Privacy Policy

Last updated: June 1, 2026

1. Who We Are

Face AI ("we", "our", "us") operates an identity verification API platform. Our registered address is available on request. Contact: hello@vis.uz.

2. Data We Collect

We collect data through two channels. Partner data: company name, email, API credentials, webhook URLs. End-user verification data (processed on behalf of partners): selfie images, document images, and liveness video clips submitted for KYC verification.

3. How We Use Data

Partner data is used to manage your account, authenticate API requests, and send service notifications. End-user biometric data is processed solely to perform identity verification as instructed by the partner. We do not use biometric data for profiling, advertising, or any purpose beyond verification.

4. Data Retention

Verification media (images, video) is retained for 30 days by default from the time of upload, then permanently deleted. Partners may request shorter retention. API logs are retained for 90 days. Partner account data is retained for the duration of the partnership plus 12 months.

5. Data Sharing

We do not sell, rent, or share personal data with third parties. Verification results are shared only with the requesting partner. We may disclose data if required by Uzbekistan law or a valid court order.

6. Security

All data is encrypted in transit (TLS 1.2+) and at rest. API keys are stored hashed. Webhook payloads are signed with HMAC-SHA256. Access to production systems is restricted to authorised personnel only.

7. Your Rights

You may request access to, correction of, or deletion of personal data held about you by contacting hello@vis.uz. Requests are processed within 30 days.

8. Changes to This Policy

We may update this policy. Material changes will be communicated to partners via email at least 14 days before taking effect.

9. Contact

For any privacy-related questions, contact us at hello@vis.uz or via Telegram @OtabekJurabekov.