How we handle your data at FaceFinderAi.

1. Who we are

FaceFinderAi (“FaceFinderAi”, “we”, “us”) is operated by a single‑member limited liability company organised under the laws of the State of Wyoming, USA. We provide a privacy‑focused reverse image face search engine and API at facefinderai.com. Our services are used by individuals, investigators and developers to search for visually similar faces across their own datasets or the public web.

Personal data you provide to FaceFinderAi is primarily processed and stored on infrastructure located within the European Union. We are committed to limiting the data we collect, keeping it for as short a time as practical, and giving you clear choices and controls.

2. What this policy covers

This Privacy Policy applies when you:

• browse our website and marketing pages;
• create an account and use the dashboard;
• use the free face search demo or upload an image;
• call our API or use an API key issued by FaceFinderAi;
• contact us by email or through a contact form.

If you run FaceFinderAi on your own infrastructure (self‑hosted), you are responsible for your own privacy notices and compliance. This document describes how we handle data on our managed service and public website.

3. Data we collect

Information you provide to us

• Account data: email address, password (hashed), and any optional profile details.
• Billing data: name, country/region and transaction details when you buy credits or subscriptions (payment cards are handled by third‑party processors).
• Support data: information you send us when you email [email protected] or submit a form.
• Images and search queries: photos you upload via the dashboard, free demo or API, plus related metadata (time, API key, IP address, search parameters).

Information we collect automatically

• IP address and basic device / browser information;
• request logs for our website and API (URLs, response codes, timing, headers);
• authentication events (logins, logouts, failed attempts) to prevent abuse.

Public‑web index data

For some features we use a search index built from images that are publicly available on the web. We store face embeddings and links back to the source pages. We do not try to assign real‑world names to people in these images. We respect technical restrictions where applicable and remove content from our results where we receive valid requests.

4. How we use your data

We use the data described above to:

• provide, maintain and secure the FaceFinderAi service;
• process uploads and return relevant face search results;
• operate your account, subscriptions and API keys;
• respond to support requests and technical questions;
• monitor for abuse, fraud and security incidents;
• understand how our product is used and improve it over time;
• send you essential messages about your account, security and billing (you can opt out of marketing, but not of strictly necessary operational emails).

5. How long we keep data

We keep personal data only as long as needed for the purposes above, or as required by law. Typical retention periods are:

• Account data: kept while your account is active. Basic records may be retained after closure for legal, billing and security reasons.
• Search uploads and results (managed service): kept only for the time needed to perform the search and deliver results, plus a limited period for security and debugging. Unless otherwise stated, we aim to delete or anonymize this data within 30 days.
• Web and API logs: stored for a limited time (generally up to 30 days) to detect abuse, troubleshoot issues and keep the service secure.
• Billing and transaction records: kept for the duration required by accounting and tax regulations.

When data is no longer needed, we delete it or irreversibly anonymize it.

6. How we share data

We do not sell your personal data. We may share limited information with:

• Service providers that host our infrastructure, process payments, send email, or provide analytics and logging. They only process data on our behalf under strict agreements.
• Law enforcement or regulators when we are legally required to do so, or when it is necessary to protect people’s safety, our rights, or the rights of others.
• Successors in the event of a merger, acquisition or reorganization, subject to appropriate confidentiality protections.

7. Cookies and analytics

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how visitors use our site. Where required by law, we will ask for your consent before setting non‑essential cookies or loading certain analytics scripts.

You can control cookies through your browser settings. Blocking some types of cookies may impact how certain parts of the site work.

8. Security

We use a range of technical and organizational safeguards to protect personal data, including HTTPS encryption, access controls, logging, and regular monitoring. No system is perfectly secure, but we work to minimize risk and respond quickly to issues.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict certain personal data we hold about you, and to object to some types of processing. You can:

• update some account details directly in the dashboard;
• delete images and searches from your account where that feature is provided;
• contact us at [email protected] to exercise other rights or ask questions about your data.

We may need to verify your identity before responding to certain requests. We aim to reply within a reasonable time and in line with applicable laws.

10. Children

FaceFinderAi is intended for adults and professional users. We do not knowingly collect personal data from individuals under 18. If you believe a child has provided us with personal data, please contact us and we will delete it where appropriate.

11. International transfers

As noted above, we primarily process and store personal data on infrastructure located within the European Union. Because we work with service providers and operate a company based in the United States, personal data may also be transferred to or accessed from countries outside your own jurisdiction (for example, when using payment processors such as Stripe or email providers).

Where personal data is transferred from the European Economic Area (EEA) or the United Kingdom to countries that do not have an adequacy decision, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses or equivalent mechanisms, and we take steps to ensure a level of protection essentially equivalent to that required under applicable EU data‑protection law.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice. Your continued use of FaceFinderAi after changes take effect means you accept the updated policy.

13. Contact us

If you have questions about this Privacy Policy or how we handle personal data, you can reach us at:

• Email: [email protected]