Biometric Data Policy

Effective Date: July 25, 2026
Last Updated: July 25, 2026

Inferon Techlabs Private Limited ("Inferon", "we", "us", or "our") provides an AI platform for generating and editing images, video, audio, and avatars. To deliver some of those features, we process data derived from human faces and voices.

Because this data is subject to heightened protection under several laws, this policy describes that processing separately from our general Privacy Policy, which continues to apply to everything else.

1. What We Mean by Biometric Data

In this policy, "biometric data" means data derived from your physical or behavioural characteristics that can be used to identify you, including:

Scans of facial geometry, including the facial templates we derive when you upload a photograph or video to create or animate an avatar
Voiceprints, including the voice models we derive when you upload an audio sample to clone or synthesize a voice
Any equivalent identifier derived from an image, video, or recording you provide

Biometric data does not include the underlying photograph, video, or audio file itself, which we treat as your content under our Terms of Service. It also does not include physical descriptions, demographic data, writing samples, or signatures.

Where a term such as "biometric identifier", "biometric information", "biometric data", or "sensitive personal data" is defined by a law that applies to you, that definition governs for the purposes of that law.

2. Laws That Apply

We are incorporated in India and serve customers worldwide. Which protections apply to you depends on where you live.

India. Biometric data is personal data under the Digital Personal Data Protection Act, 2023, and we act as the Data Fiduciary for it.
European Economic Area, United Kingdom, and Switzerland. Biometric data processed for the purpose of uniquely identifying a person is special category data under Article 9 of the GDPR, and we rely on your explicit consent.
Illinois, United States. The Biometric Information Privacy Act, 740 ILCS 14/1 et seq. ("BIPA") applies to Illinois residents, including the requirements for written consent, a published retention schedule, and a prohibition on sale.
Texas, United States. The Capture or Use of Biometric Identifiers Act, Tex. Bus. & Com. Code § 503.001 ("CUBI") applies to Texas residents.
Washington, United States. RCW 19.375 applies to Washington residents.
Other US states. Comprehensive state privacy laws, including in California, Colorado, and Connecticut, treat biometric data as sensitive personal information requiring opt-in consent.

Where more than one of these applies, we apply the most protective requirement.

3. Why We Process Biometric Data

We derive, generate, store, and use biometric data for one purpose: to provide the features you ask for. Specifically:

| Feature | What we derive | Why | | --- | --- | --- | | Avatar creation | A facial template from the photographs or video you upload | To generate an avatar that resembles the source | | Avatar animation and lip-sync | Facial geometry and landmark data | To animate the avatar and match mouth movement to audio | | Voice cloning | A voice model from the audio sample you upload | To synthesize speech in that voice | | Text-to-speech with a cloned voice | The stored voice model | To generate the speech you request | | Safety enforcement | Signals sufficient to detect prohibited use | To detect attempts to depict minors or known non-consensual subjects |

We also process this data as necessary to comply with legal obligations and to establish, exercise, or defend legal claims.

We do not process biometric data for advertising, profiling, or any purpose unrelated to delivering the feature you requested.

4. Consent

Before we collect, derive, or generate biometric data from material you submit, we will:

Tell you that biometric data will be collected or generated
Tell you the specific purpose and the period for which it will be stored and used
Obtain your express written consent, given electronically

You give this consent when you first use a feature that derives biometric data. Consent is specific to that purpose. If we later want to use biometric data for a different purpose, we will ask again.

You may withdraw consent at any time by deleting the relevant avatar or voice, or by contacting us. Withdrawing consent stops future processing and triggers destruction of the associated biometric data as described in Section 7. It does not affect processing that already took place, and Outputs you have already generated and downloaded remain yours.

If you decline consent, you can still use the parts of the Services that do not require biometric processing.

5. Your Responsibility for Other People

You may only upload material depicting a person other than yourself if you have that person's explicit, informed, written consent, or another documented legal right to do so, as required by our Acceptable Use Policy.

You must not upload material depicting a minor under any circumstances.

Where you upload material depicting another person, you are responsible for obtaining every consent that person's local law requires, including any written release required under BIPA or an equivalent statute. You must be able to produce evidence of that consent if we ask for it, and you indemnify us against claims arising from a failure to obtain it.

If you believe your face or voice has been used on our platform without your consent, contact abuse@inferon.ai. We treat these reports as urgent, and you do not need an account with us to make one.

6. Disclosure to Third Parties

We disclose biometric data only to the service providers that perform the processing needed to deliver the feature you requested, such as the model providers that run avatar and voice generation. They act on our instructions, are bound by contract, and may not use the data for their own purposes. These providers are identified in our Subprocessors list.

Otherwise, we do not disclose biometric data unless:

You, or your legally authorized representative, consent to the disclosure
The disclosure completes a financial transaction you requested or authorized
The disclosure is required by applicable law or regulation
The disclosure is required by a valid warrant, subpoena, or court order issued by a court of competent jurisdiction

We will object to overbroad requests and, where legally permitted, notify you before disclosing.

7. Retention and Destruction

We retain biometric data only as long as needed for the purpose it was collected for.

| Trigger | Destruction | | --- | --- | | You delete an avatar or cloned voice | Associated biometric data destroyed promptly; purged from backups within 90 days | | You withdraw consent | Same as above | | You close your account | Destroyed within 90 days of closure | | The purpose of collection is satisfied | Destroyed when no longer needed | | Inactivity | Destroyed no later than three (3) years after your last interaction with us, regardless of any other trigger |

The three-year outer limit applies in every case except where a longer period is required by law or where the data is subject to a legal hold in connection with an active claim or investigation. Where a hold applies, we destroy the data as soon as the hold is lifted.

Destruction means the biometric templates and derived models are deleted. Where deletion from a backup archive is not immediately possible, we isolate the data from all further processing until the backup expires.

8. Storage and Safeguards

We protect biometric data using a standard of care at least as protective as that with which we protect other confidential and sensitive information, and no less than the reasonable standard of care required in our industry.

Safeguards include encryption in transit and at rest, access restricted to the smallest number of personnel needed to operate the feature, logging of administrative access, and the broader controls described in our Security Policy.

9. No Sale or Profit

We do not sell, lease, trade, or otherwise profit from your biometric data.

We charge for the generation features that use it. That is a fee for the service, not a sale of the data.

10. No Identification or Surveillance

We do not use biometric data to identify you, to match you against any database of individuals, to track you across services, or to infer emotions, characteristics, or beliefs.

Using our Services for biometric identification or surveillance is prohibited under our Acceptable Use Policy.

11. Your Rights

In addition to the rights described in our Privacy Policy, you may at any time:

Ask what biometric data we hold about you
Withdraw your consent
Delete an avatar or cloned voice, and with it the underlying biometric data
Ask us to confirm that destruction has occurred
Request a copy of this policy in a durable format

Contact privacy@inferon.ai to exercise these rights. We respond within the period required by applicable law and in any event within 30 days.

12. Business Customers

This policy covers biometric data we process for our own users.

It does not apply to biometric data we process on behalf of a business customer under an enterprise agreement, where that customer supplies data concerning their own end users. In that case we act on the business customer's instructions under our Data Processing Addendum, and that customer is responsible for obtaining the necessary consents.

If you have a concern about biometric data processed on behalf of one of our business customers, please raise it with that customer. If you are unsure who that is, contact us and we will try to help.

13. Changes

We may update this policy as our features and legal obligations evolve.

Where a change materially affects how we process biometric data, we will notify account holders and, where required by law, obtain fresh consent before the change applies to you. The "Last Updated" date indicates the latest revision.

14. Contact

Company: Inferon Techlabs Private Limited
Address: E8, Netaji Hills, Kolar Road, Bhopal, Madhya Pradesh 462042, India
Privacy and biometric data requests: privacy@inferon.ai
Reports of misuse: abuse@inferon.ai
Phone: +91 70006 28459