Back to Home

Privacy Policy

Last updated: June 29, 2026

im-not.ai ("the Service") takes your privacy seriously and complies with applicable data protection laws. This policy explains what information we collect, why we collect it, how long we retain it, and your rights.


1. Information We Collect

The Service collects the following personal information.

  • Required: Email address, password (stored encrypted), first name, last name, nickname, nationality
  • Optional: Profile bio, public URL ID, social links (Instagram, Threads, YouTube, X, TikTok)
  • During verification: Profile photo (stored on S3), verification session result (pass/fail · date), facial feature points (used temporarily by AWS Rekognition and discarded immediately)
  • Automatically collected: Access logs, IP address, browser and device information (for service operation and security)

2. How We Use Your Information

  • Account registration and identity confirmation
  • Providing live face verification (photo–live face matching)
  • Creating and publishing your human-verified profile
  • Email verification and service notifications
  • Preventing illegal activity and maintaining security
  • Processing support inquiries and data deletion requests

3. Retention and Deletion

  • Account information: Retained until account deletion or data deletion request, then immediately deleted
  • Verification session results: Up to 1 year after verification; deleted immediately upon request
  • Profile photo: Deleted from S3 immediately upon account deletion or deletion request
  • Original verification video: Discarded immediately after AWS Rekognition Face Liveness processing; never stored on our servers
  • Legal retention: Retained for the legally required period if required by applicable law, then deleted

4. Sharing Your Information

We do not share your personal information with third parties without your consent, except where required by law.

We engage the following processors to operate the Service:

  • Amazon Web Services (AWS): image storage (S3), face verification (Rekognition Face Liveness) — United States
  • Neon (Neondatabase, Inc.): database hosting — United States
  • Resend: transactional email delivery — United States
  • Vercel, Inc.: service hosting — United States

5. Your Rights

You may exercise the following rights at any time:

  • Request access to your personal information
  • Request correction or deletion of your personal information
  • Request restriction of processing
  • Request deletion of your verification data

You can exercise these rights directly from the settings page, or by contacting us at the email address below.

📧 privacy@im-not.ai

6. Cookies

The Service uses session cookies to maintain your login session. You can disable cookies in your browser settings, but some features such as login may not work properly.

7. Security Measures

  • Passwords hashed with bcrypt
  • All communications encrypted over HTTPS
  • Original verification videos never stored on our servers
  • Public profiles display only verification results (pass/fail · date), never raw data
  • AWS IAM least-privilege principle applied

8. Children's Privacy

The Service is not directed at children under 14, and we do not knowingly allow anyone under 14 to register.

9. Contact

10. Changes to This Policy

This policy may be updated due to changes in law or the Service. We will notify you via service announcements or email before any changes take effect.