Privacy Policy

FaceScan AI — Last updated: July 27, 2026

1. Overview

FaceScan AI ("we", "us", "our") provides an AI-powered skin analysis widget for Shopify stores. This Privacy Policy explains how we collect, use, store, and protect your data when you use our face scanning service. We are committed to full compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Biometric Data & Face Images

When you use the face scan feature, you voluntarily submit a photograph of your face for cosmetic analysis. We treat this as sensitive biometric data and handle it with the highest level of care:

  • Processing: Your image is sent to our AI analysis provider (OpenAI) for real-time cosmetic surface analysis. The image is processed and not retained by the AI provider.
  • Storage: Your face image is stored in encrypted private storage on our servers. It is never sold, published, or shared with third parties for marketing purposes.
  • Retention: Images are retained for a maximum of 30 days, after which they are automatically and permanently deleted. You may request earlier deletion at any time.
  • Consent: By submitting your photo, you explicitly consent to the processing of your biometric data for the purpose of generating skincare recommendations. You may withdraw consent at any time.

3. Data We Collect

  • Face Images: Photographs you submit for skin analysis.
  • Analysis Results: Skin type, skin tone, detected cosmetic concerns, and overall skin health score.
  • Quiz Responses: If you use the quiz fallback, your answers about skin type, concerns, and preferences.
  • Technical Data: IP address, browser user agent, and timestamp for security and analytics purposes.
  • CRM Tags: If you are a logged-in Shopify customer, skin type and concern tags may be applied to your customer profile for personalized service.

4. How We Use Your Data

  • To generate personalized skincare product recommendations.
  • To improve the accuracy and quality of our AI analysis over time (using aggregated, anonymized data only).
  • To provide customer support related to your scan results.
  • To tag your Shopify customer profile for personalized marketing (only if you are a logged-in customer of the store).

5. Your Rights (GDPR & CCPA)

You have the following rights regarding your personal data:

  • Right to Access: You may request a copy of all personal data we hold about you.
  • Right to Deletion: You may request that we delete your face images, analysis results, and CRM tags at any time.
  • Right to Rectification: You may correct inaccurate skin type or concern data via the manual adjuster in the scanner.
  • Right to Withdraw Consent: You may withdraw consent for biometric processing at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
  • Right to Data Portability: You may receive your data in a structured, machine-readable format.
  • Right to Object: You may object to the processing of your data for marketing purposes.

To exercise any of these rights, contact us at privacy@facescanai.app.

6. Data Sharing

We do not sell your personal data. We share data only with:

  • OpenAI: For AI vision analysis of your face image. OpenAI processes the image in real-time and does not store it.
  • Shopify: If you are a logged-in customer, we may apply CRM tags to your Shopify customer profile via the Shopify API.
  • Hosting Provider: Our server hosting provider stores encrypted image files in private storage.

7. Data Security

We implement industry-standard security measures including encrypted storage, access controls, and regular security reviews. Face images are stored in private filesystem storage that is not publicly accessible. All API communications use HTTPS/TLS encryption.

8. Children's Privacy

Our service is not intended for individuals under the age of 16. We do not knowingly collect biometric data from children. If you believe a child has used our service, please contact us immediately so we can delete any associated data.

9. Medical Disclaimer

FaceScan AI provides cosmetic surface observations and product recommendations only. It is not a medical device and does not provide medical diagnosis, advice, or treatment. For persistent or clinical skin conditions, please consult a qualified dermatologist or healthcare professional.

10. Contact

For privacy questions or data requests, contact us at privacy@facescanai.app.