Biometric Data Written Release Form

Illinois Biometric Information Privacy Act (BIPA), 740 ILCS 14/ — Last updated: April 2026

This Written Release Form is provided in accordance with the Illinois Biometric Information Privacy Act (“BIPA”), 740 ILCS 14/, and discloses the terms under which SuitYourFace (“Company”, “we”, “us”) collects, uses, stores, and destroys biometric information and biometric identifiers from Illinois residents.

1. Collecting Entity

SuitYourFace (suityourface.com). For questions or to exercise your rights, contact: privacy@suityourface.com.

2. Biometric Data Being Collected

We collect facial photographs that you upload through our platform. These photographs contain, or may be used to derive, biometric identifiers including facial geometry (as defined under BIPA, 740 ILCS 14/10).

We do not collect biometric identifiers via passive scanning, surveillance systems, or without your active participation. Biometric data is collected solely at the point you choose to submit photos through the upload interface.

3. Purpose of Collection

Your biometric data is collected for a single, specific purpose: to fine-tune a private AI model on your likeness so that we can generate professional portrait photographs for you pursuant to your purchase of our service.

Your biometric data will not be used for any of the following purposes:

• Training shared, public, or generalised AI models
• Identity verification or authentication
• Surveillance or tracking
• Any commercial purpose beyond generating your personal headshots
• Profiling, advertising targeting, or behavioural analysis

4. Length of Retention

We retain biometric data only for as long as necessary to fulfil the purpose for which it was collected, and in all cases no longer than the earlier of:

• 30 days from the date of your order — after which SuitYourFace instructs our AI processing partner (Astria, Inc.) to permanently delete your uploaded photos and the trained AI model associated with your order; or
• Your earlier deletion request — upon receiving a written deletion request we will instruct Astria to delete your biometric data within 30 days; or
• 3 years from the date of collection — the outer limit imposed by BIPA, whichever is earlier.

Your uploaded photos are transmitted directly to Astria for processing and are not retained on SuitYourFace servers beyond the duration of the upload request.

5. Third-Party Disclosure

Your biometric data is transmitted to Astria, Inc. (astria.ai), solely to perform AI model training on your behalf. Astria acts as a data processor under our instructions and is contractually prohibited from using your data for any other purpose.

We do not sell, lease, trade, or otherwise profit from your biometric data. We will not disclose your biometric data to any other third party without your written consent, except where required by law, court order, or valid legal process, in which case we will notify you to the extent permitted by law.

6. Your Rights Under BIPA

As an Illinois resident, you have the following rights:

• Right to be informed — to receive this written release form before biometric data is collected.
• Right to consent — to provide or withhold written consent before your biometric data is collected. Collection will not occur without your affirmative action.
• Right to request deletion — to request deletion of your biometric data at any time by contacting us at privacy@suityourface.com with the subject line “Biometric Data Deletion Request”. Deletion will be processed within 30 days.
• Right not to be profited from — we will not profit from your biometric data beyond delivering the service you purchased.

7. How Consent Is Given

Consistent with BIPA’s requirement for a written release (740 ILCS 14/15(b)), your consent is obtained electronically at the point of upload via an explicit checkbox on the upload page. By ticking the biometric consent checkbox and submitting your photos, you:

• confirm you have read and understood this Written Release Form;
• consent to SuitYourFace collecting, processing, and transmitting your biometric identifiers to Astria, Inc. for the purpose described in Section 3 above;
• acknowledge the retention schedule set out in Section 4; and
• acknowledge that you may withdraw consent at any time by contacting us.

An electronic consent record — including timestamp and account identifier — is retained as evidence of your consent in accordance with BIPA.

8. Contact and Complaints

To exercise any rights under this form or BIPA, or to ask questions about our biometric data practices, contact us at privacy@suityourface.com.

For our full Biometric Data Policy (including rights for Texas CUBI and Washington state residents), see our Biometric Data Policy.

For our full Privacy Policy, see our Privacy Policy.