FaceFig ("we", "us", or "our") respects user privacy and protects personal and biometric data. This Privacy Policy explains our rules for collecting, using, storing, cross-border transferring, and protecting your personal information, and applies to all AI portrait, ID photo, old photo restoration, hairstyle and outfit generation, and Print-on-Demand (POD) custom merchandise services on our platform.
1) User-uploaded portrait photos and selfie materials; 2) Registered email and basic account information; 3) System-recorded device, access, and operation logs; 4) Payment orders and subscription records (processed by our authorized payment provider Creem); 5) Shipping information for POD custom orders (name, phone, address, used by POD suppliers for production and delivery); 6) Device camera/album permission authorized by the user (used solely for selecting photos for AI generation; we do not access other files in the album; camera/album permissions are managed by the operating system and can be revoked by the user in system settings at any time).
User-uploaded facial images are used only for real-time AI generation, rendering, and export. The platform does not use user facial data for model training, does not sell it externally, does not reuse it privately, and does not disclose it to third parties. After the portrait generation task is completed, the original uploaded materials are automatically cleaned up on the server on a scheduled basis. Generated results are retained by plan tier (up to 5 years maximum) and automatically deleted upon expiry, with no indefinite retention.
نحن نعتمد على النقل المشفر (TLS)، وعزل الوصول، وآليات التدقيق لحماية بيانات المستخدم، متوافقين مع قانون حماية البيانات الشخصية في هونغ كونغ (PDPO)، واللائحة العامة لحماية البيانات في الاتحاد الأوروبي (GDPR)، وممارسات حماية البيانات العالمية الأفضل. تُستخدم فقط لمراجعة التوافق مع المحتوى، واعتراض التحكم بالمخاطر، وضمان استقرار الخدمة.
Third-party data processors involved include: 1) Payment provider Creem (processes payment orders and transaction records); 2) POD suppliers (including but not limited to third-party POD providers that have partnered with the platform, which receive shipping information and print images for physical production and delivery); 3) AI model providers (process user-uploaded images for generation). We do not store sensitive payment credentials such as card numbers or payment passwords. Each third party processes data in accordance with its own privacy policy and applicable local laws.
Under Hong Kong PDPO and GDPR, users have the following rights: 1) Access right: query your personal data; 2) Rectification right: correct inaccurate data; 3) Erasure right: request deletion of personal data (except for retained records); 4) Restriction right: restrict processing in specific circumstances; 5) Data portability right: obtain data in structured format; 6) Objection right: object to processing based on legitimate interests; 7) Automated decision-making objection right: object to purely automated decisions; 8) Withdrawal of consent right: withdraw prior consent at any time. To exercise these rights, email facefig@zohomail.com; we will respond within 30 days.