Privacy Policy

Facerated is the controller responsible for personal information processed through FaceRated. Our privacy contact is:

Facerated has no appointed data protection officer at this time. Direct privacy requests to the address above.

• Account information, such as your Google account name, email address, profile image and authentication/session data.
• Images, measurements, prompts and other inputs you choose to submit to FaceRated, together with generated reports and results.
• Purchase and billing records, including product, amount, currency, payment status, transaction and Waffo Pancake checkout identifiers. We do not receive or store full card numbers.
• Support messages and information you provide when contacting us.
• Device, browser, IP address, approximate network information, log data and usage events needed for security, operations and analytics.
• Cookies and similar technologies, including necessary authentication, locale, theme and referral cookies and Google Analytics cookies where enabled.

• To create and secure your account and authenticate you through Google.
• To process requested images, inputs and analysis features and return reports or results.
• To initiate and reconcile payments, prevent fraud, handle refunds and maintain transaction records.
• To provide support, communicate about service operation and respond to legal requests.
• To maintain, troubleshoot, measure and improve the service, including through Google Analytics where permitted.
• To comply with law and protect users, Facerated and the service.

We rely on contract performance to provide requested features, legitimate interests for security and service operations, legal obligations where required, and consent for non-essential analytics or marketing where consent is required.

Necessary cookies support authentication, security, language preferences, theme preferences and referral attribution. They cannot be disabled without affecting core functionality.

Google Analytics 4 may collect usage and device information to help us understand product performance. Non-essential analytics will be used in accordance with applicable consent requirements. You can limit cookies through your browser settings.

We share information only as needed to operate FaceRated, including with:

• Cloudflare for hosting, Workers, database, storage, security and delivery.
• Google for Google authentication and Google Analytics.
• Waffo Pancake for payment checkout, payment processing, fraud controls and payment status webhooks.
• AI or model providers used to deliver a feature you request, only for the relevant processing.
• Professional advisers, authorities or transaction partners when required by law, safety or a corporate transaction.

We do not sell personal information. We require service providers to handle information only for the services they provide and subject to appropriate safeguards.

Waffo Pancake processes payment card data. FaceRated stores payment status, amount, currency and transaction references, but not full card numbers or CVV data.

We use HTTPS/TLS, access controls and least-privilege operational access where available. No method of transmission or storage is completely secure. If we become aware of a qualifying breach, we will notify affected parties and authorities within the time required by applicable law and target notification within 72 hours where required.

We retain account, analysis and service data while your account is active or as needed to provide the service. After cancellation or account deletion, account data is retained for up to 90 days and then deleted, unless retention is required for legal, tax, accounting, security, fraud-prevention or dispute-resolution purposes.

Payment and transaction records may be retained for the period required by law. Backups may take additional time to expire from routine systems.

Facerated and its service providers may process information in countries other than your own. Where required, we use applicable transfer mechanisms such as adequacy decisions, standard contractual clauses or equivalent safeguards.

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy of information, withdraw consent and complain to a data protection authority.

Send requests to support@facerated.com. We may need to verify your identity before completing a request. You can unsubscribe from non-essential marketing messages at any time; essential service and security notices may still be sent.

FaceRated is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a child provided information, contact us so we can investigate and delete it where appropriate.

We may update this Privacy Policy when our practices or legal requirements change. We will post the updated version and revise the date below. Material changes will receive reasonable notice.