Effective date: 2023-10-07
1.Data controller and representative
The Data Controller for the FaceFake Services is Shanghai Enfire Info Tech Co., LTD, which has a principal place of business at No.1515 Gumei Road Phoenix Mansion 19 Floor, Xuhui District, Shanghai, China. You can contact the Data Controller and FaceFake' s data protection officer by emailing firstname.lastname@example.org.
2.Data Collection and Processing by FaceFake
When the User visits our Website, purchases an Application or Service, whether through the Website, within the Application, or through a third party app store, or uses the Application or Service, FaceFake may collect and use personal data as follows:
(1)Personal data collected
FaceFake collects the following categories of personal data, which may be collected from you, through the collection forms in the ordering process or other processes.
①Information you provide to us.
Face biometric data. Only when you agree to use the FaceFake app and choose to upload photos will we recognize the face data in the image you upload and, in accordance with your authorization, combine the identified face data with the FaceFake footage of your choice to generate new images or videos. Facial biometric data is the data you must provide to use FaceFake dressing, and if you refuse to provide it, you will not be able to use FaceFake dressing, but this does not affect your use of other features of the FaceFake app.
We may ask that you provide certain information to us when you set up an account or profile on the Website, order the Application or contact us through the Website or Application for information or support. This information may include your email address, account name, or other personal identifier, order information, purchase-token, the products you purchase, date and amount of the order, expires date,currency code,country code;
②Information we automatically collect when you visit our Website.
This information may include your IP address (or other unique device identifier, including one that we may assign); certain details about your browser, operating system, and hardware; your location, if available; the URL that referred you to our Website; your activities on our Website, including your preferences; and other logging information, such as the date and time of your visit. We also use web server logs to collect and store information about Service usage. If applicable, when you visit our Website from a mobile device, like a smartphone, we may also collect additional information from your device, including your location, device identifier, and information about your mobile network.
③Information we get from your use of our products.
We collect information about the products that you use and how you use them and your local device information, including but not limited to your device information (Android ID, e.g. phone model and brand), operating system (system version, ID, and language), IP address, operating, log information (access time、usage time、click operation, crash reports).
④Third parties may use tracking technologies in connection with our Service, which may include the collection of information about your online activities over time and across third party websites.
This Policy does not apply to these third party technologies because we may not control them and we are not responsible for them. Do Not Track is a technology that enables users to opt out of tracking by websites they do not visit. Currently, we do not monitor or take any action with respect to Do Not Track technology.
3.Purpose and legal basis of the processing
FaceFake uses the information we collect about you for the following purposes:
(1)Identification and authentication: We use your data to verify you when you access your account （if available）for the Services.
(2)Operating our services: We use your data to provide our Services, process and fulfill orders, provide customer support, and to otherwise comply with our contractual obligations to you. We (and/or our third party vendors) use your financial information to process purchases made by you.
(3)Communicating with you: We use your data when we communicate with you (e.g., when we respond to a customer support or other inquiry).
(4)Improving our services: We use your data to understand how our services are being used and how we can improve them. In general, we analyze aggregated data, rather than specific user data. We may, however, need to analyze a specific case to address a specific problem (e.g., a bug that affects only a few accounts).
(5)Marketing and advertising: We use your data to show you ads on third party sites and to send you offers. We may also use your data in delivering third party advertisements to you. This may include "targeted ads" based upon your activities.
(6)Exercising our rights: Where reasonably necessary, we use your data to exercise our legal rights and prevent abuse of our service. For example, we may use your data to detect and prevent fraud, spam, or content that violates our Terms of Service.
(7)Legal compliance: We use your data where we are legally required to do so. For example, we may need to gather your data to respond to a subpoena or court order.
(8)Protecting your information: Where appropriate, we may anonymize, backup, and delete certain data.
We may use algorithms and other automated means to implement any of the above.
To the extent that you are a resident of a European Union country or the United Kingdom, or the EU General Data Protection Regulation (GDPR) or the United Kingdom General Data Protection Regulation (UK GDPR) otherwise applies, whenever we process your data for one of the above purposes, we have determined that one or more of the following lawful bases apply:
—Compliance with a legal obligation;
—Performance of a contract;
—Legitimate commercial interest;
In the event that one of the above lawful bases do not apply, we will not process your personal information for that purpose without receiving your voluntary consent to do so.
4.Sharing of Personal Information with Third Parties
Specifically, FaceFake may use third party tracking tools to track the information on how users use the products and websites, such information will be stored in third party servers. Such third party track tools may send the data analysis report to FaceFake for FaceFake's above mentioned purpose. These third party tracking tools include but are not limited to the following;
Our partner firebase SDK will collect the following information from you: IP address, Users' names,Email addresses,iOS UDIDs,Secure Android IDs,Passwords,Phone numbers,User agents,Instance IDs,Crash traces,Breakpad minidump formatted data (NDK crashes only), Device specs (iOS),The above information will be used to uniquely identify the user to provide statistics and data analysis services. To learn more about the personal information protection of firebase currently involved in this situation, please click here.
FaceFake may store the collected information on the servers leased from providers of third- party server service.
In addition, FaceFake may disclose the User’s data to third parties for the following reasons:
—If FaceFake is under a duty to disclose or share such personal data to comply with any legal obligation, or to protect the rights, property or safety of its business, its customers or others;
—In response to official requests (e.g., court orders, subpoenas, search warrants, national security requests, etc.) ("Requests") that we receive from government authorities or parties to legal proceedings. We handle user’s location Requests under user’s location law. If the Request originates from a foreign jurisdiction, we will typically disclose information where we in good faith believe that disclosure is permitted by both jurisdictions. In all cases, we may raise or waive any legal objection or right available to us, in our sole discretion.
—Where we reasonably believe that someone's life is at risk. For example, if we become aware of a person threatening to commit suicide, we may share that person's data with appropriate entities that may have the ability to help.
—In situations involving legal claims against us or one of our users. If you challenge such a notice, we may share your response with the complainant.
5.Transfer of personal data
Your personal information may be stored on servers located in, and may be accessed by FaceFake’s employees and contractors located in one or more countries outside of the country in which you reside。And by using an Application, the Services or the Site you consent to the transfer of your Information to countries, which may be outside of your country of residence and may provide for different and less stringent data protection rules than in your country. If you object to your Information being transferred or used as described in this Policy, please do not use any Application, the Services or the Site and immediately delete all Applications from your User Devices.
6.Protection of Personal Information
7.Duration of the storage
A. FaceFake will seek to minimize the amount of personal information that it collects and maintains and will delete personal data once it is no longer needed for the purpose for which it was collected. FaceFake will store the collected personal data for the duration of the contract and 60 days after the termination of the contract. Unless we have received your request to delete your information, we will use the following criteria to determine the period for which we will keep your information:
—our contractual obligations and rights in relation to the information involved;
—legal obligations under applicable laws and regulations to retain data for a certain period of time;
—statute of limitations under applicable laws;
—our legitimate business purposes;
B. FaceFake does not store biometric data about a user's face.
To the extent required by the law of your jurisdiction, you may have one or more of the below rights. Before you exercise any of the below rights, you may consult your legal counsel if the laws of your jurisdiction stipulate below rights. You can exercise any of the below rights by submitting a support form, by emailing email@example.com.
(1)The right to be informed
(2)The right of access
(3)The right to rectification
The User is entitled to have its personal data corrected if it’s inaccurate or incomplete.
(4) The right to erasure or deletion
This‘right to be forgotten’enables the User to request the deletion or removal of its personal data where there’s no compelling reason for FaceFake to keep using it. This is not a general right to erasure; there are exceptions.
(5) The right to restrict processing
Under certain circumstances, the User has the rights to ‘block’ or suppress further use of its personal data.
(6) The right to opt out of the sale of your personal information
The user has the right to ‘opt out’ from the sale of their personal information to a third party.
(7) The right to data portability
The User has the right to receive their personal data maintained by FaceFake in a structured, commonly used and machine readable format and has the right to transmit that data to another controller.
(8) The right to object to processing
The User has the right to object, on grounds relating to its particular situation, at any time, to the processing of its personal data.
(9)The right to lodge a complaint
The User has the right to lodge a complaint about the way FaceFake handles or processes its personal data with its national supervisory authority.
(10)The right to withdraw consent
If the user has given its consent for a specific processing of its personal data implemented by FaceFake, the User has the right to withdraw its consent at any time. In case the User does so, it does not mean that anything FaceFake has done with the User’s personal data with its consent up to that point is unlawful but FaceFake will not use the user’s personal data for that purpose in the future.
(11)The right to define instructions
The User has the right to define general or specific instructions regarding storage, deletion and use of its personal data after death.
We do not knowingly collect personal information from individuals who are under the minimum required ages specified herein. You must be at least 14 years of age, or the age of majority in your jurisdiction (whichever is greater), to use our services. Individuals under the applicable age may use our services only through a parent or legal guardian's account and with their involvement. In accordance with the Child Online Privacy Protection Act, in the event that we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you are believes FaceFake may have collected personal information regarding your child, you may ask us to delete such information by using our support form.
If the user needs to contact FaceFake for any reason (including to exercise any of its rights concerning data protection as set out above) please contact firstname.lastname@example.org.
FaceFake will act on the User’s requests and provide information free of charge, except where the requests are manifestly unfounded or excessive (in particular because of their repetitive nature) in which case FaceFake may charge a reasonable fee (taking into account the administrative costs of providing the information or communication or taking the action requested), or refuse to act on the request.