Security & data protection
Your face is personal. Photos of you deserve extra care — here is exactly how we keep your data secure and under your control.
Encrypted in transit and at rest
All data is encrypted in transit and at rest, backed by regular security audits and limited employee access to personal data.
EU hosting, GDPR-compliant
Your data is hosted on secure European servers and processed in accordance with the GDPR. Transfers outside the EEA rely on Standard Contractual Clauses.
Uploads auto-deleted in 30 days
The selfies you upload are automatically deleted within 30 days. You can request deletion of your data at any time, and deleting your account erases everything, including any files still in storage.
Payments handled by Stripe
All payments are processed securely via Stripe. We never see or store your card details.
We never sell your data
We never sell your personal data to third parties. Subprocessors only process data on our behalf under GDPR-compliant agreements.
Your data-subject rights
Access, rectify, erase, export, restrict, or object to processing of your data. Contact legal@faceshot.ai and we respond within 30 days.
The authoritative details
This page summarizes our commitments. For the full, binding terms, read the documents below.
Questions about your data?
Our data protection team is here to help with access, erasure, or any privacy request. Email us at legal@faceshot.ai.