Compliant with PDP Law No. 27/2022

Data Retention Policy

How Kepoto stores, deletes, and gives you full control over your face data.

Automatic deletion

Photos a photographer uploads that don't match anyone's face are automatically deleted after:

60 days

from when the photo was uploaded

3 months

from the first match, if never bought

Photographers receive a warning email 3 days before deletion happens.

Your right to object (takedown)

If your face matches a photo but you don't consent to it circulating, you can click “This is me, I object” on the “My Photos” page at any time. If you're the only person in the photo, it's permanently deleted and the buyer gets a full refund; if there are other people in it, your face is permanently blurred and the photo stays. Full details, including the grace period for high-value photos and usage limits, are in the Takedown Policy.

Withdrawing photo consent

You can withdraw your face consent for an event at any time from the “My Photos” page. Once withdrawn, your face is no longer used to match new photos from that event.

Compliance with PDP Law No. 27/2022

All activity involving your personal data (consent, face matching, purchases, takedowns, automatic deletion) is logged for compliance with Indonesia's Personal Data Protection Law (PDP Law).