Legal
Face Data Notice
The Photos feature of aeuix one can group every picture of a person in a photo shoot so a client can find them quickly. Grouping faces creates biometric data. This notice is our public, written policy on that data: what it is, how it is made, who can see it, how long we keep it, and how it is destroyed. It supplements the Privacy Policy.
What is collected
- Face position: where a face sits in a photo.
- Face template: 128 numbers produced by an open-source model from that face. It cannot be turned back into a picture and is used only to decide whether two faces belong to the same person.
- Person groups and names: which faces were grouped together and, if someone names the group, the name entered.
We do not use face data to identify people outside your company’s photo library, to look people up in any external database, to verify identity, or for any purpose other than organising your company’s own photos.
How it is made and where it is processed
When an Aeuix team member uploads a shoot with face grouping on, the model runs in that person’s web browser. The photos are never sent to a third-party face-recognition service. The templates are then saved to our database (hosted by Supabase in the United States) with the shoot. Client browsers and the iPhone app never receive templates; they receive positions and names only.
Consent and notice
Aeuix processes photo shoots for client companies. Before a shoot with face grouping is processed, the client company must have informed the people photographed that face templates will be created and how long they will be kept, and obtained their written consent where the law requires it (for example in Illinois, Texas and Washington). Aeuix provides this notice and, on request, a consent template for that purpose. Face grouping can be turned off per shoot, and Aeuix will process a shoot without it whenever a client asks.
Who can see it
- Aeuix team members, in order to organise and deliver the shoot.
- People at your company, who see positions and names for shoots Aeuix has marked visible to them, and may name people in their own shoots.
- No other client, and no third party. Our hosting provider stores the data but does not access it. We disclose face data only if the law requires it or you ask us to.
Retention and destruction schedule
| Event | What happens | When |
|---|---|---|
| A photo, person or shoot is deleted | Its face templates are permanently deleted with it | When the item leaves Trash (30 days), or immediately if deleted for good |
| Face grouping is turned off for a shoot, or “delete this shoot’s face data” is used | All templates for that shoot are deleted | Immediately |
| “Forget person” is used | That person’s templates are deleted | Immediately |
| A person photographed, or your company, asks us | The relevant templates are deleted | Within 30 days of the request |
| The purpose is satisfied | Templates are deleted when the shoot is no longer needed for your company’s work | No later than when the company relationship ends |
| Fallback | Any remaining templates are deleted | Within three years of the person’s last interaction with Aeuix, whichever of the above comes first |
Deletion removes the templates from the live database; backups holding them are overwritten within seven days.
Security
Templates are encrypted at rest and in transit, restricted by database rules to your company and the Aeuix team, and never exposed to client apps. See Security.
Your rights
If you appear in a client’s photos and want to know whether face data about you exists, or want it deleted, email will@aeuix.com with “Face data request” in the subject and the company or shoot you were photographed for. We will confirm what we hold and delete it within 30 days, and we will tell the client company so their own records match.
Changes
We will post changes to this notice here with a new date and tell client companies in advance of any change to retention.