Skip to content

Biometric Data Policy

Last updated: April 2026

This Biometric Data Policy explains how SuitYourFace collects, uses, stores, and destroys biometric data in connection with its AI professional headshot generation service. This policy applies to residents of all U.S. states, with specific provisions for Illinois, Texas, and Washington.

1. What Biometric Data We Collect

We collect facial photographs that you submit for the purpose of AI model training. These photographs contain, or can be used to derive, biometric identifiers including facial geometry.

We collect this data only when you affirmatively submit photos through our upload interface. We do not collect biometric data passively, automatically, or without your active participation.

2. Purpose of Collection

Your biometric data is collected for a single purpose: to fine-tune a private AI model on your likeness so that we can generate professional headshot portraits for you.

  • Your biometric data is not used to train shared or public AI models.
  • Your biometric data is not used for authentication, surveillance, or identity verification.
  • Your biometric data is not sold, leased, traded, or used for any commercial purpose beyond generating your headshots.

3. Data Handling and Third-Party Disclosure

Your photos are transmitted to Astria, Inc. (astria.ai), our AI processing partner, solely to perform model training on your behalf. Astria processes your data as a data processor acting under our instructions and for no other purpose.

  • We do not sell, lease, trade, or otherwise profit from your biometric data.
  • We do not disclose biometric data to any third parties other than Astria for the purpose described in Section 2.
  • We may disclose biometric data if required by law, court order, or valid legal process, in which case we will notify you to the extent permitted by law.

4. Retention and Destruction Schedule

We retain biometric data only as long as necessary to fulfil the purpose for which it was collected, and no longer.

  • Uploaded photos: Transmitted to Astria for training. Photos are not retained on SuitYourFace servers beyond the duration of the upload request.
  • Astria-held training data: Retained by Astria during the active model training period (typically up to 30 days). SuitYourFace instructs Astria to delete all training data and the associated AI model after 30 days from order creation, or earlier upon your request.
  • Generated headshots: Retained in your account until you delete them or close your account.

To request immediate deletion of your biometric data, email privacy@suityourface.com with the subject line “Biometric Data Deletion Request” and include the email address associated with your account. We will process all deletion requests within 30 days.

5. Illinois Biometric Information Privacy Act (BIPA)

If you are a resident of Illinois, you have rights under the Biometric Information Privacy Act (740 ILCS 14/).

  • By uploading your photos through our platform, you provide informed written consent for the collection and use of your biometric data as described in this policy.
  • We will not disclose, redisclose, or otherwise disseminate your biometric data without your consent, except as described in Section 3 above.
  • You may request deletion of your biometric data at any time (see Section 4).
  • Our retention schedule complies with BIPA’s requirement to destroy biometric data when the initial purpose for collection has been satisfied, or within 3 years of collection, whichever is earlier.

A standalone BIPA Written Release Form is available separately, as required under 740 ILCS 14/15(b). By uploading photos you acknowledge having read that form.

For Illinois-specific inquiries, contact us at privacy@suityourface.com.

6. Texas Biometric Data (CUBI — Chapter 503)

If you are a resident of Texas, we comply with the Texas Capture or Use of Biometric Identifier Act (Business & Commerce Code, Chapter 503).

  • We collect biometric identifiers (facial geometry) with your informed consent for the purpose described in Section 2.
  • We do not sell biometric identifiers.
  • We destroy biometric identifiers in accordance with the schedule set out in Section 4, which satisfies the requirement to destroy data within a reasonable time after the purpose for collection has been fulfilled.

For Texas-specific requests, contact us at privacy@suityourface.com.

7. Washington State

Washington residents may have additional rights regarding biometric and health data under applicable state law, including the Washington My Health MY Data Act. To exercise any rights or for questions related to Washington state privacy laws, contact us at privacy@suityourface.com.

8. Your Rights

Regardless of your state of residence, you have the following rights with respect to your biometric data:

  • Right to know: You may request information about what biometric data we hold about you.
  • Right to delete: You may request deletion of your biometric data at any time.
  • Right to withdraw consent: You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise any of these rights, email privacy@suityourface.com with your account email address and a description of your request.

9. Contact

For questions about this Biometric Data Policy, email privacy@suityourface.com.

For data deletion, email privacy@suityourface.com with the subject line “Biometric Data Deletion Request”.

For our full Privacy Policy, see Privacy Policy.