Face data and retention
Last updated November 4, 2026
Face data
When you upload a photo or a clip, we check the faces in it for two things only: whether anyone looks under 18, and whether a face matches our short list of deceased public figures whose estates limit their likeness. These checks run on our safety provider and keep nothing beyond the job. We do not build a face database and we do not identify who anyone is.
Faces from a job are deleted when the job finishes. Characters you choose to save keep their photos until you delete them, and you decide each time whether to save one. Face imagery can count as biometric data under some state laws, including the Washington My Health My Data Act; the Privacy Policy covers your rights.
Retention schedule
How long each kind of data lives, and what deletes it.
| Data | Kept | Then |
|---|---|---|
| Photos uploaded as the face for a swap | Until the job settles, plus 24 hours for retries | Deleted automatically (unless saved as a character or favorited) |
| Saved characters and their photos | Until you delete them | Deleted on request or with the account |
| Reference clips you upload | Until you delete them | Deleted on request or with the account |
| Outputs and their content credentials | Until you delete them | Deleted on request or with the account; the signed manifest stays so verification keeps working for copies already shared |
| Face analysis results (boxes, age ranges, flags) | 90 days after the asset is deleted | Deleted |
| Moderation log entries (what was blocked and why) | 2 years | Deleted, unless part of a legal matter |
| Fingerprints of content removed after a report | Indefinitely | Kept so the content cannot come back |
| Material reported to NCMEC | 1 year, in a locked store | Deleted, as 18 U.S.C. 2258A requires |
| Chats, plans and job records | Until you delete the project or the account | Deleted; billing records stay 7 years for tax |
| Payment and credit ledger | 7 years | Deleted |
| Backups | 30 days | Rotated out |
Deleting your account removes everything above except what the law says we must keep (billing records, NCMEC preservation, fingerprints of removed content) within 30 days.