This notice covers facerec.ayonix.com, the Ayonix face recognition website. It describes what this site does with information about visitors to it. It does not describe what an Ayonix product does with data in a customer’s own deployment — in that case the customer is the controller and their own notice applies.
Who is responsible
Ayonix Co., Ltd., 1-10-7-508 Higashi Gotanda, Shinagawa-ku, Tokyo 141-0022, Japan. For any question about this notice, including a request about your own data, write to infojp@ayonix.com.
What this site collects
Nothing at all unless you submit a form. There is no advertising network on this site, no cross-site tracking, and no cookie set for analytics.
| What | Why | Kept for |
|---|---|---|
| Enquiry form contents | Name, work email, organisation, country, role, and the details you provide about the deployment — so that someone can answer your enquiry usefully. | Until the enquiry is closed and any resulting business relationship ends, then deleted. |
| Consent record | The fact that you agreed to be contacted, and when. "We have consent" without a timestamp is not an answer to a data protection question. | With the enquiry record. |
| Enquiry context | The page the form was on, which call to action produced it, the referring URL and any UTM parameters — so that we know where an enquiry came from. | With the enquiry record. |
| Country code and browser family | A two-letter country from the network request and a coarse browser family such as "chrome" or "automated". Used to spot automated submissions. | With the enquiry record. |
| Uploaded sample media | Only if you choose to upload it. Used for a technical assessment of the camera view, and nothing else. | Supported: Deleted automatically within 7 days by a scheduled job. |
| Rate-limit records | A salted hash of the network address, to stop a script submitting the form hundreds of times. The address itself is never stored. | 15 minutes, then deleted. |
| Theme preference | Light or dark, stored in your own browser so the site remembers your choice. It never leaves your device. | Until you clear your browser storage. |
| Aggregate traffic measurement | Cloudflare Web Analytics, where enabled: page views and performance, measured without cookies and without a cross-site identifier. | Per Cloudflare’s retention for that product. |
Your IP address is not stored
It reaches the server as part of every web request, as it must. It is used to derive a country code and a salted hash for rate limiting, and neither of those can be reversed to recover the address. The address itself is not written to the database.
Uploaded sample media
The sample upload is optional and everything on this site works without it. If you do use it, a photograph or clip of a camera view very likely contains images of identifiable people who did not choose to send them to us. That is why the following apply without exception:
- Stored in a private bucket with an unguessable object key.
- Never served back over the web to anyone, including you.
- Deleted automatically within seven days, by a scheduled job that runs hourly — not by anyone remembering to do it.
- Used only for a technical assessment of the camera view.
- Never used to train any model.
- No recognition is run on it automatically by this website.
- Access is restricted to the people performing the assessment, and every access is logged.
- The filename is never recorded in analytics or in application logs.
You receive a reference when you upload. To have the file deleted before its automatic expiry, email infojp@ayonix.com quoting that reference; it will be deleted and the deletion logged.
What is never sent to analytics
Analytics on this site receives page views and performance timings only. It never receives: a form field value, a message body, an email address, a filename, an upload reference, or any URL that identifies uploaded media. This is enforced in the code that reports events, not only in policy.
Who else sees this information
- Cloudflare hosts this site, stores enquiries and sample uploads, and provides the bot-protection challenge on the forms. Data is processed under Cloudflare’s own terms as a processor for Ayonix.
- An email delivery provider, where configured, is used to notify the Ayonix team that an enquiry has arrived. If it is not configured, enquiries are still recorded.
- Ayonix staff in Japan, Australia and the United States, who need it to answer your enquiry.
Information is not sold, and it is not shared with advertising networks or data brokers. Ayonix operates in three regions, so an enquiry may be handled outside the country you sent it from.
Your rights
Depending on where you are, you may have the right to ask for a copy of the information held about you, to have it corrected, to have it deleted, to object to its use, or to withdraw a consent you gave. Write to infojp@ayonix.com and say what you want; you will not be asked to justify the request.
For an uploaded sample, quote the reference you were given. For an enquiry, the email address you used is usually enough to locate it.
What this site loads from elsewhere
Typefaces are served from this domain, not from a font service. A font service would receive your IP address and browser on every page you open here, before you had interacted with anything, so the fonts were copied to this site instead — you can confirm it in your browser's network panel. What does load from Cloudflare is the bot-protection challenge on the forms and, where it is enabled, the analytics script; both are named above and both are covered by the cookie policy. Nothing else on these pages is fetched from a third party.
Cookies
This site sets no advertising or cross-site tracking cookies. It uses one browser storage key for your theme preference, which never leaves your device. Cloudflare Turnstile may set a short-lived token as part of the bot-protection challenge on the forms. The cookie policy covers this in full.
Changes to this notice
When this notice changes, the last-reviewed date at the top of the page changes with it. There is no separate archive; the current version is the one in force.
A note on scope
This notice is about a website. It is not legal advice, and it does not describe the obligations that apply to an organisation deploying face recognition — those depend on the jurisdiction, the sector and the purpose, and the deploying organisation must assess them itself. The privacy and governance page sets out the controls such an assessment usually asks about.