Private memories start with consent.

Purpose Of This Notice

This Biometric Consent Notice explains how Avelluxe may process selfies, face references, voice samples, and related biometric information for optional event features such as Personalized Memories.

No Biometric Processing Without Consent

Avelluxe should not perform face matching or biometric processing for a guest unless that guest has affirmatively opted in for the specific event. A guest can RSVP, attend, receive event details, and use the invitation without uploading a selfie.

What Biometric Information Means Here

• A guest selfie or reference photo uploaded for Personalized Memories.
• A face template, face embedding, face vector, face reference, or other mathematical representation generated from a selfie or event photo for matching.
• Face match results showing that a consenting guest may appear in a host-uploaded event photo.
• A custom voice sample, voice model, voice clone, or voice-related artifact if a host chooses a voice feature that requires separate voice consent.

How Personalized Memories Works

• A host enables guest photo delivery or Personalized Memories for an event.
• A guest is asked for event-specific consent before uploading a selfie for photo matching.
• If the guest consents, Avelluxe stores the selfie in private storage and may create a face reference in a protected face-matching collection.
• After the event, a host may upload event photos.
• Avelluxe may compare consenting guests' face references against uploaded event photos to create private guest-specific galleries.
• The guest receives access only to galleries and photos they are authorized to view.
• If consent is revoked, Avelluxe should stop future matching and delete eligible biometric references tied to that guest and event.

Why Avelluxe Uses Biometric Processing

• To help guests privately receive photos that may include them.
• To reduce manual photo sorting for hosts.
• To create a more personal post-event memory experience.
• To support guest-specific gallery delivery when the guest has opted in.

What Avelluxe Does Not Use It For

• Avelluxe does not use Personalized Memories face matching for law enforcement identification.
• Avelluxe does not use face matching to decide guest eligibility, credit, employment, housing, insurance, or legal status.
• Avelluxe does not use guest biometric data for advertising targeting.
• Avelluxe does not use one event's guest selfie to match photos for another unrelated event unless that guest separately consents where required.
• Avelluxe does not sell biometric information.

Storage And Access Controls

• Selfies, event photos, gallery photos, and biometric references should be stored in private storage or protected provider systems.
• Media should be served through signed or protected URLs when supported.
• Access should verify host ownership, guest invite token, admin permission, gallery status, and event authorization.
• Biometric tables and media access should be protected by application authorization and database-level tenant isolation where supported.
• Audit logs may record consent, revocation, deletion, gallery access, and security events.

Retention And Deletion

• Avelluxe retains biometric information only as long as needed for the event feature, unless a longer period is required for legal, security, audit, or dispute purposes.
• When a guest revokes consent or requests deletion, Avelluxe should delete the Rekognition or face-matching reference, the S3 selfie object, local media asset references, related biometric references, and eligible match records.
• Deletion of biometric references is intended to be permanent from active systems.
• Non-biometric audit logs showing that consent or deletion occurred may be retained for compliance, security, and dispute resolution.
• Backups may retain encrypted copies until they expire on the normal backup retention schedule.

Revoking Consent

• A guest may revoke biometric consent from the invitation or privacy controls when available, or by contacting Avelluxe.
• Revocation stops future biometric processing for that event.
• Revocation may remove the guest's selfie, face reference, eligible match records, and private gallery items generated from that biometric process.
• Revocation does not require the host to delete non-biometric event photos that lawfully include the guest, unless applicable law or a separate request requires deletion.

Voice Consent

• If a host chooses a custom voice feature that uses a host voice sample or creates a voice model, Avelluxe should request separate consent from the person whose voice is used.
• Do not upload another person's voice sample unless you have permission.
• A custom voice feature should not be used to impersonate someone, mislead guests, commit fraud, or create unauthorized synthetic speech.

Minors

Do not upload a child's selfie, face data, or voice sample unless you are legally authorized to provide consent for that child and the event use is appropriate under applicable law.

Guest Consent Statement

• By selecting the biometric consent checkbox and uploading a selfie, you consent to Avelluxe processing your selfie and face reference for the specific event so Avelluxe can help create a private memory gallery for you.
• You understand that participation is optional and that you can RSVP and attend without uploading a selfie.
• You understand that you may revoke consent and request deletion of eligible biometric data.
• You understand that Avelluxe may retain non-biometric audit logs needed to prove consent, revocation, deletion, security, or compliance.

Host Responsibilities

• Hosts must not require biometric participation as a condition of attendance unless they have a lawful basis to do so.
• Hosts must not upload photos, videos, selfies, or voice samples they do not have permission to use.
• Hosts should tell guests when Personalized Memories or photo delivery is enabled.
• Hosts should honor guest deletion, privacy, and media removal requests where required by law or event rules.

Contact

To revoke consent, request deletion, or ask questions about biometric processing, contact Avelluxe at privacy@avelluxe.com or use the controls available in your invitation or account.