Privacy Policy

Privacy Policy

Effective Date: March 18, 2026

faceATT (Pty) Ltd ("faceATT," "we," "us," or "our") provides facial recognition-based attendance, identity verification, and workforce management solutions via its website and mobile applications.

faceATT is the data controller responsible for the collection, use, and protection of your personal information in accordance with applicable data protection laws, including the Protection of Personal Information Act (POPIA), General Data Protection Regulation (GDPR), and California Consumer Privacy Act (CCPA).

By accessing our website, using our mobile application, or engaging with our services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

1.1 Personal Information

• Full name
• Email address
• Phone number
• Company or organisational details

1.2 Communication Data

Messages, attachments, support requests or feedback submitted via forms, email, or in-app communication tools.

1.3 Technical and Usage Data

• IP address
• Browser type, device information, operating system
• Pages visited, duration of visit, referral URLs
• Cookies and similar tracking technologies (see Section 6)

1.4 Biometric and Facial Recognition Data (with explicit consent)

Facial data captured via your device camera is used for identity verification, attendance tracking, and access control features.

1.5 Location Data

GPS coordinates or approximate geolocation, collected only when permission is granted.

1.6 Facial Recognition Data Retention

Facial recognition data is stored securely on our servers and is not retained indefinitely. We only retain this data for as long as necessary to provide identity verification, access control, and fraud prevention services.

Retention Period: Facial recognition data is retained until one of the following occurs:

• The user's account/profile is deleted
• The user disables or removes their facial recognition profile
• The user submits a deletion request
• The account remains inactive for a continuous period of 36 months, after which the facial recognition profile is automatically deleted

Reason for Retention: We retain facial data only for as long as necessary to enable secure authentication, attendance validation, and fraud prevention. Once no longer required, the data is permanently deleted.

Users may request deletion of their facial recognition data at any time by contacting us at info@faceatt.com.

1.7 Sharing of Facial Recognition Data

We do not sell, rent, or share facial recognition data with any third parties for marketing or commercial purposes.

All facial recognition data is processed and stored securely on our servers. Third-party services used by us (such as hosting, analytics, or infrastructure providers) do not have access to or process facial recognition data.

2. How We Collect Information

• Direct submissions (forms, account registration, support requests)
• Automatic collection via cookies and analytics tools
• Device permissions (camera, GPS, notifications)
• System logs and security monitoring tools

3. Why We Use Your Information

4. Consent

By using our services and enabling device permissions (such as camera and location), you consent to the collection and processing of your data. You may withdraw consent at any time.

5. Your Rights (POPIA, GDPR & CCPA)

• Access your personal data
• Correct or update inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent at any time
• Lodge a complaint with a data protection authority

To exercise your rights, contact: info@faceatt.com

6. Cookies

We use cookies to improve functionality, analyze traffic, and enhance user experience. You can manage cookies via your browser settings.

7. Third-Party Services

We may use third-party providers for hosting, analytics, and infrastructure. These providers process data only on our instructions and do not access biometric data.

8. Data Security

We implement encryption, secure storage, and strict access controls to protect your personal and biometric data.

9. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect data from minors.

10. Data Retention

We retain personal data only as long as necessary for legal, operational, and security purposes.

11. Updates to This Policy

We may update this policy periodically. Continued use of our services indicates acceptance of any updates.

12. Contact Us

faceATT (Pty) Ltd
Email: info@faceatt.com
Website: https://www.faceatt.com