Privacy Policy for faceshapex.com

Last Updated: May 28, 2025

I. Introduction

A. Who We Are

Welcome to https://faceshapex.com (hereinafter referred to as "faceshapex.com", "We", "Us", or "Our"). We provide an online service (the "Services") that allows users to upload photographs for analysis to determine their face shape.

B. Purpose and Scope of This Privacy Policy

This Privacy Policy describes how faceshapex.com collects, uses, stores, shares, and protects your personal information when you (hereinafter "You" or "Your") use our website and Services. We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy applies to all information collected through the Services provided on https://faceshapex.com.

C. Acceptance of this Policy

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy and our data processing practices described herein. If you do not agree with this Privacy Policy, please do not access or use our Services.

II. Information We Collect

We collect information to provide and improve our Services. The types of information we collect are detailed below.

A. Information You Provide Directly

Uploaded Photographs: When you use our Service to determine your face shape, you voluntarily upload a photograph of a face. We collect this image file as provided by you. This is the primary piece of information required for the core functionality of our Service.
Facial Data Extracted from Photographs (Biometric Data): Our technology analyzes the photograph you upload to extract specific facial features, measurements, and geometric data. This information, collectively referred to as "Facial Data," is used to determine your face shape. It is important for you to understand that this Facial Data, due to its derivation from physical characteristics for the purpose of analysis, is considered Biometric Data. Biometric data is often treated as sensitive personal information under various data protection laws, and we handle it with a corresponding level of care.
Test Results (if saved by user): If you choose to save your test results, we will store these results. The saved results may include a representation of the analyzed face (such as an avatar or, if you opt for it, the original photo) and the determined face shape.
Communications: If you contact us via our designated email address, [email protected], or through other communication channels, we will collect the information you provide in your correspondence. This typically includes your email address and the content of your query or feedback.

B. Information Collected Automatically (Log Data)

Like many websites, we may automatically collect certain information when you access and use our Services. This information is often referred to as log data or server logs. This data includes:

Your Internet Protocol (IP) address.
The type of browser and version you are using.
Your operating system.
The dates and times you access our Services.
The specific pages you view on our website.
Referring website addresses (if you came to our site from another website).

This automatically collected information is used for system administration, to ensure the security and proper functioning of our Services, to analyze trends in usage, and to help us improve the Services for our users. Generally, this log data is not linked to the specific Facial Data you provide, unless it becomes necessary for investigating security incidents or troubleshooting specific user-reported issues.

III. How We Use Your Information

We use the information we collect for specific purposes, with a strong emphasis on limiting the use of sensitive Biometric Data strictly to what is necessary for providing the requested service.

A. To Provide and Improve Our Services

The primary use of your uploaded photograph and the extracted Facial Data is to analyze your facial features, determine your face shape, and present you with the results. This is the core purpose for which you provide the data.
To enable you to save and share your test results if you choose to use this feature.
To operate, maintain, and ensure the proper functioning of our website, including troubleshooting technical issues and providing technical support.
To monitor and analyze usage patterns and trends. This helps us understand how our Services are being used, allowing us to improve functionality, enhance the user experience, and develop new features.

B. For Security Purposes

We use collected information, including Log Data and, where necessary, information related to your interaction with the Service, to protect the security and integrity of our Services, our data, and our users. This includes detecting and preventing fraudulent activity, unauthorized access, and other potential threats.

C. To Communicate With You

We use your contact information, primarily your email address if you communicate with us, to respond to your inquiries, requests (including data deletion requests), and to provide customer support through [email protected].

D. To Comply with Legal Obligations

We may process your information if necessary to comply with applicable laws, regulations, legal processes (such as a court order or subpoena), or enforceable governmental requests.

E. Aggregated or Anonymized Data

We may aggregate or anonymize data collected through the Services, including data derived from usage patterns or Facial Data that has been processed so that it can no longer identify an individual. This aggregated or anonymized data may be used for research, statistical analysis, or to improve our Services. Such data, by definition, does not constitute personal information.

Prohibition on Other Uses of Facial (Biometric) Data

It is a cornerstone of our privacy commitment that your Facial Data (Biometric Data) will not be used for purposes unrelated to the provision and improvement of the face shape analysis service, security, or direct operational needs. Specifically, we will not use your Facial Data for marketing, advertising, building user profiles for unrelated services, or sell, lease, or trade this data to third parties, unless we obtain your separate, explicit, and informed consent for such specific uses.

IV. Legal Basis for Processing Your Information

We process your personal information based on specific legal grounds, which vary depending on the type of information and the purpose of processing.

A. Consent

For the collection and processing of your uploaded photographs and the subsequently extracted Facial (Biometric) Data for the primary purpose of providing the face shape analysis service, we rely on your explicit consent. This consent is typically indicated by your voluntary action of uploading your photo and proceeding to use the service.
We also rely on your consent when you choose to use features that allow you to save and share your test results.

B. Legitimate Interests

For processing automatically collected Log Data for purposes such as maintaining website security, ensuring operational stability, and improving our Services, we may rely on our legitimate interests. We do so only when these interests are not overridden by your fundamental rights and freedoms.
Responding to your communications and providing customer support are also typically based on our legitimate interest in engaging with our users and addressing their needs.

C. Legal Obligation

We may process your personal information where it is necessary for compliance with a legal or regulatory obligation to which we are subject.

V. Data Storage, Retention, and Security

A. Data Storage

User-uploaded photographs and the extracted Facial Data are stored temporarily on secure online servers. These servers may be owned and operated by us or by reputable third-party cloud service providers. When using third-party providers, we take steps to ensure they meet appropriate security and confidentiality standards.

B. Data Retention

Uploaded Photographs and Extracted Facial Data:
- This data is stored temporarily.
- The retention period for this data is variable, typically ranging from several months up to one year, or slightly more.
- The specific duration of retention is influenced by factors such as current server load and available storage capacity. Our objective is to retain this data only as long as necessary to provide the Service effectively to our active user base and to manage our server resources efficiently. Data may be retained towards the longer end of this stated range if server capacity allows without degrading performance for other users, or if it is briefly needed for internal service improvement analytics before scheduled deletion. This approach helps ensure a responsive and reliable service by dynamically managing resources. All such data is subject to periodic review for deletion to ensure it is not kept longer than necessary for these operational needs.
Test Results (if saved by user):
- If you choose to save your test results via a publicly accessible link, these results (which may include your photo or avatar) will be retained until you specifically request the deletion of that record, or until a broader data clean-up based on prolonged inactivity or overall resource management policies, whichever occurs first.
Log Data:
- Automatically collected Log Data is retained for a defined period, for example, up to 180 days, or as otherwise determined by our operational and security needs.
Deletion Post-Retention:
- Once the applicable retention period expires, or when the data is no longer necessary for the stated purposes, we will take steps to securely delete or anonymize the personal information in accordance with applicable data protection principles.

C. Data Security

We are committed to protecting your personal information. We implement reasonable and appropriate technical and organizational measures designed to protect your uploaded photographs and Facial Data from unauthorized access, use, disclosure, alteration, or destruction. These measures may include:

Data encryption, such as using HTTPS for data in transit and encryption for data at rest where feasible.
Access controls designed to limit access to personal data to authorized personnel who have a legitimate need to access it for their job duties.
Use of secure server infrastructure and technologies.
Periodic review of our security practices.

Despite these efforts, it is important to understand that no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

We do not share your personal information with third parties except in the circumstances described below.

A. User-Initiated Sharing

Our Services provide you with an option to save and share your test results – which may include your original photo or an avatar, along with your determined face shape – through a publicly accessible link, as per your request.

When you choose to utilize this feature and share this link, the information accessible via that link becomes publicly available. This means that anyone who has access to the link can view your results.
You are solely responsible for your decision to share your results publicly and for determining with whom you share the link.
Please exercise caution when sharing public links. We do not control the actions of third parties with whom you choose to share such information, and once shared, the platform may no longer have control over its subsequent use.

B. With Service Providers (Third Parties)

We may share your information with trusted third-party service providers who perform services on our behalf. These may include:

Cloud hosting providers for storing data and running our Services.
Analytics providers, if used, typically for aggregated or anonymized data to help us understand service usage.

These service providers are authorized to use your personal information only as necessary to provide these services to us. We require them, through contractual agreements, to maintain the confidentiality and security of your information and to process it only in accordance with our instructions and applicable data protection laws.

C. For Legal Reasons and Protection

We may disclose your information if we are required to do so by law or if we believe in good faith that such action is necessary to:

Comply with a legal obligation, a court order, or other valid legal process.
Protect and defend our rights, property, or safety.
Prevent or investigate possible wrongdoing or fraudulent activity in connection with the Services.
Protect the personal safety of users of the Services or the public.

D. Business Transfers

In the event that faceshapex.com is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of its assets, or similar transaction or proceeding, your personal information may be transferred as part of that transaction. We will notify you of any such transfer and any resulting changes to this Privacy Policy, as appropriate.

E. No Sale of Personal Information

We affirm that we do not sell your personal information, and specifically, we will not sell your Facial (Biometric) Data. This commitment is fundamental to our approach to handling your sensitive information.

VII. Your Rights and Choices Regarding Your Information

We respect your privacy rights and aim to provide you with reasonable access to and control over the Personal Information that you may have provided through your use of our Services. Depending on your geographical location and applicable data protection laws (such as the GDPR in Europe or the CCPA in California), you may have certain rights regarding your personal information.

A. General Statement of Rights

You have rights concerning your personal data, and we are committed to facilitating the exercise of these rights.

B. Specific Rights

Right to Access: You have the right to request access to the personal information we hold about you. This includes copies of your uploaded photographs, the extracted Facial Data, and any test results you may have saved.
Right to Rectification (Correction): If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request that we correct or supplement such data. For Facial Data, "correction" might involve re-uploading a photograph for a new analysis or requesting the deletion of an existing record and performing a new test.
Right to Deletion (Erasure): You have the right to request the deletion of your personal information, including your uploaded photos, extracted Facial Data, and any saved test records.
- Specific Deletion Process: To request the deletion of your test record from our systems, you must provide us with either:
  - (a) The unique public link to your saved test result (if you chose to save and share it), OR
  - (b) The very precise date and time (including timezone, if known) when you conducted your test on faceshapex.com.
- Explanation of Necessity for Specific Information: This specific information is crucial for us to accurately locate your individual test record within our systems and ensure we are deleting the correct data. Due to the temporary nature of data storage and the volume of analyses performed, we cannot reliably locate specific test records without this precise identifying information. This requirement is an operational necessity to fulfill your request accurately.
- We will endeavor to respond to your deletion request within a reasonable timeframe, in accordance with applicable law.
- Please note that there may be circumstances where we are legally required or permitted to retain certain information, even after a deletion request (e.g., for compliance with legal obligations, to resolve disputes, or to enforce our agreements).
Right to Withdraw Consent: Where our processing of your personal information is based on your consent (particularly for your uploaded photographs and the derived Facial Data), you have the right to withdraw that consent at any time. Withdrawing your consent will not affect the lawfulness of any processing conducted prior to your withdrawal. If you withdraw consent for the processing of your facial data, we will stop the relevant processing, which will typically involve the deletion of your data and may mean you can no longer use certain features of our Services.
Right to Object to Processing: In situations where we process your information based on our legitimate interests, you may have the right to object to this processing, depending on your jurisdiction and the specifics of the processing activity.
Right to Data Portability: Depending on your jurisdiction (e.g., under GDPR), you may have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and you may have the right to transmit those data to another controller where technically feasible.

C. How to Exercise Your Rights

To exercise any of these rights, please contact us at our designated email address: [email protected]. In your request, please specify which right you wish to exercise and provide sufficient information to allow us to verify your identity and properly process your request. We may need to request additional information from you to confirm your identity before acting on your request. This verification is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

D. Summary of Your Rights

For ease of understanding, the table below summarizes your key rights and how to exercise them.

| Your Right | Description | How to Exercise | | :------------------------------ | :---------------------------------------------------------------------------------------------------------------------------------------- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Access Your Information | Request a copy of the personal information we hold about you (e.g., your photo, Facial Data, test results if saved). | Email your request to [email protected]. | | Correct Your Information | Request correction of inaccurate or incomplete personal information. (May involve re-uploading a photo for re-analysis or deleting an old record). | Email your request with details of the correction to [email protected]. | | Delete Your Information | Request the deletion of your test record and associated photo/Facial Data. | Email your request to [email protected], providing your specific test link OR the precise date and time of your test. See Section VII.B.3 above for why this specific information is required. | | Withdraw Consent | Withdraw your consent for us to process your uploaded photo and Facial Data. | Email your request to [email protected]. This will typically result in the deletion of your data. | | Object to Processing | (If applicable under your local law) Object to our processing of your data where we rely on legitimate interests. | Email your request to [email protected], explaining your reasons for objection. | | Data Portability | (If applicable under your local law) Request your data in a portable format. | Email your request to [email protected]. |

VIII. Cookies and Similar Technologies

Our website, faceshapex.com, may use cookies or similar technologies (such as local storage) to enhance your user experience and ensure the proper functioning of our Services.

Types of Cookies: We may use "essential" or "strictly necessary" cookies that are required for the website to operate. These might include cookies that manage your session or ensure secure access. If we use analytics cookies, they would be to help us understand how users interact with our Services (e.g., which features are popular, how users navigate the site) so we can make improvements.
Purpose: Cookies are used to ensure the website functions correctly, to remember your preferences (if any), and potentially to gather anonymous statistics about website usage.
Managing Cookies: Most web browsers allow you to control cookies through their settings preferences. You can set your browser to block certain cookies or to alert you when a cookie is being set. However, if you block essential cookies, some parts of our Services may not function properly.
Consent: For any non-essential cookies (e.g., analytics cookies that are not strictly necessary for the site's operation), we will seek your consent before placing them on your device, typically through a cookie banner or similar mechanism, in compliance with applicable laws.

IX. International Data Transfers

Your personal information may be processed and stored in a country where we or our service providers operate. This may include transfers of your data across international borders.

Location of Processing: We will specify the primary location(s) where data is processed and stored if consistent.
Cross-Border Transfers: If your information is transferred from your region (e.g., the European Economic Area - EEA) to countries outside of it that may not offer the same level of data protection, we will take steps to ensure that any such transfers comply with applicable data protection laws. This may include implementing safeguards such as Standard Contractual Clauses (SCCs) approved by relevant authorities or relying on adequacy decisions where applicable. By using our Services, you understand that your information may be transferred to our facilities and to those third parties with whom we share it as described in this Privacy Policy.

X. Children's Privacy

Our Services are not directed to, and we do not knowingly collect personal information from, children under a specific age.

Age Limit: Our Services are not intended for individuals under the age of 16 (or the equivalent minimum age for providing consent to processing of personal data in your relevant jurisdiction, which may be as low as 13 in some EU member states). Users below this age are prohibited from using the Services or providing any personal information to us.
No Knowing Collection: We do not knowingly collect personal information from children under this age.
Parental Contact: If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected].
Action on Discovery: If we become aware that we have inadvertently collected personal information from a child under the specified age without verification of parental consent, we will take prompt steps to remove that information from our servers.

XI. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, technological advancements, legal or regulatory requirements, or for other operational reasons.

Notification of Changes: We will notify you of any changes by posting the new Privacy Policy on this page and prominently updating the "Last Updated" date at the top of this Privacy Policy.
Review Encouraged: You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Material Changes: For any changes that we consider to be material (e.g., changes that significantly alter our data processing practices concerning sensitive data like Facial Data), we may provide more prominent notice, such as a banner on our website, before the changes take effect.

XII. Contact Us

If you have any questions, comments, or concerns about this Privacy Policy, our data handling practices, or if you wish to exercise any of your rights as described in this policy, please do not hesitate to contact us.

Email: [email protected]

Please allow a reasonable time for us to respond to your inquiries.

By using faceshapex, you acknowledge that you have read, understood, and agree to be bound by these privacy policies. Thank you for choosing faceshapex!