Privacy Policy

For the selfie-based photo search service, we collect:

A photograph of your face (selfie), captured by your device and sent directly to our storage server in Canada.

Your email address, to send the link to your personal gallery.

Your name (optional), for personalization.

Consent record: date, time, IP address, and version identifier of the accepted policy.

Your selfie is used solely to identify event photos in which you appear, through automated biometric comparison.

We do not use the data for advertising, sharing with third parties, or any purpose beyond delivering your photos.

Your selfie is sent directly to our storage bucket (AWS S3, Canada) via a pre-signed URL. It never passes through our application server.

An automated process compares the selfie with event photos using Amazon Rekognition (Canada region, ca-central-1).

The minimum similarity threshold is 95. A false positive is treated as a privacy incident.

Your selfie is deleted from storage immediately after the search, in the same operation in which results are saved.

AlphaOps processes the data as the controller.

Amazon Web Services (AWS Rekognition) acts as processor, in the Canada region (ca-central-1). Derived biometric data does not leave Canada.

Amazon Web Services is a United States company. Your biometric data is stored and processed in Canada (ca-central-1), but the company may be subject to United States law. This means a United States authority could, under United States law, seek access to data held by the company, even though the data resides in Canada. Your selfie is deleted immediately after the search and derived biometric data is destroyed within 30 days, which limits this exposure.

AWS S3 temporarily stores the selfie and event photos, with infrastructure in Canada.

Resend sends the email with the gallery link. No biometric information is transmitted by email.

All biometric processing occurs on servers in Canada.

Your email and name may transit Resend infrastructure (United States) only for sending the gallery transactional email.

Selfie: deleted immediately after the search. Retention time: seconds.

Derived biometric data (facial recognition vectors): destroyed within 30 days after the event.

Event photos: retained per contract with the event client.

Email and name: retained for account identification and delivery. May be deleted on request.

Consent record: retained for the period required by law for audit purposes.

The selfie search feature is voluntary. You can receive event photos without submitting your selfie.

To do so, write to fotos@alphaops.cloud with the event name and your email address. Photo delivery will be done manually.

Access: you can request what data we hold about you by writing to fotos@alphaops.cloud.

Correction: you can request correction of inaccurate data.

Erasure: you can delete your data at any time from your personal gallery (button available in the gallery) or by writing to fotos@alphaops.cloud.

Scope of erasure: erasing your data removes your selfie search results and the biometric data we derived. Event photos belong to the set commissioned by the event's client and may remain in the client gallery. To request removal of a specific photo of you, write to fotos@alphaops.cloud.

Withdrawal of consent: consent may be withdrawn at any time. Withdrawal does not affect prior processing.

Complaint: you may file a complaint with the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and the OPC guidance on biometrics (August 2025).

For privacy questions or requests: fotos@alphaops.cloud.

AlphaOps, Hamilton, Ontario, Canada.