Privacy Policy

CAFF is a product of Piper James LLC. This policy explains what we collect, why, how long we keep it, and how you delete it. Plain English, no surprises. CAFF processes face data, so please actually read this one.

The short version

• You upload photos of yourself, and only yourself. We use them for exactly one thing: finding ads that you appear in, for you.
• Your photos stay private to your account. We never sell or share your photos or face data. Ever.
• We do not keep a face database. Each scan recomputes what it needs from your photos and throws it away when the scan ends.
• Faces of other people in ads are never stored. They are checked in memory, don't match you, and are immediately discarded.
• You can delete everything, anytime. If you finish a trial and don't continue, we delete your face data automatically within 30 days of signup.

Who we are

CAFF is made by Piper James LLC, a Texas company. CAFF is an independent product. We are not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc. Facebook and Instagram are trademarks of Meta Platforms, Inc.

What we collect

• Account info: your email and your state of residence (used to confirm where CAFF is available).
• Your reference photos: the photos of yourself that you choose to upload. You may only upload photos of yourself, never anyone else.
• Match results: which ads matched your face (the ad's ID, the advertiser's name, dates, and a similarity score). These are records about ads, not stored face data.
• Usage info: your scans and plan usage (for example, how much of your monthly scan meter you've used).
• Payment info: handled by Stripe. We never see or store your card number.
• Waitlist info (if you joined the waitlist): your email plus anything optional you shared, like a portfolio link.

Your face data: the full disclosure

Face measurements derived from photos are biometric data, and we treat them with the strictest care in the product.

• What we collect and create: your uploaded reference photos, and temporary face measurements (called embeddings) computed from those photos during a scan.
• The one purpose: finding ads that you appear in and showing them to you. That is the only use. No advertising, no profiling, no training on your face for other purposes, no identification of anyone else.
• Your written consent comes first: we do not collect or process your photos until you give explicit consent at upload. The consent screen states what we collect, why, and for how long, and links to this policy.
• How matching actually works: your photos are stored encrypted and private to your account. When a scan runs, we recompute your face embedding from your photos, compare it in memory against faces in public ads, and then discard the embedding when the scan finishes. We do not keep a standing database of face templates.
• Other people's faces: ads contain other people. Their faces are processed only in memory, only to conclude "not you," and are immediately discarded. We never store anyone else's face data. We could not identify a stranger if we wanted to, and we don't want to.
• Never sold, never shared: we will never sell, lease, trade, or profit from your photos or face data, and we will not disclose them to anyone except as required by law or with your separate consent.
• Protection: photos are stored encrypted at rest with access limited to your account.

How long we keep face data (retention schedule)

• Active accounts: your photos are retained while your account is active, so scans keep working.
• Trial users who don't continue: your results become read-only when the trial ends. At day 30 from signup, we permanently delete your photos and all face-derived data, automatically.
• Deletion requests: completed within 30 days of your request, covering your photos, any cached face data, and face-derived match records.
• Closed accounts: same rule. Full deletion within 30 days of closing.
• Backstop: in no case do we retain face data longer than 3 years after your last activity.

Your rights and choices

• See what we have: email us and we'll tell you.
• Delete: use the in-app delete control or email caff-legal@rube.com. Done within 30 days.
• Unsubscribe: every email we send has an unsubscribe link.

Where CAFF is available

CAFF is currently available to residents of the United States, except Illinois and Washington. We ask your state of residence at signup and rely on your answer being accurate. We hope to expand availability as we grow, and you can leave your email to be notified.

Ads and other people's content

CAFF analyzes ads that advertisers have published in Meta's public Ad Library. Ad video is processed transiently for matching and is not kept as a library by us. When you download an ad you were confirmed in, we stream it to you on request and do not store the video. Advertisers own their ad creative; see the Terms of Service for the download rules.

Analytics and cookies

We use privacy-friendly, cookieless analytics (Cloudflare) to count visits. It sets no cookies and does not track you across other sites. Logging in uses a strictly necessary session cookie, which is required for the service to work and is not used for tracking or advertising. We use no advertising or tracking cookies.

Service providers

We use a small set of providers to run CAFF: DigitalOcean (hosting), Apify (retrieval of public ad-library data), Stripe (payments), Resend (email), and Cloudflare (analytics). They process data only to provide their service to us. None of them receive your photos or face data for their own use, and nothing is ever sold.

IP complaints

If you believe content available through CAFF infringes your rights, email caff-legal@rube.com. Piper James LLC has a DMCA designated agent registered with the U.S. Copyright Office (registration DMCA-1074962). We respond promptly and may disable access to material that is the subject of a valid complaint.

Age

CAFF is for adults. You must be 18 or older. We never knowingly process a minor's photos or data.

Changes

If we change this policy, we'll post the update here with a new date. If we ever materially change how we handle face data, we will ask for your consent again before the change applies to you.

Contact

Piper James LLC (CAFF) · caff-legal@rube.com