Biometric Data Policy
PixDeel offers a face search feature that lets you find photos of yourself from an event. To do this, PixDeel collects and processes biometric identifiers and biometric information as defined by the Illinois Biometric Information Privacy Act (BIPA) and similar laws. This policy explains what we collect, why, how long we keep it, and how we destroy it.
1. What we collect
PixDeel creates a mathematical representation of facial geometry (a "faceprint") from the photographs uploaded to an event and, when you use face search, from the selfie you provide. A faceprint may therefore be created from an event photograph in which you appear even if you never use face search; Section 7 explains how to have your photos removed and any such faceprint permanently destroyed, free of charge and without an account. The photographs themselves are not faceprints; a faceprint is the separate mathematical representation described above.
We do not store your name, email, or any identity document together with a faceprint. A faceprint is used only to match faces to faces.
2. Why we collect it
The only purpose is to let you and other attendees find and purchase photos in which you appear. We do not use faceprints for advertising, profiling, surveillance, or any other purpose.
3. We never sell biometric data
PixDeel does not sell, lease, trade, or otherwise profit from your biometric identifiers or biometric information. We sell photographs, never faceprints.
4. How long we keep it
This section is our retention schedule and our guideline for permanently destroying biometric identifiers and biometric information. We permanently destroy a faceprint at the earliest of:
- when you withdraw consent or ask us to remove your photos or destroy your faceprint;
- when the event gallery is archived. Archival happens automatically 365 days after the event is created on PixDeel, and the photographer can archive an event sooner; and
- in any case, within 3 years of your last interaction with PixDeel.
5. Selfies and automatic destruction
The selfie you submit for a search, and the temporary faceprint created from it, are destroyed immediately after the search completes. A faceprint is destroyed on the schedule above even if the underlying photograph is kept for sale. Destruction is automatic and enforced by our systems.
6. How we protect it
Faceprints are encrypted at rest and access is restricted to the systems that perform matching. We store, transmit, and protect faceprints using the reasonable standard of care within our industry, and in a manner that is the same as or more protective than the manner in which we store, transmit, and protect other confidential and sensitive information.
7. Your choices
Face search is optional and runs only after you consent. You can withdraw consent, or ask us to remove your photos and destroy your faceprint, at any time through the Privacy Center or by contacting privacy@pixdeel.com. You do not need an account or a purchase to make this request: if you appear in event photographs but never used face search, you can still ask us to remove your photos and permanently destroy any faceprint derived from them, through the same channels. If the person in the photos is a minor, a parent or guardian can make this request on their behalf, and we act on it promptly.
8. Contact
Questions about this policy or your biometric data can be sent to privacy@pixdeel.com.