range of information related to your use of our Services. This includes information associated with Campaign creation and management, content generation, and user interactions with generated outputs (such as feedback signals, including swipe-based preferences, used to improve generated content relevance and quality. We use preference signals and similar interaction data to improve and refine the performance of individual AI models associated with a specific Talent’s likeness. We may also use aggregated or de-identified usage and analytics data to train and improve our AI systems and better understand how users interact with the Service, in order to enhance overall functionality and performance. We do not permit third-party artificial intelligence providers to train their models on data submitted to our Services.
When you make a purchase through our Services. If you make a purchase through our Services, we collect certain information to process the transaction. This typically includes your name, billing address, and payment information (such as credit or debit card details, or other payment account information), which is processed by our third-party payment processors. Users may purchase subscription plans, in-app credits (which can be used to create, download, and save generated content), and, where applicable, physical products featuring generated content. If you purchase physical products, we will also collect shipping information, such as the recipient’s name, phone number, and delivery address, in order to fulfill the order. If you choose to submit a rating or review regarding any physical products you purchase, we will collect any Personal Information you choose to include.
When you email us to ask a question or request customer service or when you communicate with us via a third-party social media platform. When you contact us by email; through our branded social media accounts; through any integrated chat providers or embedded support widgets we may provide; or by telephone, SMS, or physical mail, we may collect your name, username, email address, phone number, physical address, and the contents of your communication which can include any information you choose to provide (including in public comments or direct messages sent through third-party social media platforms).
When you complete a satisfaction or other survey. From time to time, we may send brief satisfaction or other surveys to Users via email. These surveys are optional and collect only name, email address, and any feedback you voluntarily provide.
When you register for and participate in our events. If you register for an in-person or virtual event we host or sponsor, we may collect Personal Information such as your name, contact details, organization/role, and any specific information relevant to the event for which you are registering. Occasionally, we may co-host events with a partner such as talent agencies or brand clients; in these cases, your registration information may be shared with co-hosts, as disclosed at the point of registration. Virtual events are typically hosted on third-party platforms, and involve streaming video and audio feed of interactions between participants, as well as the contents of any communications enabled by integrated chat functions within the third-party services we use to provide the events. This includes collecting your image, voice, movements, physical environment, and any other information provided during the event. We encourage attendees to review the hosting platform’s privacy notices, to understand what information those providers may collect. From time-to-time, we may record special events and make those recordings available to other Users. If we do so, we will indicate that the event will be recorded.
When you register for a contest, competition, or sweepstakes. On occasion, we may run contests, competitions, or sweepstakes. In these circumstances, we may collect your name, contact information, and any other information relevant to that contest or competition or which you choose to provide or which is required by applicable state prize promotion laws.
When you engage with us offline. We may collect contact information, such as your name, email address, organization, and role at in-person events, including industry conferences, trade shows, or other professional gatherings (e.g., sports industry events, advertising/marketing conferences). This information may be entered into our CRM systems for follow-up purposes.
When you apply to work with us. If you apply for a position through our Careers page or other recruitment channels, we will collect any information you choose to share in your application, including your name, email address, phone number, physical address, resume/CV, cover letter, LinkedIn URL or portfolio link, employment history, and educational history. Applications may be processed by us directly or through a third-party applicant tracking system.
1.2 Information We Collect Automatically When You Use Our Services
We also collect certain information automatically as you navigate our Services or interact with our communications, including the following:
Information about the devices you use to access our Services, including:
hardware model and device type (e.g., desktop, mobile, tablet);
access to device contacts or camera, when you explicitly submit a selfie video or images through our model training intake flow.
Location information, including:
approximate location (city/region) inferred from your IP address and used for analytics, fraud prevention and regulatory compliance (e.g., identifying users in jurisdictions with specific privacy rights).
Details about your interactions with our Services, including:
the date, time, and duration of your sessions;
generation requests and output metadata (model ID, prompt, checkpoint, scope, timestamp).
Transaction information, including:
the date and time of the order;
the amount charged.
Aggregate usage metrics, including:
the number of unique visitors per day, week, or month;
We collect some of the information above using cookies or similar technologies. A “cookie” is a small text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or device or to store information or settings in the browser/device. We, and our third-party service providers, use cookies in order to do things such as recognize you when you return to our Site, save your preferences (including your preferences regarding cookie handling), understand usage patterns, and improve our mobile applications. We use both session cookies (which expire when you close your browser or app) and persistent cookies (which stay on your device until you delete them or until they expire).
If you do not want us to collect information through the use of cookies, you can disable cookies, limit the types of cookies you allow, or set your browser to alert you when cookies are being sent. Please refer to the guidance offered by your chosen web browser if you would like help managing your cookie preferences. You can also restrict cookies or change your cookie preferences at any time by clicking the “Cookie Preferences” link in the lower left-hand corner of our Sites. Please note that if you reject or block cookies, the Services may not work as intended.
We also may partner with third parties who provide analytics services and may use cookies and similar technologies to track your engagement with our Site as well as our email marketing campaigns and permit us and them to analyze and track data.
We also use third-party service providers to assist us in operating and improving the Services, including providing integrated chat and webform functionality. If you use these features, these providers may collect any information you choose to provide, as well as technical information collected directly from your browser or device on our behalf. These providers act as our services providers or processors and are contractually restricted from using your personal information except to provide services to us.
Any routing, addressing, or signaling information (such as IP addresses and URL data) is collected as part of standard internet communications necessary to enable communication from your device to our server and to deliver website content and functionality. We do not collect this information for the purposes of intercepting private communications unrelated to your interaction with our Sites or other aspects of our Service.
1.3 Information We Collect from Other Sources
We may also obtain Personal Information from other sources. For instance, we may collect Personal Information about you from the following third-party sources:
Payment processors. In general, when you make purchases through our Services, including purchasing subscriptions, credits, or physical products, your payment card information is provided directly to our third-party payment processing partners, and Sublimate does not collect or store that information. However, we may have access to limited information about your payment card from these partners and related transaction details, such as the last four digits of the payment card, card brand, country of issuance, expiration date, billing name, billing address (for address verification), and transaction date and amount. We do not receive or store full card number, CVV codes, or other raw payment credentials.
Third-Party Authentication Providers. We may allow you to log into your account using third-party authentication providers, such as Google OAuth. If you choose to log in using one of these services, the third-party authentication provider will ask your permission to share certain information with us, which may include your name and email address or other unique identifiers. You can control the information that we receive from third-party authentication providers by adjusting the privacy settings in your accounts with those services.
Third-Party Sources. We may receive Personal Information about you from limited third-party sources, including (i) talent acquisition partners who provide basic professional contact information, such as name, sport, or contact details for college athletes eligible to earn compensation from their Name, Image, and Likeness (NIL) rights who express interest in Sublimate; and (ii) Agency and Brand Users who provide contact information as part of onboarding their roster or fulfilling Campaign requirements. We may also supplement the information we collect from you with professional or organization information that you choose to make publicly available (such as your name, job title, business contact information, employer details, and similar professional data). We do not use data brokers or collect information through automated web-scraping tools.
Our Users. We may receive your Personal Information from an existing User who provides us with your contact information in order to invite you to join their organizational account as an authorized user or to invite you to try the Service independently because they believe you may benefit from it. If you are invited in this manner, we collect your name and email address solely to send the invitation. We do not retain this information if you choose not to register.
Social media platforms. If you choose to connect a third-party social media account to your Sublimate account (for example, to share generated content directly to your social media profiles), the provider of the third-party social media platform may make certain information available to us. This can include information necessary to facilitate the integration as well as any additional information the provider chooses to share with us or which you have permitted the provider to share through your privacy settings. We encourage you to check the privacy settings and privacy policies of these third-party social media platforms to understand what information might be shared with us.
Event partners. From time to time, we may partner with a third party in order to offer an event (our “Event Partners”) and may receive information about you from these Event Partners. For instance, Event Partners may provide us with the names and contact information of individuals who sign up through the Event Partner’s website for the event we are co-sponsoring.
Other third parties. We may collect information from other third parties that assist us with identity verification, background screening, and other vetting, safety, and security purposes. This may include verifying a talent agency or management company’s authority to act on behalf of a Talent User, or conducting background checks on job applicants, where permitted by law.
We may combine the information we collect about you from these various sources. If a combination of information that we collect identifies you as an individual, we will treat the combined information as Personal Information.
2. How We Use Your Information
We use the information described for the following purposes:
Service delivery (including training, hosting, and operating personalized AI Identity Models; processing campaign activations, and delivering RLHF sessions and generated content);
Account management (including creating and managing User accounts, conducting identity and age verification, authenticating Users, maintaining account and credit balances, and providing access to the appropriate features based on account type);
Biometric model training (including training and maintaining an individual’s private AI Identity Model including facial likeness, voice, and other biometric data submitted by Talent);
RLHF improvement (including tracking and analyzing preference signals from our RLHF tools to fine-tune individual models);
Order fulfillment (including taking and processing orders; shipping physical products; communicating with you regarding your purchases; and sending technical notices, updates, security alerts, and support and administrative messages);
Communications (including sending service-related notifications, account updates, invoices, and (with consent) marketing and product news; and responding to your requests, inquiries, comments, and suggestions);
Analytics and product improvement (including understanding feature usage, identifying and fixing bugs, and improving our Services);
Personalization (including tailoring content we send or display to you in order to provide you with information and resources we think will be relevant to you);
Legal and compliance (including complying with applicable laws; enforcing our Terms of Service; detecting, preventing and investigating the creation and distribution of unlawful or harmful content, including child sexual abuse material; and responding to legal requests);
Fraud prevention and security (including detecting unauthorized access, scope violations, and misuse of generated content);
Networking, marketing, and social strategies (including posting testimonials and communicating with you about programs, services, offers, promotions, and events);
Business operations (including financial record-keeping, audit, and investor reporting, if and when needed (aggregated/anonymized only); and
To carry out any other purpose described to you at the time the information was collected.
3. How We Share Your Information
We may disclose information about you with third parties in the following circumstances:
Companies under common control. We may share Personal Information between and among any current or future parents, subsidiaries, affiliates, and other companies under common control and ownership with Sublimate.
Vendors and service providers. We may share Personal Information with vendors, consultants, and other service providers who need to access the data in order to perform services on our behalf. This includes without limitation:
Email marketing providers, for sending newsletters and transactional communications;
Fulfillment vendors and shipping providers, for manufacturing, packaging, and delivering Products.
Buyers or business transferees. We may share Personal Information with another company in connection with or during negotiations of any merger, acquisition, financing, re-organization, bankruptcy, sale of all or a portion of our assets, or transition of services to another provider.
Professional Advisors. We may also share your Personal Information with our professional advisors, which include lawyers, accountants, auditors, and other similar professional advisors.
Legal requirements. We may share Personal Information when we believe it is necessary to comply with a legal obligation, including lawful requests from public authorities to meet national security or law enforcement requirements. We may also share Personal Information when we believe it is necessary to protect our rights and property, to protect the safety of our users, and to defend against legal liability.
Consent. We may share Personal Information with third parties with your consent and at your direction, including if we notify you that the information you provide will be shared in a particular manner and you provide that information. This includes, without limitation:
Campaign activations, where Talent authorizes a specific Brand User to use the Talent’s Identity Model for a defined Campaign;
Third-Party AI Generation Use, where Talent and Sublimate each provide prior written authorization for the use of Generated Assets or other AI Outputs created in connection with the Services by third-party AI systems, models, pipelines, or services.
De-identified/Aggregate Information. We may also share aggregate or de-identified information, which cannot reasonably be used to identify you, for various purposes including compliance with various reporting obligations; for business or marketing purposes; or to assist third parties (e.g., brand clients, talent agencies and investors) in understanding our Users’ interests, habits, and usage patterns for certain features, content, and services. This can include campaign performance metrics, generation volume statistics, model quality benchmarks.
We do not sell, lease, trade, or otherwise profit from your Biometric Identifiers. We disclose your Biometric Identifiers only: (i) with your consent; (ii) to complete a transaction you have requested or authorized, including to services providers as described above; (iii) as required by federal, state, or local law, or by valid warrant or subpoena; or (iv); as otherwise permitted by applicable biometric privacy law.
4. Your Rights and Choices
You have a variety of rights and choices related to our use of your Personal Information.
Opting out of promotional communications. You can opt out of receiving our promotional communications emails and texts at any time. You may do so by contacting our customer service team or by following the opt-out instructions in the promotional emails or texts we send you. Please be aware that it may take up to ten (10) days for us to process your request, and you may continue receiving promotional communications from us during that period. If you opt out of receiving such communications, please be aware that we may continue to send you non-promotional emails (such as emails related to our business relationship or emails about changes to our legal terms).
Restricting cookies/Do Not Track. Sublimate does not currently change its behavior in response to web browser “do not track” signals. However, you can configure most browsers to reject cookies or to notify you when you are sent a cookie, giving you a chance to decide whether or not to accept it. You can consult the help section of your browser to find out how to do this. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services. In the event that a universally accepted standard emerges on how organizations should respond to “do not track” or similar opt-out signals, we will assess and provide an appropriate response to those signals.
Control access to your AI Identity Model. Within the Services, Talent and its authorized representatives (e.g., talent agencies) can use granular control settings to manage who can view, generate content form, or interact with their Identity Model. This includes authorizing specific Brand Users, creative directors, and platforms; setting generation permissions; revoking access; and defining scope boundaries.
Access or update your Personal Information. If you would like to access or update Personal Information you have provided you may do so by emailing us at privacy@sublimateai.studio. Certain account information can be updated directly in your account settings.
Delete Generated Assets. You may delete individual generated images stored in your account gallery. Deletion removes them from your user interface, but does not remove generation log data (e.g., timestamp, scope metadata, model ID), which is retained for IP defensibility and audit and provenance purposes (but does not include image content). Such data is retained for the life of the relevant Campaign plus seven years.
Delete your account or other Personal Information. Subject to any early termination limitations in your agreement with us, you may delete your account and all associated Personal Information by emailing us at privacy@sublimateai.studio. Upon a verified deletion request (i) your account is deactivated, (ii) raw biometric training data is deleted within 30 days, (iii) your Identity Model is deleted within 30 days, (iv) saved generated assets are deleted within 30 days, and (v) account/profile information is deleted except for data we must retain for legal, financial, or audit purposes. Because biometric training data that has been incorporated into model weights cannot be individually extracted and deleted from the model; the entire model is deleted instead.
Consent for Third-Party AI Generation Use of Your Generated Assets. As a Talent, you also have the right to control whether Generated Assets produced from your Identity Model may be submitted to or used within any third-party artificial intelligence or generative AI system, model, pipeline, or service. Such use is prohibited by default under our Terms of Service. It may only occur if: (i) you, or your authorized legal representative (such as a talent agency or manager), provide prior written consent specifically authorizing the proposed third-party AI generation use; and (ii) Sublimate separately provides written authorization for such use. Both consents are required; neither alone is sufficient. You may withdraw your consent to future Third-Party AI Generation Use at any time by contacting us at privacy@sublimateai.studio, provided that withdrawal of consent does not affect any use already authorized and carried out prior to the date of withdrawal.
7. Children’s Privacy
Our Services are intended for individuals who are at least eighteen (18) years of age, and we do not knowingly collect Personal Information from children. If you are a parent or legal guardian and think your child under 13 (or a higher age threshold where applicable) has given us Personal Information without your consent, please email us using the contact information below.
8. Links to Other Websites and Third-Party Content
We may provide links to third-party websites, services, and applications that are not operated or controlled by Sublimate. These may include social media platforms, video-hosting or content-sharing services, professional networking sites, scheduling tools, payment processors, and webinar or event-registration platforms. This Privacy Notice does not apply to the privacy practices of those third parties. The fact that we link to a website, service, or application is not an endorsement, authorization, or representation of our affiliation with that third party. We encourage you to review the privacy policies of any third-party service before providing any Personal Information to or through them.
9. Data Transfer
Personal Information we collect may be stored and processed for the purposes set out in this Privacy Notice in the United States or in any country where we have operations or where we engage vendors or service providers. These countries may not have the same data protection laws as the country in which you originally provided the data. By using our Services or submitting your Personal Information to us, you agree to such transfers.
At this time, all Personal Information is stored and processed within the United States on US-based cloud infrastructure (such as AWS or Lambda Cloud US regions). We do not currently transfer personal data outside the United States. If we expand availability of the Services to additional countries in the future, we will update this Privacy Notice, as appropriate.
10. Data Retention
We retain Personal Information for so long as reasonably necessary to fulfill the purposes described in this Privacy Notice, to comply with legal requirements, and to resolve disputes and enforce our rights and agreements. When Personal Information is no longer needed, we may anonymize it, delete it, or take other appropriate steps. Copies maintained for backup and business continuity purposes may persist for an additional period of time. We permanently delete Biometric Identifiers when the initial purpose for collection has been satisfied or within three (3) years from your last interaction with us (whichever comes earlier).
11. Security
Sublimate uses generally accepted administrative, physical, and technical safeguards we believe are appropriate to protect the confidentiality, integrity, and availability of your Personal Information.
Although we make reasonable efforts to protect Personal Information from loss, misuse, or alteration by third parties, you should be aware that there is always some risk involved in transmitting information over the internet and storing information electronically. Sublimate cannot and does not guarantee absolute security.
12. Changes to Our Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or in the law. If we make changes to this notice, we will post the updated Privacy Notice on our website and indicate when it was last revised. You are advised to review this notice periodically to stay informed of our practices. If we make material changes, we may provide you with additional notice, such as posting a statement on our homepage or sending you an email notification, if we have your email address on file. Your continued use of the Services after the revised Privacy Notice has become effective indicates that you have read, understood, and agreed to the current version of this Privacy Notice, to the extent permitted by law.
13. Contacting Us
If you have any questions about our Privacy Notice or how we protect your Personal Information, please contact us at privacy@sublimateai.studio.