D-ID offers AI-driven solutions for creating photorealistic animated videos from images, enabling businesses to enhance marketing, training, and customer engagement through dynamic visual content.
D-ID's Creative Reality™ Studio is an advanced AI video generator that transforms static images, text, or audio into photorealistic talking avatars and dynamic videos, delivering lifelike animations with precise lip-sync, natural expressions, gestures, and multilingual speech in over 120 languages.[1][2][3][5] Key features include text-to-video conversion, customizable avatars from uploaded photos or a built-in library, voice imitation, video translation while preserving the original speaker's voice, and a flexible canvas for layering elements, positioning, and branding with company logos, colors, and backgrounds.[2][3][4][5]
It targets businesses, marketing agencies, educators, Fortune 500 companies, e-learning platforms, content creators, and social media teams for use cases like scalable training materials, personalized customer engagement, promotional videos, interactive chatbots, and global presentations without needing actors, studios, or crews.[1][2][5][7] What sets D-ID apart is its self-service platform combining deep-learning face animation with generative AI and LLMs for rapid, cost-effective production of professional-grade content, bolstered by strict privacy controls, transparent ownership, and mobile app accessibility for creation anywhere.[2][3][5][6]
Sources
D-ID states that Applicative Data is not accessed for model training while awaiting processing or deletion, but the Priv
No training opt-out mechanism was identified in the legal documents.
High risk across multiple dimensions. Only use with public, non-sensitive data.
D-ID states that Applicative Data is not accessed for model training while awaiting processing or deletion, but the Privacy Policy permits use of anonymized/de-identified data for 'internal and external purposes, including...to improve the services.' The ToS grants D-ID broad rights to use User Submissions for derivative works and service improvement, creating ambiguity about whether training occurs on aggregated or de-identified user content.
“[Privacy] 'In certain cases, we may or will anonymize or de-identify your Personal Data and further use it for internal and external purposes, including, without limitation, to improve the services and for research purposes.' [ToS] 'you hereby grant us a worldwide, irrevocable, non-exclusive, royalty-free, perpetual, and transferable right to use...prepare derivative works of...the User Submissions'”
The ToS grants D-ID an extremely broad, perpetual, irrevocable, worldwide, transferable license to User Submissions including the right to create derivative works, sublicense to other users and third parties, and use for any purpose. This license survives account termination and applies to all content employees create with the tool.
“[ToS] 'you hereby grant us a worldwide, irrevocable, non-exclusive, royalty-free, perpetual, and transferable right to use, reproduce, distribute, create Animations and/or Outputs while using, prepare derivative works of, display, and perform the User Submissions...You also hereby grant each Software user and Third Party Source a non-exclusive right to use, reproduce, distribute, prepare derivative works of, display and perform such User Submissions'”
D-ID shares data with service providers (cloud, email, CRM, analytics) and explicitly states that Third Party Sources may use User Submissions for maintaining/developing their services. While DPAs are mentioned for EU transfers, the Privacy Policy permits sharing with 'business partners' and 'affiliated companies' with limited specificity. Sub-processor list is not published.
“[Privacy] 'We may share your Personal Data as follows: With our service providers...With our business partners with whom we jointly offer products or services. We may also share Personal Data with our affiliated companies.' [ToS] 'some Third Party Sources may use your User Submissions and/or Animations for the purposes of maintaining and/or developing and/or improving their services.'”
D-ID provides specific retention periods for Applicative Data (24 hours to 14 days depending on product, with user deletion option), but Personal Data retention is vague ('until we delete the record'). Data may be retained longer for legal/regulatory reasons or if litigation is anticipated. Inactive user data is deleted after 180 days + 14 days notice, but backup retention and post-termination data handling lack clarity.
“[Privacy] 'Your Personal Data will be stored until we delete the record and we proactively delete it or you send a valid deletion request. Please note that in some circumstances we may store your Personal Data for longer periods of time, for example (i) where we are required to do so in accordance with legal, regulatory, tax or accounting requirements.' [Privacy] 'Data of inactive users...will be deleted after 14 days and after sending an email notification.'”
The ToS states users 'retain all of your ownership rights in your User Submissions, Output and/or Animations,' but simultaneously grants D-ID a perpetual, irrevocable, transferable license to use, reproduce, and create derivative works. This creates ambiguity: while nominal ownership remains with the user, D-ID's broad sublicensable rights significantly limit the user's exclusive control over generated outputs.
“[ToS] 'you retain all of your ownership rights in your User Submissions, Output and/or Animations. For clarity, you bear all risk with respect to and shall be responsible for obtaining all necessary consents, rights and/or licenses...Notwithstanding anything to the contrary in this Agreement, you retain all of your ownership rights in your User Submissions, Output and/or Animations.' [ToS] 'you hereby grant us a worldwide, irrevocable, non-exclusive, royalty-free, perpetual, and transferable right to use...prepare derivative works of...the User Submissions'”
D-ID mentions GDPR compliance mechanisms (Standard Contractual Clauses, Adequacy Decisions) and references security measures, but no SOC 2, ISO 27001, HIPAA, or other formal certifications are explicitly stated. A security FAQ page is referenced but not detailed. No published trust page or comprehensive security documentation is evident from the provided documents.
“[Privacy] 'When D-ID engages in such transfers of Personal Data, it relies on i) Adequacy Decisions as adopted by European Commission...or ii) Standard Contractual Clauses issued by the European Commission.' [ToS] 'Additional information regarding our security measures is available at: https://www.d-id.com/faqs/'”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai