Is Lilidi AI Safe? Privacy, Data and Your Rights with Lilidi Twin

Lilidi Twin talks to your customers on your behalf, with your knowledge, your voice and sometimes your face. That makes safety a fair first question. The short answer: you own what you give it, it tells people it is an AI, it does not send anything in your name without your approval, and your data is not used to train models for anyone else.

Below is what that means in practice, and where the limits are. Every point comes from our Terms, Privacy Policy and Data Processing Addendum, which are the binding versions.

Who owns what

• You own the material you give your Twin - website pages, documents, FAQs, voice samples and images - and the records of its conversations.
• We host and process it only to run your Twin and the features you turn on.
• We do not train AI models shared across customers on your knowledge, your conversations or your voice.

Your Twin says it is an AI

A Twin introduces itself as an AI, and you cannot configure it to claim to be a person. You decide what it knows, where its boundaries are and when it hands the conversation to someone on your team.

Your voice and your face

You may clone only your own voice, or a voice you have written permission to use. The same rule applies to faces and avatars. We may ask for proof of consent, and we remove a voice or avatar when consent is missing. Impersonating a real person or organization without permission is not allowed.

Your customers' data

• For what your customers tell your Twin, you are the controller and Lilidi is your processor, under the Data Processing Addendum (Article 28 GDPR).
• When your Twin joins a meeting or records a conversation, you are responsible for telling participants and for any consent the law requires.
• A Twin must never be used to collect payment card numbers, passwords or government ID numbers.

Where the data goes

To run a conversation, Lilidi uses Google's Gemini models for language, ElevenLabs for voice and voice cloning, and HeyGen LiveAvatar for the live video avatar. Only the content a request needs is sent. Payments go through Stripe, and we never see or store full card numbers. Data travels over TLS, Google connection credentials are encrypted at rest, and transfers outside the EU and UK rely on Standard Contractual Clauses.

How long we keep it

• Account data: until you delete your account.
• Twin knowledge, conversations and voice samples: until you delete them, or 30 days after you delete your account.
• Billing records: 7 years, because accounting law requires it.
• Logs: 30 days for debugging and 90 days for security.

Email and calendar

If you connect Gmail and Google Calendar, your Twin books meetings and drafts follow-ups there. Drafts stay drafts until you approve them. You can disconnect Google at any time and ask us to delete the related records.

Where the limits are

• AI answers can be wrong. Check important answers before you rely on them.
• A Twin is not a substitute for a doctor, lawyer, financial adviser or emergency service, and must not present regulated advice as if it came from a licensed professional.
• Lilidi does not sign HIPAA business associate agreements. Do not use a Twin to collect protected health information from patients in the United States. Booking and non-diagnostic intake are fine.
• Accounts are for adults (18+). Sexual and pornographic content is not allowed.

What about the old creative tools?

Earlier versions of this page described Lilidi Creative Studio, our image, video and audio generation tools, which we retired in October 2026. Questions about work or credits from the studio: write to [email protected].

FAQ