Privacy Policy

Effective date: 1 August 2026  ·  Last updated: 1 August 2026

1. Introduction

Welcome to FaceLogon ("Company", "we", "our", or "us"). Your privacy is important to us. This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights regarding your information.

By using our website, applications, APIs, or services (collectively, the "Services"), you agree to this Privacy Policy.

2. Face Recognition and Biometric Processing

FaceLogon provides face-based sign-in. Because this involves biometric processing, we set out here exactly what happens to a facial image, in addition to everything else in this policy.

How a face sign-in works

• When you sign up or sign in, your device camera captures an image of your face.
• That image is transmitted over an encrypted connection to a third-party tokenisation service, which converts it into a token.
• The token is a value derived from the image. It is not an image, and it is not a stored facial template.
• The image exists only in server memory for the duration of that processing. It is not written to disk, not stored in any database, and not retained after the request completes.

What we do not store

• We do not store photographs or video of your face.
• We do not store facial templates, face geometry maps, or biometric identifiers.
• We do not build a searchable library of faces.
• Neither we nor the websites using FaceLogon can retrieve or view an image of your face.

Consent

Face processing takes place only after you agree to it, and only for the purpose of signing you in to the website you are using. You may withdraw consent at any time by asking the website you signed up with to delete your FaceLogon account, or by contacting us directly.

Alternatives

Face sign-in is a choice offered by the website you are using. If you would prefer not to use it, contact that website for an alternative way to access your account.

Third-party tokenisation

The tokenisation service acts on our instructions and only for the purpose of producing a token during your sign-in. It is contractually restricted from retaining, reusing, or disclosing the image.

3. Information We Collect

We collect only the information necessary to provide and improve our Services.

Information you provide

• Full name
• Email address
• Phone number (optional, where applicable)
• Encrypted or hashed password
• Account preferences
• Information you voluntarily submit through forms, support requests, or communications

Which of these are collected depends on what the website using FaceLogon has chosen to ask for. Some sites ask for nothing beyond a face.

Information generated through your use

• User ID
• Account settings
• Authentication events and login timestamps
• Device identifiers where required for security
• IP address used during authentication
• Security logs and error logs
• Service usage necessary for operation

These records are used solely for security, reliability, fraud prevention, and providing the Services.

4. Information We Do Not Collect

• Government identification numbers
• Financial information (unless specifically required by a separate service)
• Credit card information (unless processed through an integrated payment provider)
• Sensitive personal information unrelated to providing our Services

5. How We Use Your Information

• Create and manage your account
• Authenticate users
• Provide requested Services
• Secure your account
• Respond to support requests
• Prevent fraud and abuse
• Maintain system integrity
• Comply with applicable laws
• Communicate important service notices

We do not use your personal information for advertising or profiling.

6. No Sale or Sharing of Personal Information

We do not sell, rent, or trade personal information, share it with advertisers or marketing companies, or build advertising profiles. Your information remains under our control and is used solely for operating our Services.

7. Third-Party Services

We do not use third-party analytics or advertising platforms, including Google Analytics, Meta Pixel, Mixpanel, Hotjar, or Amplitude. We do not permit advertising networks to collect information through our Services.

Where we rely on third-party infrastructure providers (for example cloud hosting, biometric tokenisation, email delivery, or payment processing), those providers act only on our instructions and only to the extent necessary to provide the service.

8. Cookies

We use only essential cookies and similar technologies required for logging users in, maintaining authenticated sessions, security, preventing fraud, and remembering basic user preferences. We do not use advertising cookies or behavioural tracking cookies.

9. Password Security

Your password is never stored in plain text. Passwords are securely hashed using industry-standard cryptographic methods before storage. Our staff cannot retrieve your password. If you forget it, it must be reset rather than recovered.

10. Data Security

• Encryption in transit (HTTPS/TLS)
• Secure password hashing
• Restricted administrative access
• Firewalls and access controls
• Security monitoring
• Regular software updates
• Backup procedures

Although we take appropriate security measures, no system connected to the Internet can be guaranteed to be completely secure.

11. Data Retention

We retain personal information only as long as necessary to provide the Services, meet legal obligations, resolve disputes, enforce our agreements, and maintain security records where appropriate. When information is no longer required, it is securely deleted or anonymised where practicable.

Facial images are not retained at all, as described in section 2.

12. Your Rights

Subject to applicable law, you may have the right to access, correct, or update your personal information; request deletion of your account or your personal information where legally permissible; request a copy of your information; withdraw consent where processing is based on consent; and object to certain processing activities.

To exercise these rights, contact us using the details below.

13. Account Deletion

You may request deletion of your account at any time. Following verification of your request, we will delete or anonymise your personal information unless we are required to retain certain records for legal, security, or regulatory purposes. Some backup copies may remain for a limited period before being permanently removed.

14. Children's Privacy

Our Services are not directed to children under the age required by applicable law without appropriate parental or guardian consent. We do not knowingly collect personal information from children in violation of applicable law. If we become aware that such information has been collected, we will take reasonable steps to delete it.

15. International Users

If you access our Services from outside the country where our servers are located, your information may be transferred to and processed in that country. By using our Services, you acknowledge this transfer where permitted by law.

16. Legal Disclosure

We may disclose personal information only if required to comply with applicable law, respond to valid court orders or lawful government requests, protect our legal rights, prevent fraud or criminal activity, or protect the safety of our users or others. We do not voluntarily disclose personal information beyond these circumstances.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our website or by email where appropriate. The updated policy becomes effective upon publication unless otherwise stated.

18. Contact Us

Company: FaceLogon
Email: office@FaceLogon.com
Website: www.facelogon.com