Biometric Data & Face Search Policy
Last updated 17 July 2026
This policy explains how EventSnap handles the optional selfie search feature. It is also our public retention and destruction policy for face-search data.
In plain terms: Face search is off unless your event turns it on and you choose to opt in. If you upload a selfie, we use it only to suggest your photos from that one event — never to identify you elsewhere, and never shared with marketing, texting, email, or payment tools. Matches are suggestions you review, not proof of identity. Your selfie and the face data derived from it are deleted after the event, and you can remove them at any time.
Face search is optional
EventSnap does not use facial recognition by default. A photography company must enable selfie search for a specific event, and a guest must separately choose to upload a selfie and agree to the face-search consent language. Guests can use the normal QR or phone-based gallery flow without uploading a selfie.
What we process
- The selfie image you choose to upload.
- A face-derived representation used to compare that selfie with photos from the same event.
- Face-derived representations created from eligible photos for that event.
- The event, guest, consent, processing-status, and possible-match records needed to operate the feature.
The face-derived representation is not used as proof of identity. EventSnap presents possible matches for the guest to review; it does not make an identity, eligibility, employment, safety, or access decision.
Purpose and limits
We use this data only to suggest photos from the event for which you opted in. We do not use it to identify you in public, search other events, build an advertising profile, sell biometric data, or train a general-purpose facial-recognition model. We do not disclose face-search data to the photographer’s marketing tools, SMS provider, payment processor, or email provider.
Consent and choice
The consent checkbox names the purpose, the event scope, the possible-match nature of the result, and the deletion commitment. You can decline selfie search and still receive photos through the standard event flow. You can withdraw your face-search consent by using “Remove selfie search data” in your gallery or by contacting us.
Retention and destruction
Face-search data is scoped to one event. Before an event can use selfie search, that event must have a retention period and a verified deletion schedule. When the event’s retention deadline arrives, the retention worker permanently deletes the selfie object, provider face records and collection, face-search metadata, and open possible-match suggestions. A deletion request starts the same cleanup for that guest without waiting for the event deadline.
Deleting face-search data does not automatically delete an event photograph that is being retained for ordinary gallery delivery, a purchase, accounting, or a separate legal obligation. Those photo and transaction records follow the retention rules in the Privacy Policy.
Service providers
When the feature is active, EventSnap uses AWS Rekognition as a service provider to perform the event-scoped comparison. EventSnap also uses its ordinary private storage and database providers to store the selfie temporarily and record consent and processing status. These providers receive only what is necessary for this purpose and are not authorized to use it for their own advertising.
Security and accuracy
Face-search records are scoped by organization, event, and guest. Selfie files are private and served through expiring access links. Possible matches can be wrong or incomplete, so guests must review them before treating a photo as theirs. If a result is wrong, reject it or contact us so we can correct the gallery.
Contact and requests
For access, deletion, withdrawal, correction, or other privacy requests, email info@jonjason.com. Tell us the event code and the phone number used for the gallery when you can. We may ask for reasonable information to verify a request before disclosing or deleting data.
Controller and processor roles
The photography company running the event decides whether selfie search is offered and how the event is administered. That company is generally the controller for the event data, while EventSnap operates the software as its service provider or processor. The responsible company may have additional notices or instructions for the event.
This document is written in plain English so it is actually readable. It is not legal advice. If you are a photography company relying on EventSnap, have your own lawyer review it before you put it in front of clients.
Privacy · Biometric policy · Terms · Home