This notice explains how unbackoffice ("we", "us") handles personal data on Face Terminal: this website and the face check API at https://face.unbackoffice.com. Contact us by email at [email protected], or on WhatsApp at +35797439775.

1. Faces and live captures

A check uses a photo of a person (an ID document or another picture of their face), a selfie and, for a live capture, a short video of up to 15 seconds with the result of the on-screen actions and some facts about the browser and camera (for example whether the camera is a virtual one).

• What happens to them: our server compares the two faces with a face model and checks the selfie with a spoof model. We also send the photo and the selfie to Anthropic, whose Claude model compares the faces and looks for signs of a photo, screen, mask or synthetic face. The video is checked on our server for the colours shown on screen and for a pulse.
• How long: we delete the photo, the selfie and the video within 24 hours of the check. We do not keep a face template. We keep the outcome of the check (no images): the result, the scores and the time, for 12 months.
• Security: videos are encrypted at rest. Only the people who run the service can reach the server.

Checks you run on yourself on this site: we are the controller. Legal basis: your explicit consent, which you give with the consent box before each check. You can withdraw it by not running a check, or ask us to delete anything still held.

Checks a business runs through its account or key, on its customers: that business is the controller and must have its own lawful basis, usually the person's explicit consent. We process the images for it, only to run the check. Ask that business about your rights first; we will help it answer.

Live capture runs in your browser. To track your face during the actions, your browser downloads a face-tracking library from jsDelivr and its model file from Google. Both see your IP address, as with any download. The video stays in your browser until you press Check.

2. Your account

When you sign in with Google we get and keep your name, work email address, Google account ID and your company's Google Workspace domain; when you signed in, your IP address and your browser's identifying string; your referral code and who signed up through your link (shown to you masked, for example j•••@acme.com); the invite code you signed up with, if any (we see which accounts joined with each code); your keys, stored only as a one-way hash, with how many checks each has used and has left; and any paid tier or checks we add for you, with the invoice reference.

Why: to run your account and keys, count checks, handle referrals and purchases, and prevent abuse. Legal basis: performing our agreement with you, and our legitimate interest in keeping the service secure and fair.

3. Checks before you sign in

We keep the outcome of each check, the time, your IP address and your browser's identifying string, for 12 months. To enforce the daily limit we keep a one-way hash of your IP address for two days. Before your first check, Cloudflare Turnstile checks that you are a person.

4. How the site is used

To improve the site, we count page views and the steps people take on it (for example: ran a check, clicked sign-in, signed in, requested a tier), with the website you came from, your country (as reported by Cloudflare) and, once you are signed in, your account. Visits before sign-in are counted with a code made from your IP address and browser that changes every day and can't be turned back into either. We don't store your IP address for this, set no cookies for it and share it with no one. Legal basis: our legitimate interest in understanding and improving the service.

5. Who we share data with

We don't sell personal data, show ads, or use third-party analytics or tracking. We use these providers:

• Hetzner: hosts our servers and database in the European Union.
• Anthropic (USA): compares the photo and the selfie and reviews the selfie, as in section 1. Anthropic does not use this data to train its models.
• Google: sign-in, and the face-tracking model file your browser downloads for a live capture.
• jsDelivr: serves the face-tracking library your browser downloads for a live capture.
• Cloudflare (USA): protects the site and runs Turnstile. It receives your IP address and browser details.
• WhatsApp (Meta): only if you choose to message us there.
• Telegram: when you request a tier, we send your account email and company domain, the tier and the time to our sales team's private Telegram group, so we can follow up.

We may also disclose data where the law requires it, or to protect our rights or the safety of others.

6. Transfers outside Europe

Anthropic, Google, Cloudflare, jsDelivr, Meta and Telegram may process data outside the European Economic Area, including in the United States and the United Arab Emirates. Those transfers rely on the safeguards each provider offers under data protection law, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

7. Cookies

We only use cookies needed to sign in, to count free checks and to make referrals work. There are no analytics or advertising cookies.

8. How long we keep data

• Photos, selfies and videos: deleted within 24 hours of the check.
• Outcomes of checks, and the IP address and browser details logged at sign-in: 12 months, then deleted automatically. Sooner if you ask.
• Account and key records: while your account exists.
• Hashed IP addresses used for the daily limit: 2 days.
• Usage statistics: 12 months.

9. Your rights

You can ask to see, correct, delete, restrict or move your data, withdraw consent, and object to processing based on legitimate interests. Contact us by email at [email protected], or on WhatsApp at +35797439775. We will reply within one month. You can also complain to your data protection authority.

10. Changes

We may update this notice. The date above shows the latest version.