Privacy Policy

Effective Date: August 17, 2026

This Privacy Policy governs the processing of personal data by MYETV Identity Provider (operated under identityprovider.myetv.tv), an infrastructure specialized in automated identity document extraction, anti-spoofing analysis, active liveness detection, and facial biometrics.

1. Data Controller vs. Data Processor Roles (GDPR)

• Data Processor: MYETV Identity Provider acts strictly as a Data Processor regarding any identity documents, front/back card scans, facial biometric photos, or personal demographic data transmitted through our API endpoints (api/v1/verify.php) by third-party clients and integrations.
• Data Controller: The third-party business, platform, or developer utilizing our API Key services acts as the Data Controller and is responsible for obtaining lawful consent and providing primary privacy disclosures to their end-users.
• MYETV Account Data: MYETV acts as a Data Controller solely for account registrations, billing details, and API usage quotas associated with registered developers on identityprovider.myetv.tv.

2. Zero-Persistence & RAM-Only Processing Architecture

• Uploaded media files (e.g., document_front, document_back, selfie_image) are immediately discarded upon response delivery.
• No identity images, biometric vectors, face templates, or raw extraction results are ever stored on disk, logged permanently, or shared with cloud AI providers.
• All AI inference runs locally using dedicated vision engines on private infrastructure.

3. Types of Data Processed

• Verification API Inputs (Transient): Front/back ID document images, PDF417/1D/2D barcodes, MRZ strings, facial selfies, and ELA/EXIF forensic metadata.
• Extracted Attributes (Transmitted to Client): Name, surname, date of birth, document number, calculated age (years_old), expiration date, and anti-spoofing security indicators (e.g., is_digitally_forged, is_screen_photo, face_match_passed).
• Age Verification Only Mode: When enabled by the client API Key, demographic data is completely omitted, returning strictly years_old and anti-fraud status.
• Account & Service Data: Developer email addresses, hashed passwords, API usage logs (IP address, timestamp, status code, requested fields), and subscription billing details.

4. Technical & Anti-Fraud Security Measures

To prevent identity theft, digital forgery, and presentation attacks, our infrastructure applies automated real-time checks:

• EXIF & ELA Forensics: Detects digital manipulation, software editing, and image tampering.
• Moiré & Screen Detection: Rejects photos taken from computer monitors or smartphone screens.
• Client-Side Liveness Detection: Uses Google MediaPipe Face Mesh on client devices for interactive head-rotation tracking.
• Rate Limiting & IP Blocking: Prevents brute-force submission attacks and quota abuse.

5. Data Retention Policy

• Verification Media & Extracted Data: 0 Seconds (Purged immediately from RAM after execution).
• API Activity Logs (api_logs): Retained temporarily for audit, rate limiting, and debugging purposes (contains API key IDs, status codes, and timestamp logs; no biometric or document media).
• Account Data: Retained for the duration of the registered account's activity or as required by law for accounting and tax records.

6. User Rights (GDPR / EU Digital Services Act)

Under EU Regulation 2016/679 (GDPR), end-users whose documents are processed via our API may exercise their rights of access, rectification, erasure, and restriction through the respective Data Controller (the platform requesting the identity verification). Registered developers can manage or delete their account credentials directly via the dashboard at identityprovider.myetv.tv or through main account management at myetv.tv.

7. Governing Law & MYETV Platform Integration

These privacy policy are governed by applicable Italian and European Union law. These document operate in conjunction with the MYETV Privacy Policy available at myetv.tv.