Your photos make your head. Then they are deleted.

What we keep, and for how long.

Each clock starts when your head is finished. Whatever you delete sooner is gone at once.

Downloading again after 30 days. Open the head in the web app and choose Re-download, or ask the API for the file. We rebuild the files from the master in a few minutes, free of charge, up to 3 times a day per head.

What we never do with your photos.

• No training. We never use your photos, or the heads made from them, to train models.
• One purpose. We use them only to make your head: to check the photos, build the 3D head and its skin, and pick the groom recommendations.
• No selling, no sharing. We never sell them, use them for advertising, or show them to anyone else.
• Not on our site. Every face on this site is synthetic. Your photos and heads never appear here.

How your photos are protected.

• Encrypted in transit. HTTPS between your browser or your code, our servers and the machines that build heads.
• Encrypted at rest. Photos and files are stored encrypted.
• Links that expire. A download link works for 60 seconds, an upload link for 1 hour.
• Keys we cannot read. We store API keys and sign-in links only as hashes. A key sees only its own account's heads.
• Builders keep no copy. The machine that builds your head deletes its working copy when the head is done, and a failed build's copy within 3 days.

Who can see your photos.

You, signed in to your account, and code that uses one of your API keys. A build machine reads the photos while it makes your head. Our staff look at a photo only when you ask us for help with that head, or when the law requires it.

The services that process your data.

We name them by what they do. Paddle.com is named because you pay it directly.

• Hosting and storage: runs the site and the API and stores photos and files, encrypted.
• Build machines: the computers that make the heads. They delete their working copy as described above.
• AI processing: receives your photos only to help make your head.
• Payments: Paddle.com, our Merchant of Record. It never sees your photos.
• Email: sends sign-in links and receipts. It never sees your photos.

Delete sooner, whenever you want.

• The photos of one head: open the head in the web app and choose Delete photos, or call DELETE /v1/heads/{id}/photos. The head and its files stay.
• A head: choose Delete head, or call DELETE /v1/heads/{id}. Photos, files and master are deleted at once.
• Your account: in the web app, open Account and choose Delete account. Every head, photo, file and key on it is deleted.
• Ask us: write to support@faceninja.net or use the contact form. We answer within one month.

A photo of someone else needs their permission.

Upload photos of yourself, or of adults, 18 or older, who agreed to have a 3D head made of them. Never photos of children, and never photos found online. If someone uploaded a photo of you without asking, write to us and we delete it.

The privacy policy.

The privacy policy gives the details: who is responsible, the legal bases, your rights and how to complain to a data protection authority.