Privacy Policy

1. Overview & Commitment

Facemesh ("we", "our", or "us") is engineered from the ground up to provide private-by-default facial analysis without building facial recognition databases, population tracking feeds, or public profiles.

2. How Photos Are Processed

When you upload or take a photo with Facemesh:

• Client-side geometric measurement: Facial landmarks are calculated locally in your browser using MediaPipe WebAssembly. Raw landmark coordinate arrays never leave your device. Only high-level calculated ratios (canthal tilt angle, symmetry percentage, facial fifths percentage) are transmitted to our servers.
• Zero permanent photo storage: We never save raw photos to a permanent database or sell user photos to third parties.
• Temporary encrypted storage: To allow payment fulfillment across redirects and webhooks, images are encrypted at rest with AES-256 in private storage and automatically purged immediately upon report fulfillment, or after 24 hours at the latest.

3. Data We Collect

• Derived Facial Measurements: Numerical geometric attributes (canthal tilt in degrees, symmetry percentage, facial proportions).
• Audit & Consent Records: Verification timestamp, consent agreement version, and confirmation of legal age (18+).
• Payment & Account Records: Stripe checkout session references and optional account identifiers if you choose to save your report.

4. AI Vision & Third-Party Processors

When a paid report is unlocked, your image is analyzed by AI vision providers (OpenAI / OpenRouter) strictly for facial trait scoring and practical presentation tips. These providers are accessed under terms that prohibit using customer API data to train foundation models.

5. Your Rights & Contact

Under GDPR, CCPA, and applicable privacy laws, you have the right to request deletion of any session data associated with your report tokens or account. For questions or deletion requests, contact us at privacy@facemesh.tech.