Privacy Policy

Last updated: March 13, 2026

1. Data Controller

The data controller is R INVEST, SASU registered under SIREN 912 713 682, RCS Meaux, located at 11 allée des Perdrix, 77600 Bussy-Saint-Georges, France.

Contact: privacy@faceradar.ai

2. Data We Collect

2.1 Account Data

When you create an account, we collect: name, email address, and hashed password. This data is processed based on contractual necessity (Art. 6(1)(b) GDPR).

2.2 Uploaded Photos

Photos uploaded for face search are processed in memory only. They are never written to disk and are deleted immediately after the face embedding is computed. Processing is based on your explicit consent (Art. 6(1)(a) GDPR).

2.3 Face Embeddings (Index)

We index publicly available images from the internet. For each detected face, we store only a mathematical vector (512-dimensional float array) and the source URL. We do not store the original images. Processing is based on legitimate interest (Art. 6(1)(f) GDPR) for publicly available data.

2.4 Payment Data

Payment processing is handled by Stripe, Inc. We do not store credit card numbers. We retain invoice records as required by French commercial law (Article L441-9 Code de commerce).

2.5 Usage Data

We collect search timestamps, result counts, and basic analytics (page views, session duration) to improve the service. No tracking cookies from third parties are used.

3. How We Use Your Data

  • Provide the face search service
  • Process payments and generate invoices
  • Send transactional emails (account verification, password reset, payment receipts)
  • Improve service quality and fix bugs
  • Comply with legal obligations

We do not sell your personal data. We do not use your data for advertising. We do not share your data with third parties except as necessary to operate the service (Stripe for payments).

4. Data Retention

  • Uploaded photos: deleted immediately after processing (not stored)
  • Search results: 48 hours (Free plan), 30 days (paid plans)
  • Account data: retained until you delete your account
  • Invoices: 10 years (French legal requirement)
  • Face index data: until opt-out request is processed

5. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access: Request a copy of all data we hold about you
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your account and data
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to processing based on legitimate interest
  • Opt-Out: Request removal of your face from our index

To exercise any of these rights, email privacy@faceradar.ai or use our Opt-Out form.

6. Opt-Out (Face Index Removal)

If your face appears in our search index and you wish to have it removed, you may submit an opt-out request through our dedicated form. We will process removal requests within 72 hours. Once removed, your facial data will not be re-indexed.

7. Security

We implement industry-standard security measures including: encrypted data transmission (TLS), hashed passwords (bcrypt), access control, and regular security reviews. Face embeddings are stored in isolated vector databases with no direct link to personal identity.

8. International Transfers

Your data is processed and stored on servers located in France (OVH, Gravelines/Strasbourg). Payment processing by Stripe may involve transfers to the United States under Standard Contractual Clauses (SCCs).

9. Cookies

We use only essential cookies for authentication (JWT session tokens). We do not use advertising or tracking cookies. No cookie consent banner is required for strictly necessary cookies under the ePrivacy Directive.

10. Children

FaceRadar is not intended for use by persons under 18. We do not knowingly collect data from minors. If we discover that a minor has created an account, we will delete it immediately.

11. Supervisory Authority

You have the right to lodge a complaint with the French data protection authority:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the website.

13. Contact

For privacy-related inquiries:
privacy@faceradar.ai

R INVEST — 11 allée des Perdrix, 77600 Bussy-Saint-Georges, France