Biometric Data Policy

To format and verify your photo, our software performs automated analysis of your facial features (for example, detecting your face, checking that it is centered and unobstructed). This processing may produce a scan of facial geometry, which may be considered biometric information under some laws (including the Illinois Biometric Information Privacy Act).

We collect and use this facial data for a single purpose: to create and check a government-compliant photo that you requested. We do not use your facial data to uniquely identify you, to build any identification or surveillance capability, or for any other purpose.

We collect facial data only after you provide written informed consent (via the checkbox at upload). You may withdraw consent at any time; withdrawal does not affect processing already carried out.

We destroy your original uploaded photo and any derived facial data within 24 hours of upload, and delete the finished photo files within 30 days. We do not retain facial data for longer than necessary to provide the service, and in no event longer than 3 years from your last interaction.

We do not sell, rent, trade, profit from, or disclose your facial data to anyone, except the processors strictly necessary to provide the service (Google, for the automated compliance check, under a data processing agreement as described in our Privacy Policy).

To request deletion of your facial data or to exercise any other rights, contact us at contact@norshadynamics.com.