Privacy Policy.

• Account data: name, email address, password (hashed), and studio / organization name when you sign up.
• Selfie images: when a guest wants to find their photos, they upload a selfie. The selfie is used to generate a face embedding (a numerical fingerprint of the face) and is processed to match against event photos.
• Face embeddings: generated from both event photos (uploaded by the photographer) and from guest selfies. Embeddings cannot be reversed into the original face image but uniquely identify the face for matching. A guest's embedding is kept only if they ask to be emailed about new photos of them.
• Guest contact details: if a guest gives an email address or phone number (to receive a download or new-photo emails), we keep it for that event so we can deliver what they asked for.
• Event photos: images uploaded by photographers to their events, stored in our object storage with signed URLs.
• Usage data: pages viewed, photos downloaded, face scans attempted, approximate device and browser information.
• A visitor identifier: when you open a gallery link, your browser stores a random identifier so that opening the same gallery twice is counted once. It contains no personal information, is not shared with anyone else, and is never linked to your name, your email address or your face. Clearing your browser storage removes it.

We will never process your selfie or biometric data without your explicit consent. Finding your photos in a gallery needs no account, so consent is asked for at the moment it matters: the camera screen states what happens to your selfie, and links to this policy, before you take one. Taking and submitting a selfie is how you give that consent. If you close the camera without submitting one, nothing is uploaded and no face data is created.

Specifically, by agreeing you understand and consent to:

• Your selfie being uploaded and processed to detect a face.
• A face embedding being generated from your selfie and compared against face embeddings from the photographer's event photos.
• Matched photos being shown to you so you can view and download them.

You may withdraw consent at any time by emailing support@fotomeai.com. On withdrawal, we delete your selfie, your face embedding, and any account or guest record we hold for you.

• To match you with photos of yourself within an event gallery.
• To deliver and host event galleries on behalf of photographers.
• To send transactional email (verification, password reset, "your zip is ready").
• To prevent abuse, fraud, and to keep the service secure.
• To improve match accuracy in an aggregated, non-identifying way.

We do not sell your data, your selfie, or your face embedding. We do not use your selfie or face data to train third-party models.

• Selfies are not kept. A selfie is used once to generate your face embedding and is then discarded; we do not store the image. A small copy stays in your own browser so the gallery can show it back to you. It is never sent to us again, and it is removed when your gallery session ends.
• Face embeddings of guests are not stored by default: your search lives in your own browser. If you ask to be emailed about new photos of you, we keep your embedding for that event until you turn this off or unsubscribe, at which point it is deleted.
• Event photos are retained per the photographer's plan's gallery-retention window.
• Generated zip downloads expire 4 days after they are created.

We share data only with infrastructure providers needed to operate the service (object storage, transactional email, hosting, payment processing). These providers are bound by their own data protection terms. We never share your selfie or face embedding with the photographer or any other guest.

You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Contact support@fotomeai.com and we will respond within 30 days.

Data is encrypted in transit (HTTPS) and at rest. Passwords are stored hashed. Access to the database is restricted and audited. No service is ever 100% secure, but we follow industry-standard practices to protect your data.

We may update this policy as the product evolves. Material changes will be communicated via email or an in-app notice before they take effect.

Questions about this policy? Email support@fotomeai.com.