Privacy Policy
Last updated 28 September 2026
This policy explains how FaceMate handles personal information. It is written to meet the Australian Privacy Principles (Privacy Act 1988) and the EU/UK General Data Protection Regulation (GDPR).
Who we are
FaceMate provides a cosmetic AI skin-analysis tool, used directly and inside partner shops' websites. When you scan through a shop, that shop is the controller of your scan and FaceMate processes it on their behalf. Contact: support@chat24plus.com.
What we collect
- Face photos you take during a scan, and your survey answers (such as age range and skin concerns).
- The analysis result and a report code.
- Optional contact details if you ask for your results by email, SMS or WhatsApp.
- Technical data: IP address, browser type and security logs, used to protect the service.
- For business users: name, email, password (stored only as a secure hash) and sign-in history.
Why we use it (legal basis)
- To run the scan you asked for — your explicit consent, given before the camera opens.
- To send results you request — your consent.
- To create an optional cosmetic AI illustration from your scan photo — your separate agreement on the results page. The edited illustration is displayed only in your current session; it is not added to your saved scan or PDF.
- To keep the service secure and prevent abuse — legitimate interest.
- To provide accounts to businesses — contract.
Face photos are not used to identify you, are not sold, and are not used for advertising. Results are cosmetic estimates, not medical advice.
How long we keep it
Photos are deleted automatically after the retention period set by the shop (and never longer than the platform maximum). Scan scores may be kept in anonymous form for quality. Business accounts are removed on request or when the business closes its account.
Who we share it with
The shop you scanned with; the AI provider that performs the analysis (photos sent over encrypted connections, not kept by them for training where the provider offers this); the image-editing provider only if you separately agree to an illustration; our hosting provider; messaging providers only when you ask for results to be sent. Some providers may be outside Australia or the EU; we use contractual safeguards where required.
Security
Data is encrypted in transit and at rest, each business's data is isolated from every other business, access is logged, and automated intrusion detection blocks suspicious visitors. No system is perfectly secure; we will notify affected people and regulators of eligible data breaches as the law requires.
Your rights
You can ask to access, correct, download or delete your data, withdraw consent, or object to processing. Email support@chat24plus.com with your report code. You may also complain to the Office of the Australian Information Commissioner (oaic.gov.au) or your local EU/UK data protection authority.
Cookies and storage
We use only storage that is strictly necessary: keeping business users signed in and remembering scan progress. We do not use advertising or tracking cookies.
Children
The scan is not intended for people under 16.