Biometric Data Policy

This policy explains how Ingenue Rights Co. (“Ingenue”) handles biometric data. It supplements our Privacy Policy. Because face scans are sensitive, we want to be clear about what we collect, why, how long we keep it, and how it is destroyed.

What we collect

When you create a scan, we collect a 3D model of your face — facial geometry (mesh), a texture map, and expression blendshapes. We also use a 3D liveness and government-ID check, performed by our verification provider (Persona), to confirm you are a real, living person and that the scan is of you.

Consent

We collect and process your biometric data only after you provide informed, written consent in the app. You are never required to scan to browse the Service, and you may decline or withdraw consent at any time (which means we can no longer offer scanner features to you). The Service is not available to residents of Illinois.

How we use it

• To create the scan asset you choose to list and license.
• To verify your identity and age and prevent impersonation and fraud.
• To deliver a licensed scan to a buyer you have approved, under the terms you set.

Selling and disclosure

We do not sell, lease, or trade your identity-verification biometrics. Your scan asset is licensed only at your direction — to buyers you approve, for the uses you permit. Ingenue charges a service fee for operating the marketplace and never licenses your scan without your authorization. We disclose biometric data to service providers (such as Persona and our hosting and database providers) only as needed to operate the Service, or where required by law.

Retention and destruction

We retain biometric data only as long as needed to fulfill the purpose for which it was collected. We will permanently destroy your biometric data when the initial purpose has been satisfied, when you delete the associated scan or your account, or within three years of your last interaction with us — whichever occurs first — except where a longer period is required by law or to resolve a dispute. Identity- verification biometrics are handled and retained by Persona under its own schedule and are not stored on Ingenue's servers.

Security

We protect biometric data using technical and organizational safeguards and limit access to personnel and providers who need it to operate the Service.

Your rights

• Withdraw consent and stop using scanner features at any time.
• Pull a listing so no new licenses are sold.
• Request access to or deletion of your stored scans and biometric data.

To exercise these rights, email hello@ingenue.ai.