Biometric Information Retention & Destruction Policy
Effective 25 August 2026 · Version 1.0
Scope
This policy applies to biometric identifiers and biometric information that we may collect, obtain, process, store, or otherwise possess in connection with photographs submitted to us.
It is intended to satisfy applicable biometric-information retention and destruction requirements, including the written-policy requirement under Section 15(a) of the Illinois Biometric Information Privacy Act (740 ILCS 14/15(a)). Where applicable law requires a shorter retention period or earlier destruction than this policy states, we will follow the shorter or earlier requirement.
What we process
Altered Us creates custom artwork from photographs you submit. To create identity-preserving artwork, our image-processing systems may analyze facial characteristics contained in submitted photographs. Depending on the processing performed and the applicable law, information derived from those characteristics may constitute biometric information or a biometric identifier, including information based on facial geometry.
Why we process it
For one purpose: to create and fulfil the custom product you ordered. We do not use submitted photographs, or information derived from them, to identify you, to build a profile of you, to train artificial-intelligence models, or for advertising.
We do not sell, lease, trade, or otherwise monetize biometric identifiers or biometric information as an independent data asset. We use information derived from submitted photographs only as necessary to create and fulfil the custom products you request.
Derived and intermediate biometric information
Any biometric identifiers or biometric information that we possess or control, and that is generated or derived during processing, is subject to the same retention and destruction requirements described in this policy.
We do not intentionally create or retain biometric templates, facial embeddings, facial landmarks, face vectors, or other persistent biometric profiles for any purpose unrelated to fulfilling your order. Where our image-processing providers generate such representations internally as part of producing your artwork, we do not receive, request, or retain them, and we require our providers to handle submitted content only as needed to perform the service.
Our image-processing providers do not retain submitted photographs after processing, and do not use them to train artificial-intelligence models. Your photograph is used to produce your artwork and is not kept by them afterwards.
Retention schedule and purposes
We destroy biometric identifiers and biometric information when the initial purpose for collecting them has been satisfied, or within three years of your last interaction with us, whichever occurs first. In practice our schedules are considerably shorter:
- Photographs you submit. Purpose: to generate your artwork. Retained until you approve your generated image, at which point they are permanently deleted. If an order is never completed, they are permanently deleted after 30 days of inactivity and the order is cancelled.
- Generated artwork. Retained for up to six months after order completion solely to allow you to view, access, and reorder your previously purchased artwork — a separate purpose from generating it, and the reason for the longer term. Permanently deleted at the end of that period.
- If you cancel. Submitted photographs and any generated artwork are permanently deleted immediately, rather than on the schedules above.
- Absolute maximum. Three years from your last interaction with us, regardless of order state. The schedules above always take effect long before this limit.
How destruction happens
Deletion is performed by an automated job that runs daily. It is not a manual task and does not depend on anyone remembering to do it. The job records every run, so a failure to delete is detectable rather than silent, and it also removes stored files that are not associated with any order — for example, an upload that was abandoned or rejected before an order was placed.
When we delete an image, the file itself is permanently removed from storage. We retain a record that the image existed and that consent was given — its version and timestamp. The deletion log is designed not to contain the photograph, biometric identifier, biometric information, facial representation, or other biometric-derived data itself. Deletion and consent logs may be retained for as long as reasonably necessary to document compliance, security, fraud prevention, legal obligations, and the operation of our services.
Who else receives it
To produce your artwork and deliver your order, submitted photographs and generated artwork are handled by service providers acting on our instructions. These are listed by name in our Privacy Policy. We do not disclose biometric identifiers or biometric information to anyone else, except where required by law or valid legal process.
How we protect it
- Submitted photographs are stored in private storage and are not publicly accessible. Customer access is restricted to the account associated with the order. Authorized personnel may access submitted photographs when reasonably necessary to operate, support, secure, or review our services — including the human review that every order receives before generation and before anything is shown to you.
- Photographs are processed in your browser to remove embedded location (GPS) and other metadata before they are uploaded. We additionally verify this after upload: a photograph that still contains such metadata is rejected and deleted rather than stored. We do not use embedded location information for any purpose.
- Our internal review console requires a credential separate from customer accounts.
Requests from people appearing in submitted photographs
If you appear in a photograph submitted by another person and believe that your biometric information or other personal information has been processed without appropriate authorization, you may contact us at privacy@alteredus.com. You do not need an account with us.
We will review the request and, where appropriate, suspend further processing while we determine whether the photograph or related information may continue to be processed. We may request information reasonably necessary to verify the requester's identity and authority. Where applicable law requires deletion or cessation of processing, we will take appropriate steps to comply.
Children and minors
Our services may process photographs containing children or other minors. Where a photograph contains an identifiable minor, the person submitting the photograph represents that they have the legal authority and permissions necessary to submit the photograph and authorize its processing, including any consent required by applicable law.
We do not knowingly use biometric information derived from children's photographs for advertising, profiling, AI-model training, or purposes unrelated to fulfilling the customer's order.
Changes to this policy
If we change this policy we will update the version and effective date above. Material changes to what we process or how long we retain it will be reflected in the consent you are asked to give at the time of submission.
Contact
Questions or requests about biometric information: privacy@alteredus.com.