Privacy notice
What personal data we collect, why, who sees it, how long we keep it, and your choices, including the rules for face data.
Draft. Our legal team is still reviewing this wording; it may change.
Who we are
Inmagine Lab Pte. Ltd., Singapore, is the controller of your personal data. In this notice, we means that company.
Our service is for adults only. Anyone under 18 is blocked for good.
What we collect
We collect what we need to run the service:
- Account: your email, name, date of birth, country, and any Google login or linked social account.
- Your face: photos from the live face check and the head-turn, and an age estimate.
- Your ID check, only when a rule asks for it: we keep your verified legal name, the country that issued the ID, and a keyed fingerprint of the document number. We never keep the document itself.
- Your videos and scenes, and the choices you make about them.
- Money: purchases, and for verified creators, earnings and payout details.
- Reports and support: what you send us, and your email if you report while signed out.
- Records: consents, licenses and audit events, so we can prove what happened.
Your face
Face photos are biometric data. We store them encrypted, in a private bucket of their own, and reach them only through short-lived, scoped links. We keep only the photos. We do not store face vectors.
We ask for each consent separately. None is pre-checked or bundled. We record each one with its version, time, country and controller.
Everyone can only use their own face. Face matching enforces this.
How long we keep your face
You choose before your first video. Starting a scene needs a saved face.
- Use once: your photos are deleted within 24 hours of the video finishing, including copies held by our vendors.
- Saved face: valid for one year. You can delete it at any time.
- The selfie from your ID check stays while you use the service, so you do not retake it for each video. You can update or remove it. Withdrawing consent removes it. It is deleted after a year unused. A verified creator keeps theirs for their verification.
- A verified creator’s face is kept while they are a verified creator, and a replaced capture until they leave.
- An unfinished face capture is deleted after 24 hours, and so is one waiting for an ID check that has not passed by then.
- A clip you upload to start a scene: the raw upload is deleted once its checks pass. The cleaned clip is kept while the scene lives and 30 days after it ends, and deleted at once if you delete your face, close your account or withdraw the movement and performance permission. A clip waiting for staff is kept 72 hours; a clip whose scene never goes live is deleted after 7 days.
Who sees your data
Our processors see your data only for their job: video, ID checks, face checks, video checks, payments, email and storage. Every processor that touches faces must have a signed data agreement that bans training and requires deletion with proof.
Outside those processors, a brand sees your photos only under a hire, and only the photos you chose for brand deals.
Other people on the service see your videos and your public page as you have set them. A public page shows the display name you pick, never your real name. The public check page for a video shows nothing about the person who joined.
What we never do with face data
- We never sell it.
- We never use it for ads.
- We never match it against outside databases.
- We never write it to logs or analytics.
How long we keep other data
- Consent, license and audit records stay after the data itself is deleted.
- Closing an account keeps your email, sign-in, name, date of birth, country, linked accounts and payout details only until everything you earned is paid. Then we delete them with proof.
- ID document fingerprints are kept for 180 days after you close your account. Then they are erased, unless the account was banned or fraud was found.
- A scene’s clip is deleted 30 days after the last started video finishes, or later while a takedown or dispute is open.
- A signed-out reporter’s email is deleted 30 days after the decision.
- A waitlist email gets one message when your country opens. Then it is deleted, or after 12 months.
Your choices
Go to My face and data to see what we hold. There you can pause your face, delete your saved face, or withdraw a consent. Withdrawal works forwards. It stops what has not happened yet and deletes that permission’s data. It never reaches videos already delivered.
You can ask for a data export. We deliver it within 30 days and keep the file for 7 days. Deletion reaches our vendors, backups and processors, with proof. A dispute never blocks it.
Change your details in Settings. For anything else, use Contact support.
Service emails, such as a video is ready, someone joined, or a payout, need no opt-in. We send news only if you ticked the unticked box asking for it, and every one has an unsubscribe link.
Cookies and analytics
The sign-in cookie keeps you signed in and needs no choice. With your agreement only, we also use Google Analytics 4, Meta Pixel and TikTok Pixel. You can change your choice any time with Cookie settings, in the footer of our public pages and in Settings. Our Cookie notice has the details.
Keeping it safe
Staff accounts are invite-only with two-factor sign-in, and every staff action logs who did it and why. Backups are encrypted. Audit records can only be added to, never edited. We use no real personal data in development.