Biometric Data Retention & Deletion Policy

1. Scope and Purpose

This policy explains how ClearPath AI (“we,” “us”) handles photographs of faces submitted to Mirror, our AI before/after visualization tool, whether used on aiclearpath.com or embedded on a participating practice’s website. It is written to satisfy the retention-and-destruction disclosure requirements of biometric privacy laws such as the Illinois Biometric Information Privacy Act (740 ILCS 14, §15(a)) and Colorado’s biometric-data amendments to the Colorado Privacy Act (HB 24-1130), and to give every user a plain-English answer to the question: what happens to my photo?

2. What We Collect

• Face photo: the image you voluntarily upload (or capture with your device camera) so the tool can generate the preview you request.
• Your selections: the treatment and intensity options you choose for the preview.

We do not extract, compute, or store faceprints, face geometry templates, or any other biometric identifier from your photo. The photo is used solely as the visual input for a one-time image generation.

3. Purpose of Collection

Your photo is used for exactly one purpose: generating the AI before/after preview you requested. It is not used for identification, verification, advertising, profiling, or training of AI models.

4. Retention and Deletion

• Your photo is processed in memory for the duration of the generation request — typically 20–30 seconds.
• It is deleted immediately once your preview has been generated.
• It is never written to a database, dashboard, or long-term storage by us.
• It is never sold, rented, traded, or shared with third parties.
• The generated preview image is delivered to your browser; whether you keep or share it is entirely your choice.

Because photos are deleted at the end of each request, our retention period is the shortest practical: the initial purpose of collection is satisfied the moment your preview renders, and destruction occurs immediately thereafter — well within the outer limits set by Illinois BIPA §15(a) and comparable statutes.

5. Consent

Uploading a photo is always your affirmative act — the tool cannot access your camera or photo library without your permission. By uploading a photo you consent to the one-time processing described in this policy. If you do not consent, you can use the tool’s built-in demo avatars instead of your own photo.

6. Service Providers

Image generation is performed via an established third-party AI model provider acting as our processor. Photos transit to the provider solely to fulfill your generation request and are subject to the provider’s enterprise data-handling terms; we do not permit the use of your photos for model training on our requests.

7. Contact

Questions or requests regarding this policy: hello@aiclearpath.com. We respond to verified privacy requests within 30 days.