Biometric Data & Photo Policy

LooksAudit processes a photo of your face for one purpose: to generate the report you asked for. Future Cities LLC publishes this policy so that anyone can see the schedule on which photos are destroyed, as several state laws (including the Illinois Biometric Information Privacy Act and the Texas Capture or Use of Biometric Identifier Act) require of businesses that may handle data derived from a face.

• The photo is resized in your browser before upload (about 1024 px on the long side).
• It is stored, encrypted at rest, in a private bucket for the minutes generation takes.
• It is sent once, over an encrypted connection, to xAI’s Grok model with zero data retention enabled, which means xAI does not store the photo after producing the response.
• As soon as the response is received the photo is deleted from our bucket. A storage rule deletes anything that remains after 24 hours, as a backstop.
• Only the generated scores and text are kept.

This system is not used or deployed for the purpose of uniquely identifying any individual. We do not create, store, sell, lease, trade or otherwise profit from a faceprint, face geometry scan, embedding or any other biometric identifier or biometric information. We run no face-detection, face-recognition or face-matching software, and we never compare your photo with any other photo or person. Share cards never contain a photo.

Before any photo is sent, you tick a consent box on the upload form confirming that you are 18 or older, that the photo is of you, and that you agree to this processing. The box is never pre-ticked. We record the consent text version, the time, a hash of your IP address and your browser’s user-agent string as the written release. You may withdraw consent at any time by not uploading further photos; because photos are deleted after each report, there is nothing further to withdraw from.

• Uploaded photos: destroyed immediately after the report is generated, and in every case within 24 hours of upload, including when generation fails or is refused.
• Scores and report text: 12 months, or earlier on request.
• Consent records: 6 years.

Email hello@looksmaxxinggpt.com with your report link to have the report and its records deleted.