Privacy Policy

1. What We Collect

a. Public Information

We aggregate publicly available data from platforms such as:

• Social media (LinkedIn, Twitter/X, GitHub, etc.)
• Publicly published content or mentions on the open web

b. User Uploads

When you:

• Upload an image for facial recognition search
• Create an account or sign in

c. Platform Usage Data

To operate, secure, and improve the service, we may process:

• Email address (used for login or access verification)
• Limited first-party product and conversion events, such as a photo being selected, a checkout being started, or a purchase being confirmed
• First-touch attribution limited to the landing-page pathname, referrer hostname, and named UTM values (source, medium, campaign, content, and term)
• Browser type, country, and session metadata
• If you explicitly opt in to product guidance and offers: your consent choice, consent date, consent-copy version, consent source, delivery status, unsubscribe status, and a keyed digest of your confirmed email address used to enforce suppression without storing that address in the lifecycle tables

First-party conversion analytics exclude uploaded images, search-result IDs, email addresses, full URLs, URL query strings, private communications, phone numbers, home addresses, and messenger IDs.

2. How We Use It

We use this information to:

• Display public profile summaries from search results
• Enable AI-powered facial recognition search
• Process payments and manage your account
• Improve product performance and personalization
• Measure first-party conversion steps using limited, non-sensitive events and attribution context
• Send the limited product-guidance sequence only when you explicitly opt in, and stop it after withdrawal, a real search, a purchase, or permanent monthly-customer exclusion
• Prevent fraud and ensure security

3. Facial Search & AI

When you upload an image:

• It is processed by a specialist third-party facial-search processor to return candidate public sources
• The original uploaded image is processed for face-matching and is not written to persistent 221B application storage
• The current search processor states that submitted search images are not added to its public index and temporary search data is deleted within 24 hours
• A compressed thumbnail may remain in your private search history so you can identify past searches
• We do not add your upload to a public facial database or reuse it to train our models
• Search results are based on publicly available data sources

4. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Third-party services that help us operate, including Stripe for payments, a specialist facial-search processor for candidate retrieval, Supabase for account and application data, and Resend for opted-in email delivery
• Legal Requirements: When required by law or to protect our rights

5. Your Rights

You may:

• Access your personal data
• Request deletion of your account and data
• Request deletion of any uploaded media
• Opt out of promotional communications
• Withdraw marketing consent without signing in; the unsubscribe link does not ask for additional personal information

Contact us at: admin@221b.world

6. Data Retention

• Original uploads: Not retained in persistent 221B application storage after request processing
• Third-party processing: Our current search processor states that temporary search data is deleted within 24 hours
• Search history: Retained for your reference and can be deleted upon request
• First-party conversion analytics: Limited event, page-path, referrer-hostname, and UTM records may be retained in operational logs for product and conversion analysis; they exclude uploaded images, search-result IDs, email addresses, and full URLs
• Marketing consent and suppression: Consent, withdrawal, complaint, hard-bounce, and minimized suppression evidence may be retained for as long as reasonably necessary to prove consent, prevent another send, manage complaints, and meet legal obligations. A keyed email digest is not used to reconstruct the email address.

7. Security Practices

We use:

• Encryption in transit using HTTPS/TLS
• Secure authentication via Supabase
• Role-based access controls
• Secure cloud infrastructure

Despite best efforts, no system is 100% secure — always use discretion when uploading images.

8. Cookies

We use essential cookies and first-party browser storage to maintain your session and preferences. First-touch attribution is held only in the current JavaScript page session and is limited to the landing-page pathname, referrer hostname, and named UTM values; the raw query string is not retained. Short hashed conversion-deduplication markers may use session storage. Neither mechanism stores uploaded images, search-result IDs, email addresses, full URLs, or raw URL query strings. We do not use them for advertising or tracking across other websites.

9. Updates to This Policy

We may revise this policy from time to time. If significant changes are made, we'll notify users through the platform or email where applicable.

10. Contact

For privacy-related inquiries, contact us:

Email: admin@221b.world

Operator: Singula Pty Ltd, ABN 95 694 945 401