Terms of Service

1. Agreement to Terms

These Terms of Service (“Terms”) govern your access to and use of www.mebyface.com and all related services (the “Service”).

By creating an account, purchasing a product, or uploading a facial photograph, you:

• confirm that you are at least 18 years old;
• agree to these Terms;
• acknowledge the Privacy Policy;
• provide the required explicit consents for biometric data processing.

If you do not agree, you may not use the Service.

This agreement complies with EU consumer protection regulations as outlined in the EU Consumer Protection Framework and the General Data Protection Regulation (GDPR).

2. Service Description

MeByFace is an AI-powered face reading and self-discovery platform that:

• processes uploaded facial photographs,
• analyzes facial landmarks and proportions using automated AI systems,
• generates personality insight reports reviewed by human experts,
• offers a subscription-based personal development program (“Beyond the Mirror”).

The Service is provided for entertainment and personal self-discovery purposes only. It does NOT constitute:

• medical advice,
• psychological advice,
• therapeutic services,
• diagnostic evaluation,
• professional counseling.

All reports are reviewed by human experts before final delivery to ensure quality and accuracy of insights.

3. Eligibility

You must:

• be at least 18 years old;
• have legal capacity to enter binding agreements;
• upload only your own photograph (or have explicit consent from the person depicted).

If we discover underage use, the account will be terminated and data deleted.

4. User Representations

By uploading a photograph, you represent and warrant that:

• the photograph depicts you or you have explicit authorization;
• you have the legal right to upload it;
• the image does not violate third-party rights;
• you understand it will be processed by AI systems;
• you understand the 48-hour deletion policy for photos.

5. Biometric Data Processing

Processing of facial photographs may constitute biometric data processing under:

• GDPR Article 9
• Illinois BIPA
• Texas CUBI
• Washington HB 1493
• California CPRA

Use of the Service requires:

• explicit, informed, opt-in consent prior to upload;
• separate biometric consent checkbox (not pre-ticked).

Photographs:

• are processed solely to generate reports;
• are not used for identification or authentication;
• are not sold or shared for advertising;
• are deleted within 48 hours of report completion.

Derived personality analysis and reports are retained per retention policy.

6. Automated Decision-Making & Profiling

Reports are generated using automated systems and reviewed by human experts before delivery:

• Azure Face API (facial landmark extraction),
• OpenAI ChatGPT 5.2 (personality insight generation),
• n8n orchestration workflows.

This constitutes automated profiling under GDPR Article 22. You have the right to:

• request human review,
• contest findings,
• request deletion of analysis data.

Requests: info@mebyface.com.

7. Account Registration

To use the Service you must create an account via Supabase authentication. You are responsible for:

• maintaining confidentiality of credentials;
• all activities under your account.

We may suspend accounts for:

• fraud,
• abuse,
• security violations,
• violation of these Terms.

8. Products & Payments

Products include:

• Discovery report
• Signature Insight report
• Signature + Beyond Annual bundle
• Beyond the Mirror subscription

Payments are processed exclusively by Stripe. MeByFace does NOT store card details — only Stripe session/intent identifiers and transaction metadata. Pricing may change prospectively.

9. Refund Policy

Digital reports: Non-refundable once generated and delivered.

Processing failure: Full refund if report cannot be generated due to system error.

Subscription (Beyond the Mirror): Cancellation terms governed by purchase agreement. EU consumers retain statutory withdrawal rights where applicable.

10. Data Retention Summary

Account deletion is processed within 30 days.

11. Intellectual Property

All algorithms, AI pipelines, software code, report structures, and methodologies remain the intellectual property of Mebyface, MB.

You receive a limited, non-transferable, non-commercial license to use your report for personal purposes only. Commercial reproduction is prohibited.

12. Disclaimers

The Service is provided “AS IS”. We make no guarantees regarding:

• accuracy of personality insights,
• completeness,
• predictive validity.

You should not make significant life decisions solely based on report content.

13. Limitation of Liability

To the maximum extent permitted by law:

• Total liability is limited to the amount paid for the specific service within the previous 12 months.
• We are not liable for indirect damages, emotional distress, loss of profits, or reputational harm.

This limitation does not apply to:

• intentional misconduct,
• gross negligence,
• mandatory consumer rights under EU law.

14. Indemnification

You agree to indemnify and hold harmless Mebyface, MB from claims arising out of unlawful photo uploads, violation of third-party rights, or misuse of reports.

15. Governing Law

Primary governing law: Republic of Lithuania.

For EU consumers: mandatory consumer protection laws of your residence remain unaffected.

16. Dispute Resolution — United States Users

For users located in the United States:

16.1 Mandatory Individual Arbitration

All disputes shall be resolved by binding individual arbitration.

16.2 Class Action Waiver

You waive the right to participate in class actions.

16.3 No Jury Trial

You waive the right to trial by jury.

16.4 30-Day Opt-Out

You may opt out within 30 days of account creation by emailing info@mebyface.com. Include:

• full name
• account email
• statement: “I opt out of the arbitration agreement and class action waiver.”

Opt-out does not affect other Terms.

17. Termination

We may terminate or suspend access if you violate these Terms, fraud is suspected, or a security risk exists.

Upon termination: account access is revoked, data retention applies per policy, and photo deletion schedule remains enforced.

18. Modifications

We may update these Terms. Material changes will be published on the website. Continued use constitutes acceptance.

19. Contact

Mebyface, MB

Peledu g. 28, Didieji Gulbinai

Vilniaus rajonas, Lietuva

info@mebyface.com

Annex I

Illinois Biometric Information Privacy Act (BIPA) Addendum

Applies only to users located in the State of Illinois, USA. This Addendum supplements the MeByFace Terms of Service and Privacy Policy. In case of conflict, this Addendum controls for Illinois residents.

1. Purpose

This Addendum is adopted to comply with the Illinois Biometric Information Privacy Act, 740 ILCS 14/1 et seq. (“BIPA”).

2. Definitions

For purposes of Illinois users:

Biometric Identifier includes a scan of face geometry derived from a photograph.

Biometric Information means any information derived from a biometric identifier used to identify an individual.

MeByFace does NOT collect fingerprints, retina scans, voiceprints, or DNA. MeByFace processes only facial geometry derived from voluntarily uploaded photographs.

3. Written Release Requirement

Prior to collecting any biometric identifier or biometric information, MeByFace:

• provides written disclosure;
• obtains a written release via explicit opt-in consent checkbox;
• does not pre-check consent fields.

The biometric consent must be accepted before photo upload. If consent is not provided, the Service cannot be used.

4. Purpose and Scope of Collection

Biometric data is collected solely for:

• automated facial landmark extraction;
• proportional analysis;
• generation of personality insight reports.

Biometric data is NOT used for:

• identity verification;
• authentication;
• surveillance;
• law enforcement;
• advertising.

5. Retention and Deletion Policy

In compliance with 740 ILCS 14/15(a):

• Facial photographs are permanently deleted within 48 hours of analysis completion.
• Derived facial geometry data is retained only as long as necessary to provide the Service.
• Upon account deletion, associated biometric-derived data is deleted within 30 days.

Biometric data is permanently destroyed when the initial purpose has been satisfied, or within 3 years of the user’s last interaction with the Service, whichever occurs first. Where a shorter deletion period applies (e.g., 48-hour policy), the shorter period governs.

6. No Sale or Disclosure

MeByFace does not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information. Biometric data is not disclosed unless required by law or with user consent.

Biometric data may be transmitted to:

• Microsoft Azure (facial analysis),
• OpenAI ChatGPT 5.2 (text insight generation),

solely for Service performance. All transfers occur via encrypted channels.

7. Security Standards

Biometric data is:

• transmitted via HTTPS encryption;
• stored temporarily in secure infrastructure (Vercel Blob);
• protected using access controls and database-level security (RLS);
• subject to logging and monitoring.

Security measures meet or exceed reasonable industry standards.

8. Private Right of Action Acknowledgment

Illinois users acknowledge that:

• BIPA provides a private right of action;
• statutory damages may apply under Illinois law;
• disputes are subject to the arbitration clause in the Terms of Service unless timely opted out.

9. Arbitration Applicability

If the user does not opt out within 30 days under Section 16 of the Terms:

• BIPA-related claims shall be resolved via individual arbitration;
• class action waiver applies;
• jury trial waiver applies.

If arbitration is deemed unenforceable for BIPA claims, all other Terms remain enforceable.

10. Severability

If any provision of this Addendum is found invalid under Illinois law, the remainder remains enforceable to the maximum extent permitted.

11. Acknowledgment

By using the Service and providing biometric consent, Illinois users acknowledge that:

• they have received written notice;
• they understand the purpose of collection;
• they understand retention terms;
• they voluntarily provide written release.