Privacy
The application
Likenor trains a personal likeness from a folder of photos on the owner's computer. Your photographs stay on this computer unless you opt into a cloud run, and a cloud run leaves this computer for a third party Likenor does not own.
Likenor Cloud
Likenor Cloud is not available yet. Cloud runs are your choice and are never automatic. This section is about Likenor Cloud, where Likenor trains likenesses and renders pictures on graphics cards it rents, paid for with credits.
Your photographs stay on this computer unless you opt into a cloud run, and a cloud run leaves this computer for a third party Likenor does not own.
When you opt in, the job may run on Likenor Cloud. Your photographs leave this computer for that run and go to a third party Likenor does not own; Likenor does not own the GPUs. What runs in the cloud and what it does with your photographs is described on The worker image.
Whose data this is about
- You, if you hold a Likenor Cloud account.
- The person pictured in the photographs, when that is not you.
- Anyone who writes to Likenor through the complaint form or the rights page.
What Likenor Cloud uses, why, and on what basis
| What | Why | Lawful basis | How long |
|---|---|---|---|
| Account and credit records: an identifier for your account, your country, your credit balance and the credit packs you buy; for each job, its kind, its region, its credits, its state and its times | To run Likenor Cloud for you and take payment; your country also decides where your jobs may run and whether pictures must carry an AI mark | Contract. Legal obligation, for the records kept for tax. | For as long as the account is open, and as long as tax law requires after that |
| Photographs of the person pictured | To train the likeness that was asked for | Explicit consent of the person pictured | Deleted as soon as the graphics card has its own checked copy, and again when the job ends. Always within 24 hours. |
| The likeness trained from them | To deliver it to the account holder, and to render pictures with it | Explicit consent of the person pictured | Deleted from Likenor Cloud once delivered. Always within 24 hours. |
| Pictures, and the prompt and settings for each | To render the pictures that were asked for | Explicit consent of the person pictured | Pictures: deleted once delivered, always within 24 hours. Prompts: not kept in Likenor's job records or logs. |
| Consent and agreement records: who agreed, to which wording, the boxes ticked, and when | To show that consent was given, and to act on a withdrawal | To show the agreement was made | While the likeness can be used, plus 6 years |
| What you send through the complaint form or the rights page | To answer you, to act on a report, and to keep a record of what was done | Legitimate interests, in answering the people who write to Likenor and acting on reports | For as long as needed to answer you and keep a record of what was done |
Likenor treats the photographs, the likeness and the pictures as special category data, the most protected kind.
Consent comes from the person pictured. The account holder cannot give it for someone else. The person pictured gives it to Likenor directly. They can withdraw it at any time, through the rights page. Withdrawing does not make unlawful what was done before it.
Likenor does not use the photographs, the likeness or the pictures to train any other model.
Automatic decisions
Two checks in Likenor work automatically.
- The age check. Before training, the application on the account holder's computer estimates the age of the person in each photograph. A photograph that seems to show someone under 15 is refused, with no override. Between 15 and 25, the account holder is asked to confirm that the person pictured is over 18. The check runs on that computer, and Likenor Cloud does not receive the estimates.
- The prompt check. A prompt asking for intimate or sexual content is refused before a run starts.
You can ask for a person to look at a refusal through the complaint form.
Who receives it
- The graphics-card provider, a company in the United States, rents Likenor the graphics cards and the storage the jobs run on. It receives the photographs, the likeness, the prompts and the pictures for the length of a job. It keeps a job's result for 30 minutes after the job ends, and its own logs of each job for 90 days. Its own sub-processors are listed in its data processing agreement.
- Cloudflare, Inc. hosts the Likenor Cloud control plane, which keeps the account, credit and job records. Photographs that pass through it on their way to a job have their location data removed on the account holder's computer first.
- Stripe takes payment for credits, under Stripe's own privacy notice.
- The police, regulators and courts, when the law requires it.
Where it is processed
Your country sets your home region. Today Likenor Cloud's home region is Europe, and North America is not offered.
Training always runs in your home region. Pictures are rendered in Europe unless you choose "Fastest available" in Settings, which can only send a job to North America once North America is offered.
The graphics-card provider is a company in the United States, and so are some of its own sub-processors. Personal data that it can reach is protected by the UK International Data Transfer Addendum and the EU standard contractual clauses, with a transfer risk assessment. You can ask for a copy of these safeguards through the rights page.
How long it is kept
Likenor Cloud deletes the photographs as soon as the graphics card has its own checked copy, and again when the job ends. It deletes the likeness and the pictures once they are delivered to the account holder's computer. Anything still there 24 hours after it was written is deleted. Each deletion is checked.
After delivery, the likeness and the pictures are on the account holder's computer. Likenor cannot reach that computer, and cannot delete anything from it.
Your rights
You have these rights over your personal data. You do not need an account to use them. Use the rights page. There is normally no charge, and Likenor will answer within one month.
Security
- Each photograph has its location data removed on the account holder's computer before it is uploaded. The photograph is not sealed; the upload is the stripped JPEG, PNG or WebP.
- The control plane stores a stripped JPEG, PNG or WebP and refuses a format the desktop stripper does not touch. A render likeness is PUT to the per-job store with a short-lived URL.
- The control plane leaves photographs, file names, prompts and email addresses out of its logs.
Complaints
If you are unhappy with how Likenor has used your data, use the complaint form. Likenor will acknowledge a complaint within 30 days and tell you the outcome.
You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint.
If you live in the European Union, you can also complain to the data protection authority in your country.
Setting up the application
When the application sets itself up, it downloads the programs and models it needs to train and render. It fetches them from the services below, each of which receives this computer's internet address, as any website does. Each may hand a download on to a file host of its own.
GitHub (github.com and githubusercontent.com): the Python interpreter, the tool that installs it, and the small models that check photographs.
The Python Package Index (pypi.org and files.pythonhosted.org): the Python packages.
PyTorch (download.pytorch.org): the build of PyTorch for NVIDIA graphics cards.
Hugging Face (huggingface.co): the picture model, and one model that checks photographs.
Adobe (cai-watermark.adobe.net): the watermark model.
downloads.likenor.com, which Likenor runs: the trainer.
None of them receives your photographs, your prompts or your likenesses.
Who
Likenor, United Kingdom.
Likenor is responsible for the personal data described on this page. For anything on this page, including the rights below, write to licences@likenor.com.
This website
Cloudflare hosts this website and downloads.likenor.com, where the installers are. Cloudflare receives each request, including your internet address, in order to deliver the page or file you asked for. The site's own code keeps no log of visits.
Lawful basis: legitimate interests, in delivering this website and keeping it working.
Buying a licence
Stripe takes payment. The buy button opens a checkout page on Stripe's own website, and what you enter there, including your payment details, goes to Stripe under Stripe's own privacy notice. This website never sees your card details.
After payment, Stripe sends you back to this website's /thanks page. This website then reads that checkout from Stripe to confirm it was paid and what it was for, shows your licence key, and keeps no copy of what Stripe returned. Stripe keeps the record of the purchase. Likenor can see it there, and uses it to deliver your licence and to handle a refund under the Terms.
Lawful basis: contract. Likenor needs this to sell you a licence key and deliver it.
Licence keys
Keygen is the licensing service the application activates licence keys with, and it issues complimentary passes. When the application activates a key, it sends Keygen the key and a fingerprint of this computer. The fingerprint is a one-way digest of an identifier of this computer. On Windows, that is the system identifier the computer's firmware reports, or, if it cannot be read, the identifier Windows gives its installation, or, failing both, the kind of operating system and the number of processors. On Linux, it is the identifier the operating system gives this computer, or, where that could not be read, an identifier Likenor creates once and keeps in its own data folder. It tells one computer from another, and it does not contain your name or your files. Keygen also receives this computer's internet address when the application connects to it.
The application can also ask this website for a complimentary pass. To limit how many passes can be taken in a day, this website counts them by internet address: the whole address for an IPv4 address, and the first half of the address for an IPv6 address, which names the network rather than one device. It makes a keyed one-way digest of the day and that address or network, and stores that digest at Keygen with the pass it creates. It does not store the address itself, and the digest changes every day.
Lawful basis: contract, for activating a key you hold. Legitimate interests, for the daily limit on complimentary passes, which stops one place taking many of them.
Crash reports
Crash reports are off until you switch them on in the application's Settings. When they are on and the application fails, a report of the failure goes to Sentry, an error-reporting service hosted in the United States. The report holds the type of error and the chain of program steps that led to it. Before it is sent, Likenor removes the error's message, this computer's name, and the file paths it can recognise in those steps. It does not include your photographs, prompts or likeness files.
Some technical details are still sent: the locations of the program's own files on this computer, and information about the device, such as its operating system, language, time zone and memory. A file location can include the name of your user folder on this computer, which on Windows is often your name.
Lawful basis: consent. You can withdraw it at any time by switching crash reports off in Settings.
Emails to support@ and licences@ are read by Likenor. Do not send training photos.
Likenor uses what you send to answer you. Lawful basis: legitimate interests, in answering the people who write to it.
Cookies and analytics
This website's own code sets no cookies. Its pages carry no tracking pixels, no analytics SDK and no advertising cookies, and their fonts and images come from this website itself.
Cloudflare, which hosts this website, may set a strictly necessary security cookie to tell people from automated traffic. Stripe's checkout page is on Stripe's own website, under Stripe's own privacy notice.
Your rights (UK GDPR)
UK data protection law gives you these rights over your personal data:
Access: ask for a copy of the personal data Likenor holds about you.
Rectification: ask Likenor to correct data that is wrong or incomplete.
Erasure: ask Likenor to delete your data, in some circumstances.
Restriction: ask Likenor to limit how it uses your data, in some circumstances.
Objection: object to Likenor using your data where it relies on legitimate interests, as it does for the complimentary-pass limit.
Portability: ask for data you gave Likenor in a form you can take to someone else, in some circumstances.
Where Likenor relies on your consent, you can withdraw it at any time. To use any of these rights, use the rights page. You do not need an account. You can also write to licences@likenor.com. There is normally no charge, and Likenor will answer within one month.
If you are unhappy with how Likenor has used your data, use the complaint form, or write to Likenor at the same address. Likenor will acknowledge a complaint within 30 days and tell you the outcome. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint.