How zevu handles your face data

Plain English,
no fine print.

zevu uses face recognition to match a guest's selfie to event photographs. Here is exactly what happens to your data — what we collect, what we do with it, how long we keep it, and your rights.

I

What we collect

When you create an event, we receive the Google Drive folder URL you paste, your email, and a small set of metadata generated by us (event ID, admin token, timestamps).

When a guest submits a selfie, we receive the image bytes for the duration of the match request. We extract a face signature, compare it against the album’s face index, and discard the bytes immediately afterward. We do not store, log, or backup the selfie.

From the event photos, we extract face geometry (an embedding) for every detected face and hold it in an AWS Rekognition collection scoped to your event. We do not store the photos themselves — they remain on Google Drive.

II

What we do with it

We use the face signature from a guest’s selfie to find matching faces in the event gallery. Matches return a list of Drive file IDs, which the guest opens directly on Google Drive.

We do not sell, share, or rent any of this data. We do not train models on it. We do not advertise against it. We do not pass it to third parties beyond the AWS Rekognition service performing the matching.

III

How long we keep it

The face index for your event stays alive until either of these happens:

  • You close the event from the admin link we sent you.
  • Ninety days pass since the event was created (whichever first).

When either trigger fires, the AWS Rekognition collection is deleted, every face record we stored is removed, and a deletion audit row is written for compliance evidence.

IV

Your rights

If you appear in an event gallery indexed by zevu and you would like the face data deleted, write to takedown@findme.app. We commit to a 24-hour SLA on takedown requests. The event organizer is notified.

State biometric privacy laws — including the Illinois Biometric Information Privacy Act (BIPA) and the Texas Capture or Use of Biometric Identifier Act (CUBI) — can apply when faces in your photos are indexed. At event creation, the host represents that they have permission to upload these photos to a face-matching service, including any consent required under those laws. We rely on that representation. If you appear in a gallery and want your face data deleted, the takedown address above is the fastest path.

V

Contact

For privacy questions, write to hello@findme.app.

For takedown or deletion requests: takedown@findme.app.