Descript vs. HeyGen: data protection per plan
Descript (4 plans) and HeyGen (4 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | Descript | HeyGen |
|---|---|---|
| Provider based in | Descript, Inc., 385 Grove St., San Francisco, CA 94102, USA | HeyGen Technology Inc., 12130 Millennium Drive Suite 300, Los Angeles, CA 90094, USA |
| Plans recorded | 4 | 4 |
| Hosting | US only: all 4 plans | US only: all 4 plans |
| Training on inputs | opt-out available: all 4 plans | opt-out available: Free, Creator / Pro, Businessno: Enterprise |
| DPA | not documented: all 4 plans | yes: all 4 plans |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: Descript Business vs. HeyGen Business
| Feature | DescriptBusiness | HeyGenBusiness |
|---|---|---|
| differs by plan | not publicly documented | yes |
| Details: DPA available | not publicly documented (the Trust Center lists a 'DPA' document only with 'Request access'; whether it applies to self-service plans is not stated. The security page mentions data processing agreements with suppliers) | yes (Data Processing Addendum; according to the Terms, applies when a business accepts the Terms; version 'Effective as of October 2024') Provider’s DPA |
| opt-out available | opt-out available | |
| Details: Training on inputs | Privacy policy (as of 2025-04-14): purposes include 'research and development purposes including training our artificial intelligence models'; projects: 'You can opt out of having your Projects used to improve the Descript Service' by disabling the 'Share Data with Descript' setting. Terms (as of 2025-02-25) section 8.4(e): use of Input and Output 'to train, improve, and develop its models and technologies' '(unless you have opted out of such use)'; third-party providers are said to be contractually prohibited from training on inputs/outputs. For AI speakers, voice data is used as training/research data. Security FAQ: sharing information to improve the algorithms is said to be 'disabled by default and can only be enabled by you'. Help Center 'Account data and privacy': the setting is requested during onboarding and can be changed at any time in the app settings ('Share data with Descript'); 'for any in-house AI training we maintain a clear data sharing opt-in'; according to the Help Center, current production models use no user data. | Security page: 'Non-enterprise customers may opt out at any time by contacting' the privacy contact; contracts with all AI sub-processors prohibit training on customer data. Privacy policy (as of 2026-10-15): submitted texts, voices, scripts, images and videos may be used for training on the basis of legitimate interest, opt-out by email to the privacy address. Terms (as of 2026-10-15, Section 3 for Creator/Pro/Business): licence to 'Your Content' also 'to train or otherwise improve or modify our artificial intelligence and machine learning models'. For avatars, face/body parts are processed; biometric verification on the basis of explicit consent. Trust Center FAQ: data of non-enterprise customers 'may be used to train and enhance the models that power our Services'; according to the FAQ, opt-out via the privacy policy (request by email). |
| US only | US only | |
| Details: Data residency | Privacy policy: 'Descript is based in the United States and we process and store information in the U.S.' Trust Center: hosting with AWS, GCP and Heroku; backups additionally in a separate AWS region (region not stated). The sub-processor list mostly shows 'US' as the data region. | Security page: 'All HeyGen customer data is stored in the United States on AWS infrastructure.' Sub-processor list in the Trust Center: all service providers with data location USA except BytePlus (Singapore, video generation for Video Agent). For EU customers, HeyGen refers to its certification under the EU-US Data Privacy Framework. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | Trust Center | Privacy policy |
| Details: Data retention | Trust Center (Data Erasure): 'Data is retained until a customer deletes their account or projects'; project data is permanently deleted from the servers within 30 days; daily backups, additionally in a separate AWS region. Privacy policy: storage 'for as long as necessary' for the purposes; voiceprints (Descript) and facial geometry data (at service providers) until the purpose has been fulfilled, at most three years after the last account access. | Privacy policy (as of 2026-10-15): according to the text, deletion requests are processed within 72 hours; backups/disaster recovery are retained for 60 days and then permanently deleted. In general (section 8): retention for as long as necessary to provide the services or with permission, based on criteria such as account administration, maintaining generated content, dispute resolution; no fixed periods stated for videos and avatars. |
| differs by plan | 50 USD/user/mo… (further prices in the details) | 149 USD/mo… (further prices in the details) |
| Details: Price | USD 50 per person per month with annual payment, USD 65 with monthly payment (pricing page; not stated whether VAT is included) | USD 149/month or USD 119/month with annual payment (USD 1,428 per year) with 1,500 credits; additional seats USD 20 per seat per month; credit packs and auto-reload available, prices for these not stated (pricing page). Not stated whether VAT is included; according to the Terms, the customer bears applicable taxes ('including all taxes'). |
| yes | yes | |
| Details: AI features included | yes (1,500 AI credits/month; up to 5 seats, team-wide access to Brand Studio, Priority Support with SLA according to the pricing page) | yes (1,500 credits/month, videos up to 60 min, 4K, 5 custom avatars; SAML/SSO, central billing, workspace collaboration and team management according to the pricing page) |
| 7 sources | 6 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by plan
- Descript Businessnot publicly documented
- HeyGen Businessyes
- Descript Business
not publicly documented (the Trust Center lists a 'DPA' document only with 'Request access'; whether it applies to self-service plans is not stated. The security page mentions data processing agreements with suppliers)
HeyGen Businessyes (Data Processing Addendum; according to the Terms, applies when a business accepts the Terms; version 'Effective as of October 2024')
Provider’s DPA
Training
- Descript Businessopt-out available
- HeyGen Businessopt-out available
- Descript Business
Privacy policy (as of 2025-04-14): purposes include 'research and development purposes including training our artificial intelligence models'; projects: 'You can opt out of having your Projects used to improve the Descript Service' by disabling the 'Share Data with Descript' setting. Terms (as of 2025-02-25) section 8.4(e): use of Input and Output 'to train, improve, and develop its models and technologies' '(unless you have opted out of such use)'; third-party providers are said to be contractually prohibited from training on inputs/outputs. For AI speakers, voice data is used as training/research data. Security FAQ: sharing information to improve the algorithms is said to be 'disabled by default and can only be enabled by you'. Help Center 'Account data and privacy': the setting is requested during onboarding and can be changed at any time in the app settings ('Share data with Descript'); 'for any in-house AI training we maintain a clear data sharing opt-in'; according to the Help Center, current production models use no user data.
HeyGen BusinessSecurity page: 'Non-enterprise customers may opt out at any time by contacting' the privacy contact; contracts with all AI sub-processors prohibit training on customer data. Privacy policy (as of 2026-10-15): submitted texts, voices, scripts, images and videos may be used for training on the basis of legitimate interest, opt-out by email to the privacy address. Terms (as of 2026-10-15, Section 3 for Creator/Pro/Business): licence to 'Your Content' also 'to train or otherwise improve or modify our artificial intelligence and machine learning models'. For avatars, face/body parts are processed; biometric verification on the basis of explicit consent. Trust Center FAQ: data of non-enterprise customers 'may be used to train and enhance the models that power our Services'; according to the FAQ, opt-out via the privacy policy (request by email).
Hosting
- Descript BusinessUS only
- HeyGen BusinessUS only
- Descript Business
Privacy policy: 'Descript is based in the United States and we process and store information in the U.S.' Trust Center: hosting with AWS, GCP and Heroku; backups additionally in a separate AWS region (region not stated). The sub-processor list mostly shows 'US' as the data region.
HeyGen BusinessSecurity page: 'All HeyGen customer data is stored in the United States on AWS infrastructure.' Sub-processor list in the Trust Center: all service providers with data location USA except BytePlus (Singapore, video generation for Video Agent). For EU customers, HeyGen refers to its certification under the EU-US Data Privacy Framework.
Sub-processors
- Descript Businesslist available
- HeyGen Businesslist available
- Descript Business
- Amazon Web Services, Google Cloud (hosting; US)
- AI/ML: Anthropic API, OpenRouter, Hugging Face, Baseten, ElevenLabs, Andromeda (US)
- Other service providers for analytics, sales and support (US); list contains no EU data region
HeyGen Business- Amazon Web Services (web hosting, data storage, image moderation, video processing): USA
- AI: Anthropic (LLM), OpenAI and Google (script generation, video translation, text-to-speech, content moderation), xAI (LLM, TTS, voice clone), Microsoft Azure and Elevenlabs (text-to-speech), Cartesia (TTS, voice clone), Gladia (speech recognition), fal (image generation): each USA
- BytePlus (video generation for Video Agent): Singapore
- Datadog (monitoring, log storage), Posthog (data analytics), Hex and Snowflake (data processing and querying), Retool (internal tooling), LiveKit (no purpose stated), Cloudflare (DNS): each USA
- Customer.io (email communication), Intercom (customer support and help centre): USA
Retention
- differs by plan
- Descript BusinessTrust Center
- HeyGen BusinessPrivacy policy
- Descript BusinessTrust Center (Data Erasure): 'Data is retained until a customer deletes their account or projects'; project data is permanently deleted from the servers within 30 days; daily backups, additionally in a separate AWS region. Privacy policy: storage 'for as long as necessary' for the purposes; voiceprints (Descript) and facial geometry data (at service providers) until the purpose has been fulfilled, at most three years after the last account access.HeyGen BusinessPrivacy policy (as of 2026-10-15): according to the text, deletion requests are processed within 72 hours; backups/disaster recovery are retained for 60 days and then permanently deleted. In general (section 8): retention for as long as necessary to provide the services or with permission, based on criteria such as account administration, maintaining generated content, dispute resolution; no fixed periods stated for videos and avatars.
Price
- differs by plan
- Descript Business50 USD/user/mo… (further prices in the details)
- HeyGen Business149 USD/mo… (further prices in the details)
- Descript Business
USD 50 per person per month with annual payment, USD 65 with monthly payment (pricing page; not stated whether VAT is included)
HeyGen BusinessUSD 149/month or USD 119/month with annual payment (USD 1,428 per year) with 1,500 credits; additional seats USD 20 per seat per month; credit packs and auto-reload available, prices for these not stated (pricing page). Not stated whether VAT is included; according to the Terms, the customer bears applicable taxes ('including all taxes').
- Descript Businessyes
- HeyGen Businessyes
- Descript Business
yes (1,500 AI credits/month; up to 5 seats, team-wide access to Brand Studio, Priority Support with SLA according to the pricing page)
HeyGen Businessyes (1,500 credits/month, videos up to 60 min, 4K, 5 custom avatars; SAML/SSO, central billing, workspace collaboration and team management according to the pricing page)
Evidence
- Descript Business7 sources
- HeyGen Business6 sources
- Descript Business
- PricingPricing page, retrieved 18 Oct 2026
- Privacy Policy (as of 2025-04-14)Privacy notice, retrieved 18 Oct 2026
- Terms of Service (as of 2025-02-25)Terms and conditions, retrieved 18 Oct 2026
- SecurityTrust Center, retrieved 18 Oct 2026
- Data SubprocessorsSub-processor list, retrieved 14 Oct 2026
- Descript Trust Center (SecurityPal, as of 2026-08-21)Trust Center, retrieved 18 Oct 2026
- Account data and privacy (Help Center)Help Center, retrieved 18 Oct 2026
HeyGen Business- PricingPricing page, retrieved 18 Oct 2026
- SecurityTrust Center, retrieved 18 Oct 2026
- Privacy Policy (as of 2026-10-15)Privacy notice, retrieved 18 Oct 2026
- Terms of Service (as of 2026-10-15)Terms and conditions, retrieved 18 Oct 2026
- Data Processing AddendumDPA, retrieved 14 Oct 2026
- HeyGen Trust Center (Drata)Trust Center, retrieved 18 Oct 2026
| Feature | Descript | HeyGen |
|---|---|---|
| differs by tool | not publicly documentedall 4 plans | yesall 4 plans |
| Details: DPA available |
|
|
| differs by tool | opt-out availableall 4 plans |
|
| Details: Training on inputs |
|
|
| US onlyall 4 plans | US onlyall 4 plans | |
| Details: Data residency |
|
|
| list availableall 4 plans | list availableall 4 plans | |
| Details: List published |
|
|
| differs by tool |
|
|
| Details: Data retention |
|
|
| differs by tool |
|
|
| Details: Price |
|
|
| yesall 4 plans | yesall 4 plans | |
| Details: AI features included |
|
|
| 7 sources | 6 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by tool
- Descriptnot publicly documentedall 4 plans
- HeyGenyesall 4 plans
- Descript
- Free
not publicly documented (the Trust Center lists a 'DPA' document only with 'Request access'; whether it applies to self-service plans is not stated. The security page mentions data processing agreements with suppliers)
- Hobbyist / Creator
not publicly documented (the Trust Center lists a 'DPA' document only with 'Request access'; whether it applies to self-service plans is not stated. The security page mentions data processing agreements with suppliers)
- Business
not publicly documented (the Trust Center lists a 'DPA' document only with 'Request access'; whether it applies to self-service plans is not stated. The security page mentions data processing agreements with suppliers)
- Enterprise
not publicly documented (the pricing page mentions 'custom legal terms'; the Trust Center lists a 'DPA' document only with 'Request access')
HeyGen- Free
yes (Data Processing Addendum; according to the Terms, applies when a business accepts the Terms; version 'Effective as of October 2024')
Provider’s DPA - Creator / Pro
yes (Data Processing Addendum; according to the Terms, applies when a business accepts the Terms; version 'Effective as of October 2024')
Provider’s DPA - Business
yes (Data Processing Addendum; according to the Terms, applies when a business accepts the Terms; version 'Effective as of October 2024')
Provider’s DPA - Enterprise
yes (Data Processing Addendum, part of the Order Form or Enterprise SaaS Agreement)
Provider’s DPA
- Free
Training
- differs by tool
- Descriptopt-out availableall 4 plans
- HeyGen
- opt-out availableFree, Creator / Pro, Business
- noEnterprise
- Descript
- Free
Privacy policy (as of 2025-04-14): purposes include 'research and development purposes including training our artificial intelligence models'; projects: 'You can opt out of having your Projects used to improve the Descript Service' by disabling the 'Share Data with Descript' setting. Terms (as of 2025-02-25) section 8.4(e): use of Input and Output 'to train, improve, and develop its models and technologies' '(unless you have opted out of such use)'; third-party providers are said to be contractually prohibited from training on inputs/outputs. For AI speakers, voice data is used as training/research data. Security FAQ: sharing information to improve the algorithms is said to be 'disabled by default and can only be enabled by you'. Help Center 'Account data and privacy': the setting is requested during onboarding and can be changed at any time in the app settings ('Share data with Descript'); 'for any in-house AI training we maintain a clear data sharing opt-in'; according to the Help Center, current production models use no user data.
- Hobbyist / Creator
Privacy policy (as of 2025-04-14): purposes include 'research and development purposes including training our artificial intelligence models'; projects: 'You can opt out of having your Projects used to improve the Descript Service' by disabling the 'Share Data with Descript' setting. Terms (as of 2025-02-25) section 8.4(e): use of Input and Output 'to train, improve, and develop its models and technologies' '(unless you have opted out of such use)'; third-party providers are said to be contractually prohibited from training on inputs/outputs. For AI speakers, voice data is used as training/research data. Security FAQ: sharing information to improve the algorithms is said to be 'disabled by default and can only be enabled by you'. Help Center 'Account data and privacy': the setting is requested during onboarding and can be changed at any time in the app settings ('Share data with Descript'); 'for any in-house AI training we maintain a clear data sharing opt-in'; according to the Help Center, current production models use no user data.
- Business
Privacy policy (as of 2025-04-14): purposes include 'research and development purposes including training our artificial intelligence models'; projects: 'You can opt out of having your Projects used to improve the Descript Service' by disabling the 'Share Data with Descript' setting. Terms (as of 2025-02-25) section 8.4(e): use of Input and Output 'to train, improve, and develop its models and technologies' '(unless you have opted out of such use)'; third-party providers are said to be contractually prohibited from training on inputs/outputs. For AI speakers, voice data is used as training/research data. Security FAQ: sharing information to improve the algorithms is said to be 'disabled by default and can only be enabled by you'. Help Center 'Account data and privacy': the setting is requested during onboarding and can be changed at any time in the app settings ('Share data with Descript'); 'for any in-house AI training we maintain a clear data sharing opt-in'; according to the Help Center, current production models use no user data.
- Enterprise
Pricing page: the Enterprise plan lists 'AI and data controls' with opt-out from training and custom retention. Trust Center: 'Enterprise customer data is excluded from improving, training, or developing Descript’s AI systems.' Help Center: for Enterprise drives, data sharing is disabled by default and cannot be toggled.
HeyGen- Free
Security page: 'Non-enterprise customers may opt out at any time by contacting' the privacy contact; contracts with all AI sub-processors prohibit training on customer data. Privacy policy (as of 2026-10-15): submitted texts, voices, scripts, images and videos may be used for training on the basis of legitimate interest, opt-out by email to the privacy address. Terms (as of 2026-10-15): Section 4 (Free Plan) contains no separate training licence; Section 1 permits processing for 'research and development of its AI models' for all users. Trust Center FAQ: data of non-enterprise customers 'may be used to train and enhance the models that power our Services'; according to the FAQ, opt-out via the privacy policy (request by email).
- Creator / Pro
Security page: 'Non-enterprise customers may opt out at any time by contacting' the privacy contact; contracts with all AI sub-processors prohibit training on customer data. Privacy policy (as of 2026-10-15): submitted texts, voices, scripts, images and videos may be used for training on the basis of legitimate interest, opt-out by email to the privacy address. Terms (as of 2026-10-15, Section 3 for Creator/Pro/Business): licence to 'Your Content' also 'to train or otherwise improve or modify our artificial intelligence and machine learning models'. For avatars, face/body parts are processed; biometric verification on the basis of explicit consent. Trust Center FAQ: data of non-enterprise customers 'may be used to train and enhance the models that power our Services'; according to the FAQ, opt-out via the privacy policy (request by email).
- Business
Security page: 'Non-enterprise customers may opt out at any time by contacting' the privacy contact; contracts with all AI sub-processors prohibit training on customer data. Privacy policy (as of 2026-10-15): submitted texts, voices, scripts, images and videos may be used for training on the basis of legitimate interest, opt-out by email to the privacy address. Terms (as of 2026-10-15, Section 3 for Creator/Pro/Business): licence to 'Your Content' also 'to train or otherwise improve or modify our artificial intelligence and machine learning models'. For avatars, face/body parts are processed; biometric verification on the basis of explicit consent. Trust Center FAQ: data of non-enterprise customers 'may be used to train and enhance the models that power our Services'; according to the FAQ, opt-out via the privacy policy (request by email).
- Enterprise
Security page: 'Enterprise customers' data is excluded from AI model training by default.' Trust Center FAQ: 'We ensure that our enterprise customers' data is not used to train our AI systems'. Contracts with AI sub-processors prohibit training on customer data.
- Free
Hosting
- DescriptUS onlyall 4 plans
- HeyGenUS onlyall 4 plans
- Descript
- Free
Privacy policy: 'Descript is based in the United States and we process and store information in the U.S.' Trust Center: hosting with AWS, GCP and Heroku; backups additionally in a separate AWS region (region not stated). The sub-processor list mostly shows 'US' as the data region.
- Hobbyist / Creator
Privacy policy: 'Descript is based in the United States and we process and store information in the U.S.' Trust Center: hosting with AWS, GCP and Heroku; backups additionally in a separate AWS region (region not stated). The sub-processor list mostly shows 'US' as the data region.
- Business
Privacy policy: 'Descript is based in the United States and we process and store information in the U.S.' Trust Center: hosting with AWS, GCP and Heroku; backups additionally in a separate AWS region (region not stated). The sub-processor list mostly shows 'US' as the data region.
- Enterprise
as other plans: storage and processing in the USA according to the privacy policy; no EU option documented.
HeyGen- Free
Security page: 'All HeyGen customer data is stored in the United States on AWS infrastructure.' Sub-processor list in the Trust Center: all service providers with data location USA except BytePlus (Singapore, video generation for Video Agent). For EU customers, HeyGen refers to its certification under the EU-US Data Privacy Framework.
- Creator / Pro
Security page: 'All HeyGen customer data is stored in the United States on AWS infrastructure.' Sub-processor list in the Trust Center: all service providers with data location USA except BytePlus (Singapore, video generation for Video Agent). For EU customers, HeyGen refers to its certification under the EU-US Data Privacy Framework.
- Business
Security page: 'All HeyGen customer data is stored in the United States on AWS infrastructure.' Sub-processor list in the Trust Center: all service providers with data location USA except BytePlus (Singapore, video generation for Video Agent). For EU customers, HeyGen refers to its certification under the EU-US Data Privacy Framework.
- Enterprise
as self-service: the security page states storage in the USA on AWS; according to the Trust Center, sub-processors in the USA and Singapore (BytePlus); no EU storage location documented.
- Free
Sub-processors
- Descriptlist availableall 4 plans
- HeyGenlist availableall 4 plans
- Descript
- Free
- Amazon Web Services, Google Cloud (hosting; US)
- AI/ML: Anthropic API, OpenRouter, Hugging Face, Baseten, ElevenLabs, Andromeda (US)
- Other service providers for analytics, sales and support (US); list contains no EU data region
- Hobbyist / Creator
- Amazon Web Services, Google Cloud (hosting; US)
- AI/ML: Anthropic API, OpenRouter, Hugging Face, Baseten, ElevenLabs, Andromeda (US)
- Other service providers for analytics, sales and support (US); list contains no EU data region
- Business
- Amazon Web Services, Google Cloud (hosting; US)
- AI/ML: Anthropic API, OpenRouter, Hugging Face, Baseten, ElevenLabs, Andromeda (US)
- Other service providers for analytics, sales and support (US); list contains no EU data region
- Enterprise
- as other plans
HeyGen- Free
- Amazon Web Services (web hosting, data storage, image moderation, video processing): USA
- AI: Anthropic (LLM), OpenAI and Google (script generation, video translation, text-to-speech, content moderation), xAI (LLM, TTS, voice clone), Microsoft Azure and Elevenlabs (text-to-speech), Cartesia (TTS, voice clone), Gladia (speech recognition), fal (image generation): each USA
- BytePlus (video generation for Video Agent): Singapore
- Datadog (monitoring, log storage), Posthog (data analytics), Hex and Snowflake (data processing and querying), Retool (internal tooling), LiveKit (no purpose stated), Cloudflare (DNS): each USA
- Customer.io (email communication), Intercom (customer support and help centre): USA
- Creator / Pro
- Amazon Web Services (web hosting, data storage, image moderation, video processing): USA
- AI: Anthropic (LLM), OpenAI and Google (script generation, video translation, text-to-speech, content moderation), xAI (LLM, TTS, voice clone), Microsoft Azure and Elevenlabs (text-to-speech), Cartesia (TTS, voice clone), Gladia (speech recognition), fal (image generation): each USA
- BytePlus (video generation for Video Agent): Singapore
- Datadog (monitoring, log storage), Posthog (data analytics), Hex and Snowflake (data processing and querying), Retool (internal tooling), LiveKit (no purpose stated), Cloudflare (DNS): each USA
- Customer.io (email communication), Intercom (customer support and help centre): USA
- Business
- Amazon Web Services (web hosting, data storage, image moderation, video processing): USA
- AI: Anthropic (LLM), OpenAI and Google (script generation, video translation, text-to-speech, content moderation), xAI (LLM, TTS, voice clone), Microsoft Azure and Elevenlabs (text-to-speech), Cartesia (TTS, voice clone), Gladia (speech recognition), fal (image generation): each USA
- BytePlus (video generation for Video Agent): Singapore
- Datadog (monitoring, log storage), Posthog (data analytics), Hex and Snowflake (data processing and querying), Retool (internal tooling), LiveKit (no purpose stated), Cloudflare (DNS): each USA
- Customer.io (email communication), Intercom (customer support and help centre): USA
- Enterprise
- as self-service
- Free
Retention
- differs by tool
- Descript
- Trust CenterFree, Hobbyist / Creator, Business
- Pricing page: 'custom retention' in the…Enterprise
- HeyGen
- Privacy policyFree, Creator / Pro, Business
- as self-serviceEnterprise
- Descript
- FreeTrust Center (Data Erasure): 'Data is retained until a customer deletes their account or projects'; project data is permanently deleted from the servers within 30 days; daily backups, additionally in a separate AWS region. Privacy policy: storage 'for as long as necessary' for the purposes; voiceprints (Descript) and facial geometry data (at service providers) until the purpose has been fulfilled, at most three years after the last account access.
- Hobbyist / CreatorTrust Center (Data Erasure): 'Data is retained until a customer deletes their account or projects'; project data is permanently deleted from the servers within 30 days; daily backups, additionally in a separate AWS region. Privacy policy: storage 'for as long as necessary' for the purposes; voiceprints (Descript) and facial geometry data (at service providers) until the purpose has been fulfilled, at most three years after the last account access.
- BusinessTrust Center (Data Erasure): 'Data is retained until a customer deletes their account or projects'; project data is permanently deleted from the servers within 30 days; daily backups, additionally in a separate AWS region. Privacy policy: storage 'for as long as necessary' for the purposes; voiceprints (Descript) and facial geometry data (at service providers) until the purpose has been fulfilled, at most three years after the last account access.
- EnterprisePricing page: 'custom retention' in the Enterprise plan; retention periods not documented.
HeyGen- FreePrivacy policy (as of 2026-10-15): according to the text, deletion requests are processed within 72 hours; backups/disaster recovery are retained for 60 days and then permanently deleted. Terms Section 23: Free accounts may be deleted after six months of inactivity following reasonable notice. In general (section 8): retention for as long as necessary to provide the services or with permission, based on criteria such as account administration, maintaining generated content, dispute resolution; no fixed periods stated for videos and avatars.
- Creator / ProPrivacy policy (as of 2026-10-15): according to the text, deletion requests are processed within 72 hours; backups/disaster recovery are retained for 60 days and then permanently deleted. In general (section 8): retention for as long as necessary to provide the services or with permission, based on criteria such as account administration, maintaining generated content, dispute resolution; no fixed periods stated for videos and avatars.
- BusinessPrivacy policy (as of 2026-10-15): according to the text, deletion requests are processed within 72 hours; backups/disaster recovery are retained for 60 days and then permanently deleted. In general (section 8): retention for as long as necessary to provide the services or with permission, based on criteria such as account administration, maintaining generated content, dispute resolution; no fixed periods stated for videos and avatars.
- Enterpriseas self-service (privacy policy). DPA Section 9(b): erasure 'within a reasonable amount of time' after the end of the contract or earlier on request; return of a copy and confirmation of deletion each within 30 days on request.
Price
- differs by tool
- Descript
- 0 USDFree
- several tiersHobbyist / Creator
- 50 USD/user/mo… (further prices in the details)Business
- customEnterprise
- HeyGen
- 0 USDFree
- 29 USD/mo… (further prices in the details)Creator / Pro
- 149 USD/mo… (further prices in the details)Business
- customEnterprise
- Descript
- Free
USD 0 (pricing page; no credit card required)
- Hobbyist / Creator
Hobbyist USD 16, Creator USD 24 per person per month with annual payment; USD 24 and USD 35 respectively with monthly payment (pricing page; not stated whether VAT is included)
- Business
USD 50 per person per month with annual payment, USD 65 with monthly payment (pricing page; not stated whether VAT is included)
- Enterprise
Custom (pricing page: 'Talk to sales')
HeyGen- Free
0 USD (pricing page)
- Creator / Pro
Creator USD 29/month or USD 24/month with annual payment (USD 288 per year); Pro from USD 49/month or USD 41/month with annual payment (USD 488 per year) with 1,000 credits; further Pro tiers up to 100,000 credits for USD 4,300/month (pricing page). Not stated whether VAT is included; according to the Terms, the customer bears applicable taxes ('including all taxes').
- Business
USD 149/month or USD 119/month with annual payment (USD 1,428 per year) with 1,500 credits; additional seats USD 20 per seat per month; credit packs and auto-reload available, prices for these not stated (pricing page). Not stated whether VAT is included; according to the Terms, the customer bears applicable taxes ('including all taxes').
- Enterprise
Custom (contact sales)
- Free
- Descriptyesall 4 plans
- HeyGenyesall 4 plans
- Descript
- Free
yes (100 AI credits one-off; 1 seat; export with watermark according to the pricing page)
- Hobbyist / Creator
yes (AI credits: Hobbyist 400/month, Creator 800/month; Underlord, Studio Sound, Green Screen, Eye Contact according to the pricing page; Creator up to 3 seats, billed separately)
- Business
yes (1,500 AI credits/month; up to 5 seats, team-wide access to Brand Studio, Priority Support with SLA according to the pricing page)
- Enterprise
yes (custom AI credits and media minutes according to the pricing page)
HeyGen- Free
yes (3 videos/month up to 1 min, export up to 1080p, 1 custom avatar according to the pricing page; Terms Section 4: output licensed only to a limited extent, no commercial exploitation)
- Creator / Pro
yes (Creator 600 credits/month, Pro 1,000 credits/month; videos up to 30 min; Pro with 4K export; Avatar IV, voice cloning according to the pricing page; 1 seat each)
- Business
yes (1,500 credits/month, videos up to 60 min, 4K, 5 custom avatars; SAML/SSO, central billing, workspace collaboration and team management according to the pricing page)
- Enterprise
yes (according to the pricing page, custom sales; scope not itemised)
- Free
Evidence
- Descript7 sources
- HeyGen6 sources
- Descript
- PricingPricing page, retrieved 18 Oct 2026
- Privacy Policy (as of 2025-04-14)Privacy notice, retrieved 18 Oct 2026
- Terms of Service (as of 2025-02-25)Terms and conditions, retrieved 18 Oct 2026
- SecurityTrust Center, retrieved 18 Oct 2026
- Data SubprocessorsSub-processor list, retrieved 14 Oct 2026
- Descript Trust Center (SecurityPal, as of 2026-08-21)Trust Center, retrieved 18 Oct 2026
- Account data and privacy (Help Center)Help Center, retrieved 18 Oct 2026
HeyGen- PricingPricing page, retrieved 18 Oct 2026
- SecurityTrust Center, retrieved 18 Oct 2026
- Privacy Policy (as of 2026-10-15)Privacy notice, retrieved 18 Oct 2026
- Terms of Service (as of 2026-10-15)Terms and conditions, retrieved 18 Oct 2026
- Data Processing AddendumDPA, retrieved 14 Oct 2026
- HeyGen Trust Center (Drata)Trust Center, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
Descript compared with
HeyGen compared with
Individual pages: Descript, HeyGen. All tools in the category: Image & design.