Privacy Policy

Last updated: 2026.

Who we are

Factrapic is operated by Tychetech Ltd, a private limited company registered in the Republic of Cyprus, with registered office at 31 Evagorou, Nicosia 1066, Cyprus, VAT number CY10357073X. You can reach us at [email protected] for general enquiries and [email protected] for support and privacy requests. For your account and billing data we are the controller. For the photos, faces and names inside your projects, you are the controller and we are your processor, acting only on your instructions.

What we store

• Account data: your email address, sign-in times and billing records.
• Project data: the photos you upload, thumbnails and face crops derived from them, face descriptors (numeric vectors used for matching), and the names and details you enter for people.
• Sharing data: recipient email addresses, link expiry and view counts.

Why

To provide the Service: recognise and group faces in your photos, let your team collaborate, deliver share links, and bill you. We do not sell data or use your photos to train models.

Processors

Stripe (payments), Resend (transactional email) and, only when you start an AI identification run, Anthropic (Claude), which receives the photo with numbered boxes around faces plus your attendee list and returns the names it can read from badges, lanyards and table cards. Anthropic does not use this data to train models and retains it only transiently. Photos, face data and the database are stored on servers in the European Union (Hetzner, Germany/Finland), with encrypted backups in the EU. Anthropic processes AI requests in the United States under the EU Standard Contractual Clauses; no other personal data leaves the EU.

Your declaration

Before your first upload you confirm that you own or are licensed to use the photos and have a lawful basis under the GDPR to process the faces in them. We record the date, IP address and browser of that confirmation. You are the data controller for your projects; Factrapic acts as your processor.

Retention

Project data is kept until you delete the project. Account data is kept while your account exists. Share links stop working at their expiry date.

Your rights

You can export, correct or delete your data from inside the app or by emailing [email protected]. People photographed may contact you, the project owner, who controls that data; we will help you answer their requests. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy) or with the supervisory authority of your own EU country.

Security

All traffic is encrypted in transit; files and backups are encrypted at rest; access to projects is limited to the people you invite; payment card details are handled by Stripe and never reach our servers. We record administrative actions and consent declarations in an audit log.