Biometric Data Policy

Last Updated: April 6, 2026|

What Biometric Data We May Collect

When you attend an event with a PhotoboothGo photobooth, photos may be taken. Our photo tagging system may use facial recognition technology to link photos to your EventLingo profile. The biometric data we may collect includes facial geometry data (also known as a “face template” or “faceprint”) derived from photographs taken at events.

How We Use Biometric Data

Biometric data is used solely to identify and link photos taken at events to your EventLingo profile. We do not use biometric data for advertising, profiling, or any purpose other than photo attribution. Biometric data is never used for surveillance, tracking, or any purpose unrelated to the photo tagging feature.

Retention and Destruction

Biometric data is retained for no longer than 90 days after the event, or until you request deletion, whichever comes first. After the retention period expires, biometric data is permanently and irreversibly destroyed. Photo images themselves may be retained separately and are not subject to this 90-day biometric data retention limit. The photos remain available through your account unless you request their removal.

Third-Party Disclosure

Biometric data is not sold, leased, traded, or otherwise disclosed to third parties except to PhotoboothGo for the purpose of photo processing and attribution. PhotoboothGo is contractually bound to comply with the same retention and destruction requirements described in this policy. No other third party receives access to biometric data.

Your Rights

You may request deletion of your biometric data at any time by contacting privacy@eventlingo.com or using the “Remove My Photos” feature in your account settings. Upon receiving your request, we will delete your biometric data within 30 days and confirm deletion to you in writing.

Illinois Residents

Illinois residents have additional rights under the Biometric Information Privacy Act (BIPA), 740 ILCS 14/1 et seq. Under BIPA:

  • We will not collect biometric data from Illinois residents without first providing written notice and obtaining written consent
  • We maintain a publicly available written policy establishing a retention schedule and guidelines for permanently destroying biometric data (this policy)
  • Biometric data of Illinois residents is destroyed when the initial purpose for collecting it has been satisfied, or within 3 years of the individual's last interaction with EventLingo, whichever occurs first
  • We store, transmit, and protect biometric data using a standard of care no less protective than that used for other confidential and sensitive information
  • Illinois residents may bring a private right of action for BIPA violations

Texas Residents

Texas residents have additional rights under the Capture or Use of Biometric Identifier Act (CUBI), Texas Business and Commerce Code Section 503.001. Under CUBI:

  • We will not capture biometric identifiers of Texas residents for a commercial purpose without first providing notice and obtaining consent
  • Biometric data of Texas residents is destroyed within a reasonable time, but no later than the first anniversary of the date the purpose for collecting the data expires
  • We use reasonable care to store, transmit, and protect biometric data and use a level of protection equal to or greater than that used for other confidential information
  • Biometric data of Texas residents is not sold, leased, or otherwise disclosed to any third party unless disclosure is required or permitted by law, or the individual consents to disclosure