Privacy & biometric data

1. Who we are

Facere provides real-time face swap, talking video and voice cloning tools. This policy explains what we collect when you use the site and the studio, and what we do with it.

2. What we collect

• Account data: name, email address, phone number and a hashed password.
• Biometric assets you upload: face photos, avatar training videos and voice samples.
• Session records: which feature you used, when a live session started and ended, and how many minutes it consumed.
• Support content: tickets and messages you send us.
• Basic technical logs needed to keep the service running and to investigate abuse.

3. Biometric data, specifically

Face images, training videos and voice samples are biometric identifiers. We treat them as the most sensitive data in the product.

They are stored in private, per-account storage. Other customers cannot list or read your files, and access is scoped to your authenticated account.

We never sell them, license them, or use them to train public or shared models.

4. Processors we use

Each processor only receives what it needs to deliver the feature you asked for.

• AI inference partners — perform the real-time face swap, avatar and voice cloning inference on our behalf. Assets are sent over short-lived links for processing.
• Real-time media partners — carry the low-latency audio and video of a live session. Stream contents are not recorded by us.
• Supabase — hosts the database and the private storage buckets holding your account data and assets.

5. Retention

• Saved faces, avatars and voices are kept until you delete them, or until 30 days after your account is closed.
• Deleting an item in the studio removes both the database record and the underlying file from storage.
• Live sessions are not recorded. Only metadata — feature, timestamps and minutes — is stored for billing and limits.
• Provider-side generated assets expire on the provider's own schedule, typically within 7 days.
• Session and billing metadata is retained for up to 24 months for accounting purposes.

6. Your rights

You can access, correct, export or delete your data at any time. Deleting your uploaded assets can be done yourself from the studio; for full account deletion, contact us from your account email address.

Where the law gives you the right to withdraw consent for biometric processing, withdrawing it means we can no longer provide the face swap, avatar or voice features.

7. Security

Data is encrypted in transit. Storage buckets are private and row-level security rules restrict every record to its owner. Administrative accounts exist for operations only and cannot start live sessions or browse your libraries.

8. Children

Facere is not for anyone under 18. We do not knowingly accept biometric data from minors and will delete it if we discover it.

9. Changes

If we make a material change to how biometric data is handled, we will notify account holders by email before it takes effect.