Real-Person Video Verification Policy

When this applies

Real-person video is a separate, explicit opt-in. It is not part of the standard synthetic “digital double” flow, and you are never enrolled in it automatically. It applies only after you personally complete the verification described below. You must be the person being verified and be 18 or older.

What we process

• Facial information: the facial images and video captured during a live face scan, the facial-recognition features derived from them, and a reference image retained as the baseline for matching. These are special-category biometric data.
• Portrait photographs of your own likeness, which are matched against your scan. If you already added selfie portraits for Fan Selfies, those same photos are registered here automatically — you never upload them twice. The portraits also live in our own object storage and are used, with our image-generation sub-processor, to compose real-person images of you (for example, Fan Selfies). See Retention & deletion below.
• Your legal name, for real-name authentication of your account. We take this from the cardholder name on your payment method where available, or from the legal name you enter.
• Consent records — the version, timestamp, and age attestation of the consent you gave.

How verification works

A specialist identity-verification provider performs two checks on your own device. Real-person verification uses detection technology to confirm a live person is present — not a photo, video replay, or mask. Same-person authentication compares the face captured in the scan against the portrait photos you upload to confirm they depict the same individual. The reference image retained after a successful scan is used only as the baseline for that comparison.

This is not a check against any government, public-security, or identity database, and it does not establish your legal identity or constitute real-name identity verification in that sense — it confirms liveness and that the uploaded portraits are of the same person who passed the scan.

Lawful basis & consent

Our lawful basis for processing this special-category data is your explicit consent (GDPR Article 9(2)(a)); for US residents, your written release (e.g. Illinois BIPA). Consent is obtained through an active, affirmative step before any scan begins — never a pre-ticked box or bundled acceptance — and you can decline without losing access to any unrelated feature. We record the consent version, timestamp, and your 18+ attestation to evidence lawful processing.

The verification provider

The face scan and portrait matching are performed by a specialist verification provider acting on our instructions as our processor. The provider does not use your facial information for any purpose unrelated to our instructions, and does not use it to train its models. The storage period and deletion of your facial information are determined and carried out by us, as set out below.

The provider operates outside the European Economic Area, in Singapore — a country without an EU adequacy decision — so opting in transfers your biometric liveness data and portrait likeness there. The transfer is safeguarded by the EU Standard Contractual Clauses (GDPR Article 46) incorporated into our data processing agreement with the provider — which commits it to processing your data solely on our instructions and never using it to train its models — and takes place only with your separate, explicit consent. The provider is named on our sub-processor list.

Retention & deletion

Unlike the synthetic-double flow, your portrait likeness and liveness reference are held by the verification provider for as long as your verified identity is active — they are not processed once and discarded. We control that retention.

In addition, your portrait images live in our own object storagefor as long as your identity is active — whether you first uploaded them here or through the Fan Selfies flow. Our image-generation sub-processor cannot read the provider's verified-identity asset library directly, so real-person images (such as Fan Selfies) are composed from this store instead. It is your likeness and is treated as special-category biometric data; you can remove individual portraits from your Creator Cast settings at any time.

• When you revoke your verified identity, request erasure, or withdraw your consent, we stop processing and delete your stored facial information under a single erasure request: it triggers deletion of your data at the verification provider AND of the portraits held in our object storage — neither is left behind, and any deletion that cannot complete immediately is retried until confirmed. A verified erasure request is actioned immediately.
• We retain only the record that you consented (version, timestamp, age attestation) as needed to evidence lawful processing.

Your rights & how to exercise them

You may request access to, a copy of, correction of, deletion of, or portability of your facial information, and you may withdraw your consent, at any time. Because we are responsible for this data, you exercise these rights directly with us — from your Creator Cast settings or through your privacy choices — and we action them, including at the provider. Withdrawing consent both stops the processing and deletes the stored facial information.

Content safety & incident response

Anyone can report a clip generated through Creator Cast. When a clip is reported, it is immediately removed from view while the report is assessed — an automatic first-line containment step, reversible if the report proves unfounded. Reports alleging impersonation, non-consensual intimate content, or sexual content are escalated for priority review. We also maintain liveness and anti-spoofing checks to deter deepfake abuse of the verification step.

Changes to this policy

We may update this policy as the feature or applicable law evolves. Material changes to how we process your facial information will be reflected here with a new effective date, and where required we will seek fresh consent. Questions can be directed to privacy@prismposter.com.