Protect My Face
Protect My Face is provided by Sundial Mirage, Inc. (“Sundial,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, store, and protect your information when you use Protect My Face (the “Service”).
Protect My Face helps you monitor where your likeness may appear online. To do this, we process images you upload and generate a mathematical facial signature that can be compared against images found online. We are committed to handling your data responsibly, securely, and transparently.
Certain features of the Service involve the processing of biometric data derived from your uploaded images. That processing is described in our Biometric Data Policy, which forms part of this Privacy Policy.
When you upload photos, we analyze them to extract facial features and generate a mathematical facial signature that can be compared against images found online.
Certain processing performed by the Service may involve biometric data under applicable laws. That processing is described in our Biometric Data Policy, which forms part of this Privacy Policy.
We may collect limited technical data such as:
This helps us operate, secure, and improve the Service.
When we detect potential matches, we may collect and store:
We use your information to:
We retain your uploaded photos and related data:
If you delete your account or request deletion, we will delete your photos within 30 days, except where retention is required for:
Retention and deletion of biometric data are governed by the Biometric Data Policy.
We do not sell your personal data.
We may share information only in limited circumstances:
With trusted vendors who help us operate the Service (e.g., hosting, security, payments), under strict confidentiality obligations.
When you choose to submit a takedown request or report, we may include relevant information (such as images or evidence) as part of that process.
If required by law, regulation, legal process, or to protect rights, safety, or the integrity of the Service.
In connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.
Depending on your location, you may have the right to:
You can:
Additional rights and controls relating to biometric data are described in the Biometric Data Policy.
We take the security of your information seriously and implement a combination of technical, administrative, and organizational safeguards designed to protect your data.
These measures include:
We use encryption in transit and, where appropriate, at rest to protect data from unauthorized access.
Access to personal data is restricted to authorized personnel and service providers who require it to operate the Service. Access is limited based on role and subject to confidentiality obligations.
We use reputable cloud and infrastructure providers with security controls designed to protect against unauthorized access, data loss, and service disruption.
We maintain logging, monitoring, and alerting systems to detect and respond to suspicious activity, unauthorized access attempts, and potential vulnerabilities.
We design our systems to collect and retain only the data necessary to provide the Service and support its functionality.
Facial data and derived mathematical representations are handled with heightened safeguards appropriate to their sensitivity.
We periodically review and improve our security practices to address evolving threats and technologies.
We take the security of your personal data seriously and invest in industry-leading safeguards, including encryption, access controls, and continuous monitoring, to keep it protected. Our security practices are regularly reviewed and strengthened to stay ahead of evolving threats.
That said, as with any system operating over the internet, no technology can eliminate every conceivable risk. While such events are highly unlikely, should a security incident ever affect your personal data, we will act swiftly to investigate and contain it, and will notify affected users and relevant authorities where required by applicable law.
Your information may be processed in countries other than where you live. We take steps to ensure appropriate safeguards are in place where required by law.
Where required by applicable law, we implement safeguards for cross-border data transfers.
The Service is intended for adults.
We do not knowingly collect personal data from children without appropriate authorization.
If you believe a child’s data has been submitted improperly, please contact us and we will take appropriate action.
We may update this Privacy Policy from time to time.
If we make material changes, we will provide notice through the Service or other appropriate means.
Sundial Mirage, Inc.
1111B S Governors Ave STE 20907
Dover, Delaware, USA 19904
ProtectMyFace.org