Privacy Policy
What we do
We verify whether a performer's consent to the use of their identity in AI-generated content is currently valid, and we provide a signed, timestamped record of that verification.
Data we collect and retain
We permanently retain consent terms (what uses a performer has authorized, for which territories, for which requesting parties, and for how long); permission states (whether consent is currently active, revoked, expired, or suspended); signed verification records documenting what the permission state was at each moment it was checked; and audit events recording every significant action taken on a consent record, including its creation, any state changes, and its eventual deletion. These records contain identifiers and cryptographic digests only. They do not contain biometric data.
Data we process transiently and do not retain
Biometric reference material such as facial images and voice samples. When a performer enrolls or when content is scanned, the performer or their authorized representative provides reference media. We process that media locally to generate short cryptographic digests (one-way mathematical summaries that cannot be reversed into the original media). The reference media itself is used only during the session, is never transmitted to any external server during processing, and is destroyed on a documented schedule. We retain the cryptographic digest, which identifies a record but cannot reconstruct the person. We do not operate a database or vault of biometric reference material.
Content-derived data
When content is registered with our system, we may compute and retain perceptual fingerprints or hashes of the content itself. These identify the content file, not the person depicted in it, and they enable the content to be recognized if it appears elsewhere. This data is derived from the media asset, not from any person's biometric characteristics.
Consent is granular and revocable
A performer's consent can specify different terms for different uses, different territories, and different requesting parties. Consent can be revoked at any time, and revocation can be scoped narrowly: a performer can revoke consent for a specific party or a specific use without affecting other authorized uses. When consent is revoked, the change propagates to all future verification queries within seconds. Automated responses to unusual activity default to a suspended state that preserves the performer's position while allowing review, rather than taking irreversible action.
Deletion rights
A performer or their authorized representative can request deletion of their consent record at any time. Deletion removes all data associated with the record, including all biometric-derived digests, from our active systems. Verification records already issued are retained as historical proof of what the permission state was at past moments, because those records protect both the performer and any party that relied on them. Deletion is irreversible and documented with a signed audit event. After deletion, any query for the record returns an unknown state indistinguishable from a record that never existed.
No sale of data
We never sell, license, or share biometric data, consent records, or verification records with any third party for their own commercial purposes. Verification records are issued to the party that requested verification and retained by us as the audit trail.
Processing location
All biometric processing (facial recognition, voice analysis) runs locally on infrastructure we control. No biometric data is transmitted to any external server, cloud API, or third-party processor during analysis. Our verification endpoint operates over encrypted connections and returns only permission states and signed records, never biometric data.
Children
Our services are designed for professional performers and rights holders and are not directed at children under 13. We do not knowingly collect data from children.
Regulatory alignment
Our data handling is designed to comply with the Illinois Biometric Information Privacy Act, the EU General Data Protection Regulation, the EU AI Act, and applicable state performer protection laws including the New York synthetic performer disclosure law effective June 2026. Our retention and destruction practices default to the strictest applicable standard.