Privacy Policy

Who We Are

Face Protection Registry ("FaceProtect", "we", "us", "our") operates the faceprotect.io website. This privacy policy explains how we collect, use, and protect your personal data when you join our waitlist.

Contact: privacy@faceprotect.io

What Data We Collect

For the waitlist registration, we collect:

• Email address — Required to contact you about early access
• Company name — Optional, helps us understand your use case

Why We Collect It

• To inform you about the launch of our service
• To send you updates about FaceProtect API development
• To understand our potential user base and improve our product

Legal Basis

We process your data based on your consent (Article 6(1)(a) GDPR). You provide this consent when you check the agreement box in our waitlist form.

How Long We Keep Your Data

We retain your data until:

• The service launches and you become a user, or
• You withdraw your consent, or
• Maximum 24 months from registration

Your Rights

Under GDPR, you have the right to:

• Access — Request a copy of your data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data
• Withdraw consent — At any time, without affecting prior processing
• Lodge a complaint — With your local data protection authority

To exercise these rights, email us at privacy@faceprotect.io

Who Processes Your Data

We use the following service providers:

• Supabase — Database and data storage (EU region, Frankfurt, Germany)
• Vercel — Website hosting (USA, EU-US Data Privacy Framework)

Your data is stored in the European Union (Frankfurt, Germany) to ensure GDPR compliance and data residency within the EU.

Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS)
• Access controls and authentication
• Regular security reviews

Changes to This Policy

We may update this privacy policy as our service develops. We will notify waitlist subscribers of significant changes via email.