Privacy notice (pilot draft)

This is a draft for a small invited pilot and has not yet been reviewed by counsel.

What we collect

• Your email address and the display name you choose.
• A short live video and photos of your government ID, only so FaceIDfier can compare them.
• Room records: who took part, when, a history of room activity (such as “submitted a video”), and each person's result. The other person's email address is used only to send them your invitation.
• Security records such as sign-in times and a one-way hash of your IP address.

Who sees what

Only authorised FaceIDfier verification staff and systems can access your video and ID, through links that expire after 60 seconds. The other person in your room sees your display name, whether you're online, your progress in the room (for example, that you submitted a video), and whether you were verified — never your video, ID, or the reasons for a result. We do not type the details from your ID (name, date of birth, number) into our systems.

How long we keep it

• Video and ID photos: deleted after the decision, and automatically within 24 hours of the decision at the latest.
• Unreviewed uploads: deleted automatically when the room expires (48 hours after both people join, or 7 days if nobody joins).
• A storage-level safety rule removes any file older than 3 days.
• Results and audit records (no images) are kept to handle questions and prevent abuse.

Service providers

We use Cloudflare (file storage), Supabase (database), Vercel (hosting), and Resend (email). They process data on our behalf.

Contact

Questions or requests about your data: hello@faceidfier.com.