Privacy Policy
How BSoura handles your selfie, the face template we create from it, and the event photos you appear in.
The short version
- You take a selfie only if you choose to. We turn it into a temporary face template, use it to find your photos at one specific event, and delete it as soon as the search finishes.
- We never sell your data, never use your face to advertise, profile, or train models, and never match you across other events.
- Event photos and their face data are deleted at the event's retention window — 30 days after the event by default.
- You can remove any photo you appear in, and you control whether you ever search at all.
Who we are
BSoura ("BSoura", "we", "us") is operated by [PLACEHOLDER: legal entity name & form], incorporated in [PLACEHOLDER: country of incorporation], with a registered address at [PLACEHOLDER: registered address]. We are the controller responsible for the data described in this policy, including any face template we create to match you to your photos.
Contact for privacy matters
Privacy requests: [PLACEHOLDER: contact email for privacy requests]
Data-protection contact: [PLACEHOLDER: DPO / privacy contact name or role]
What we collect
Technical & usage data
The event link you open and limited technical data — for example your device type and a temporary record used to rate-limit searches and prevent abuse. We do not require an account to find your photos.
Event photos
The photographs an event photographer uploads for the event you are attending.
Your selfie and face template (biometric data)
When you choose to search, you take or upload a selfie. We convert that selfie into a numeric face template — a mathematical representation of your facial features. A face template is biometric data and is treated as sensitive in every market we operate in. We also compute a face template for each face detected in the event photos so that a match is possible.
Why we use it, and our legal basis
We use your selfie and face template for a single purpose: to locate the photos you appear in at the specific named event you opened, and to let you view and download them.
- We do not use your face template for advertising or marketing.
- We do not use it to build a profile of you or to train or improve models.
- We do not match you across other events or against any external database.
Because a face template is biometric data, we rely on your explicit, specific, opt-in consent as our legal basis in every market — this is the only basis available for biometric processing, and you give it on a separate consent screen before any face template is created. You can withdraw it at any time. For users in the EU, where photo retrieval is performed without biometrics it may instead rest on our legitimate interest in helping attendees find their own photos; biometric matching always requires your explicit consent.
The three parties involved
A BSoura event involves three parties: the event photographer, who takes the photos and owns the copyright; the event organizer, who runs the event and invites BSoura in; and BSoura, the controlled layer that privately distributes the photos to the people in them. Permission to photograph attendees is obtained by the organizer and photographer at the event itself. BSoura is the controller for the face templates it creates.
Where your data is stored and cross-border transfers
Photos and face templates are hosted in [PLACEHOLDER: backend hosting location(s)]. If you are in a market whose data is processed in another country, we rely on the appropriate safeguard for that route — an adequacy decision, standard contractual clauses, or your explicit consent — depending on where you are and where the data is hosted. Where a market requires a permit or prior authorization before biometric processing may take place, BSoura will hold that authorization before operating there.
How long we keep it, and when we delete it
Your selfie and its face template are never stored.The selfie is processed in memory only: we create the temporary face template, compare it against the event's photos, return your matches, and discard both as your search completes.
| Data | Retention |
|---|---|
| Your selfie | Not stored — held in memory only during the search, then discarded |
| Your face template (from the selfie) | Not stored — created, used to match, discarded as the search completes |
| Event photos | The event's retention window — 30 days after the event by default, set per event by the photographer (1–3650 days) |
| Face templates from event photos | Same window as the event photos; deleted when the window ends or the photographer deletes the event |
| Anti-abuse / rate-limit records | Short-lived; retained only long enough to protect the service |
When an event's retention window ends, or if the photographer deletes the event sooner, the photos and every associated face template are permanently deleted. This retention-and-destruction schedule is published here and kept publicly reachable.
Your rights and choices
Depending on where you live, you can ask us to access, correct, or delete your data; object to or restrict its use; receive a portable copy; and withdraw your consent at any time. Because BSoura only acts when you take a selfie, withdrawing is as simple as not searching.
- Remove a photo. From your results you can request removal of any photo you appear in with one tap.
- Email us. Send any request to [PLACEHOLDER: contact email for privacy requests] and we will action it.
- Complain. You may lodge a complaint with your local data-protection regulator [VERIFY WITH COUNSEL: name the competent regulator per market].
Minors
BSoura is intended for users aged 18 and over. We do not knowingly create a face template for anyone under 18, and minors are excluded from face matching. We ask you to confirm you are 18 or older before the biometric step; if we learn we have processed a minor's biometric data, we delete it.
Security
We use technical and organizational measures appropriate to the sensitivity of biometric data — including encrypted transport, access controls, rate limiting, and private, token-authenticated access to event galleries — to protect against unauthorized access, loss, or misuse. No system is perfectly secure, but we design BSoura to minimize what is collected and how long it is held.
Changes to this policy, and contact
We may update this policy from time to time. When we make a material change we will update the effective date and version above and, where appropriate, notify you in the app. The current version is always available at this public link.
Questions or requests about this policy: [PLACEHOLDER: contact email for privacy requests]