You are reading an archived version of our legal texts (version 1.0.0, in force from 2026-07-23). It is not the text currently in force.
Privacy and Data Protection
Corpus legacy
This page explains what data Shareft collects, why, and for how long, both for Senders and for participants searching for their photos by selfie.
Sender Account Data
To create and operate a Sender account, we process their email address, billing information, and the data needed to charge their subscription (handled directly by our payment providers, without Shareft storing card numbers). This data is used solely to provide the service, bill the subscription, and respond to support requests.
Consent Before Any Selfie Upload
Before uploading a selfie, every guest must explicitly confirm that they understand and accept that their image will be used solely to compare it against the photos from the relevant event. This image is never used for anything else.
Limited Retention Period
Your comparison selfie is kept only for the duration of the search: it is deleted from our servers immediately after face recognition completes. If a search never completes (closed tab, network error), an automatic sweeper deletes the orphaned selfie within 1 hour at most. The facial vectors extracted from the event photos (what allows us to find you in them) are kept for the lifetime of the event, isolated per event, and deleted with it.
No Raw Biometric Data Exposed
A search result is binary: either your photos are found, or they aren't. No confidence score, no facial template, and no raw biometric data is ever shown or transmitted to the guest. The facial recognition process is described in detail on the dedicated biometric data page.
Subprocessors and Hosting
Shareft relies on providers to host photos and files, run facial comparison, and process payments. Each of these providers only accesses the data strictly necessary for its role, under a contract that requires them to protect it and not reuse it for other purposes.
Data Residency
If the law of a launch country requires it, facial recognition processing can be switched to locally hosted infrastructure, with no change on your end.
Minors
Uploading a selfie requires confirmation of legal age, or authorization from a parent or guardian for minors.
Strict Data Isolation
Facial search for an event never compares your photos against those of another event or another Sender. Each event is processed in complete isolation.
Your Rights
Depending on where you live, you have the right to access, correct, and delete your data, and to object to its processing. A Sender can exercise these rights from their account settings or by contacting support. A participant can request early deletion of their selfie or search results by contacting the relevant event's support.