Privacy Policy
Last Updated: January 16, 2026
Your Privacy Matters: At AI Face Search, we are committed to protecting your privacy and handling your personal information with the highest standards of care and transparency. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.
1. Introduction
This Privacy Policy applies to all users of AI Face Search ("we," "us," or "our") and describes our practices concerning the collection, use, and disclosure of your information through our website, applications, and services (collectively, the "Services").
By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide to us when you:
- Create an Account: Name, email address, username, password, and profile information
- Make a Payment: Billing information, payment card details (processed securely through our payment processors)
- Upload Images: Photographs and images you submit for facial recognition searches
- Contact Us: Any information you provide in correspondence, support tickets, or feedback
- Participate in Surveys: Responses, opinions, and feedback you choose to share
2.2 Information Collected Automatically
When you use our Services, we automatically collect certain information:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, search queries, time spent on pages, click patterns
- Location Data: General geographic location based on IP address
- Cookies and Similar Technologies: Data collected through cookies, web beacons, and similar tracking technologies
- Log Data: Server logs, error reports, and performance data
2.3 Information from Third-Party Sources
We may receive information about you from third-party sources, including:
- Social media platforms (if you choose to link your account)
- Payment processors and financial institutions
- Analytics providers and marketing partners
- Publicly available databases and sources
2.4 Biometric Information
Our facial recognition technology processes biometric data from uploaded images. This includes:
- Facial feature measurements and geometric patterns
- Mathematical representations (embeddings) of facial characteristics
- Metadata associated with uploaded images
Important: We treat biometric data with special care and implement enhanced security measures. Biometric data is processed only for the purpose of providing facial recognition services and is not sold or shared with third parties for their own purposes.
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 To Provide and Improve Our Services
- Process and fulfill your facial recognition search requests
- Create and manage your account
- Provide customer support and respond to your inquiries
- Improve our AI algorithms and search accuracy
- Develop new features and functionality
- Monitor and analyze usage patterns and trends
3.2 For Security and Fraud Prevention
- Detect and prevent fraud, abuse, and security incidents
- Monitor for violations of our Terms of Service
- Protect the rights, property, and safety of our users and the public
- Verify user identity and prevent unauthorized access
3.3 For Communication
- Send you service-related notifications and updates
- Respond to your comments, questions, and support requests
- Send promotional communications (with your consent)
- Conduct surveys and gather feedback
3.4 For Legal Compliance
- Comply with applicable laws and regulations
- Respond to legal requests and prevent illegal activities
- Enforce our Terms of Service and other agreements
- Protect our legal rights and interests
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data based on the following legal grounds:
| Legal Basis | Processing Activities |
|---|---|
| Contract Performance | Providing our Services, processing searches, managing your account |
| Legitimate Interest | Improving our Services, security, fraud prevention, analytics |
| Consent | Marketing communications, optional features, cookies (where required) |
| Legal Obligation | Compliance with laws, responding to legal requests |
5. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
5.1 Service Providers
We share information with trusted third-party service providers who assist us in operating our Services:
- Cloud hosting and storage providers
- Payment processors and financial institutions
- Analytics and marketing platforms
- Customer support tools
- Email service providers
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
5.2 Business Transfers
If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
5.3 Legal Requirements
We may disclose your information if required by law or in response to:
- Legal processes (subpoenas, court orders, legal proceedings)
- Government or regulatory requests
- Protection of our rights, property, or safety
- Investigation of fraud, security issues, or technical problems
5.4 With Your Consent
We may share your information with third parties when you explicitly consent to such sharing.
6. Data Retention
We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention Periods:
- Account Information: Retained while your account is active and for a reasonable period thereafter
- Uploaded Images: Processed immediately and deleted within 24-48 hours unless you save them to your account
- Search Results: Retained in your account history until you delete them or close your account
- Biometric Data: Processed in real-time and not stored beyond the immediate search operation
- Transaction Records: Retained for 7 years for accounting and legal purposes
- Marketing Data: Retained until you unsubscribe or withdraw consent
When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain certain information.
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
7.1 General Rights
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request your data in a portable format
- Objection: Object to certain processing activities
- Restriction: Request restriction of processing in certain circumstances
7.2 GDPR Rights (EEA, UK, Switzerland)
If you are located in the EEA, UK, or Switzerland, you have additional rights under GDPR, including the right to lodge a complaint with your local data protection authority.
7.3 CCPA Rights (California)
California residents have specific rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to deletion
- Right to non-discrimination for exercising CCPA rights
7.4 Exercising Your Rights
To exercise any of these rights, please contact us at privacy@aifacesearch.io or through your account settings. We will respond to your request within the timeframes required by applicable law (typically 30 days).
8. Security Measures
We implement industry-standard security measures to protect your information:
- Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
- Access Controls: Role-based access controls and multi-factor authentication
- Regular Audits: Security audits and vulnerability assessments
- Employee Training: Regular security awareness training for all staff
- Secure Infrastructure: SOC 2 compliant data centers with physical security
- Incident Response: 24/7 monitoring and incident response procedures
- Data Minimization: We collect only the data necessary for our Services
Security Notice: While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.
9. Cookies and Tracking Technologies
9.1 Types of Cookies We Use
- Essential Cookies: Required for the website to function properly
- Performance Cookies: Help us understand how visitors use our site
- Functionality Cookies: Remember your preferences and settings
- Marketing Cookies: Track your activity to deliver relevant advertisements
9.2 Managing Cookies
You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Services. You can also opt out of targeted advertising through industry opt-out tools.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.
When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for certain countries
- Binding Corporate Rules for intra-group transfers
- Other legally recognized transfer mechanisms
11. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.
12. Third-Party Links and Services
Our Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information to them.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Sending you an email notification (for significant changes)
- Displaying a prominent notice on our Services
Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacy@aifacesearch.io
- Data Protection Officer: dpo@aifacesearch.io
- Mailing Address: Available on our Contact Us page
EU Representative: For users in the European Union, our EU representative can be contacted at eu-rep@aifacesearch.io
15. Your Consent
By using AI Face Search, you acknowledge that you have read and understood this Privacy Policy and consent to our collection, use, and disclosure of your information as described herein.