Privacy & Biometrics Notice
Last updated: · Prepared under Rule 3 of the NZ Biometric Processing Privacy Code 2025
If you appear in footage that was processed by Tabor8 and want to know what data was held about you, the answer is most likely: nothing. Facial recognition templates are deleted the moment processing is finished. If you have a question or want to confirm, email team.clipmine@gmail.com.
Who we are
| Field | Detail |
|---|---|
| Organisation | Tabor8 |
| Operator | Tony Xia, Hamilton, New Zealand |
| Service | AI-powered footage organisation at tabor8.com |
| Contact | team.clipmine@gmail.com |
| Regulator (NZ) | Office of the Privacy Commissioner - privacy.org.nz |
Who this notice is for
This notice is for anyone whose face appears in video footage uploaded to Tabor8 - not just people who hold a Tabor8 account. If you attended an event, played in a match, or appeared in footage that a videographer later processed with Tabor8, this notice describes what Tabor8 did with data about you and what rights you have.
What Tabor8 collects
When footage is uploaded to Tabor8 for processing, the following data is derived from the video:
- Facial recognition templates - a numeric vector derived from the position and proportions of facial features in each detected face. This is biometric data.
- Detection metadata - timestamps and frame positions where a face was detected, used to cut clips.
Tabor8 does not collect names, contact details, gender, ethnicity, or any other identifying information from individuals appearing in footage. If you are a Tabor8 account holder, see the section below for what we collect about you as a registered user.
What we collect from account holders
When you create a Tabor8 account, we collect the following data about you as a registered user - separate from any biometric processing of footage you upload:
| Data | Source | Purpose | Retention |
|---|---|---|---|
| Email address | Signup | Account management, verification, service notices | Until account deletion |
| IP address + device info | Automatic | Security, abuse prevention | 12 months rolling |
| Usage analytics (page views, events) | Vercel Analytics | Product improvement - aggregated, not linked to individuals | Per Vercel retention policy |
| Error logs (user ID + context) | Application | Debugging, support | 12 months rolling |
| Product usage data (which control was used, on which page, when) | Application - beta participants only | Finding and fixing problems | 90 days rolling |
| Billing records (Stripe customer ID, plan, payment status) | Stripe | Billing and subscription management | 7 years (NZ Inland Revenue requirements) |
Product usage data records the name we gave a control in our own source code - never the text displayed on your screen. Your project names, person names and footage therefore never form part of this record. Only controls we have explicitly tagged are recorded; anything untagged is not registered at all. It is collected from beta participants only, is never sold or shared, and is deleted after 90 days.
Legal basis (GDPR Art. 6): performance of contract for account management and billing; legitimate interests for security, analytics, and debugging.
Why we collect it
Tabor8 processes facial recognition templates for one purpose: to cluster video clips by person, so the videographer who uploaded the footage can find and download clips of specific individuals without manually scrubbing the source recording.
We have assessed this purpose as necessary and proportionate under Rule 1 of the NZ Biometric Processing Privacy Code 2025. The assessment considers: the purpose is specific and limited; no reasonably effective lower-risk alternative achieves the same outcome at scale; safeguards include immediate deletion, access controls, and processing only by authorised infrastructure.
Tabor8 does not use facial recognition outputs to infer emotional state, intent, mental health, political views, or any other sensitive characteristics. Outputs are limited to temporal and spatial clustering of footage by detected identity.
How long we keep it
Short answer: facial templates are deleted immediately. Tabor8 deletes all facial recognition templates as soon as the clip-cutting job is complete - typically within minutes of processing finishing. There is no standing biometric database. After processing, Tabor8 holds your clip files (the video segments themselves) but not the biometric data that was used to create them.
| Data type | Retention |
|---|---|
| Facial recognition templates | Deleted immediately on job completion |
| Clip files (video segments) | Retained until the videographer deletes the project |
| Processing logs | Retained for 12 months (rolling) for security and audit purposes |
| Error logs | Retained for 12 months (rolling), then deleted automatically |
| Product usage data (beta participants) | Retained for 90 days (rolling), then deleted automatically |
| Account data (email, IP, analytics) | Retained until account deletion |
| Billing records (Stripe) | Retained for 7 years (NZ Inland Revenue requirements) |
Your alternatives to biometric processing
If you are a videographer, you are never required to use facial recognition. You can organise footage manually in your own editing software, and Tabor8 will provide manual organisation assistance on written request at no extra charge. Contact team.clipmine@gmail.com.
If you appear in footage someone else uploaded, processing has already finished by the time you learn of it - facial recognition runs once, at scan time, and the templates are destroyed within minutes. There is nothing ongoing to opt out of. What you can do instead is have your footage removed.
Removal requests
Email team.clipmine@gmail.com with:
- The event - name, date, and venue if you know them
- Who filmed it, if you know
- Anything that helps us locate you in the footage (roughly when you appear, what you were wearing)
You do not need to send a photograph of yourself, and we will not ask for one. Requiring a face image to action a removal would mean collecting more biometric data than we started with.
What happens next:
- We acknowledge your request within 5 working days
- We locate the relevant clips and confirm what we have found
- We delete those clips from our storage and notify the videographer that a removal request was actioned
- We confirm to you in writing once deletion is complete
What we cannot do: we cannot delete the videographer's own original footage. They hold that, not us, and they are the data controller for it - we will pass your request on to them and tell you who they are so you can contact them directly. We also cannot recover facial recognition templates to check whether you were processed, because they no longer exist.
No account is required, there is no charge, and you do not need to explain why.
If you are not satisfied with how we handle your request, you can complain to the Office of the Privacy Commissioner (New Zealand) or your local data protection authority.
Who has access to processed data
- The videographer who uploaded the footage - can access clip files grouped by person identity. They cannot access raw facial recognition templates.
- Tabor8's processing infrastructure - cloud GPU processing via Modal (United States). Facial templates exist only during the processing job. No human operator routinely accesses templates during processing; access is limited to emergency incident response and is logged.
- Tabor8 personnel - may access processing logs and metadata for security and billing purposes. No access to biometric templates.
Third-party service providers (processors): Tabor8 uses the following processors who may handle data as part of service delivery:
- Vercel (United States) - hosting and serverless compute. Processes request logs and aggregated analytics.
- Supabase (United States) - database. Stores account data, project metadata, and processing records.
- Cloudflare R2 (United States) - object storage. Stores uploaded video files and clip outputs.
- Modal (United States) - GPU compute. Receives footage for biometric processing; no data is retained after job completion.
- Stripe (United States) - payment processing. Stores billing information for subscribed accounts.
Tabor8 does not sell, share, or license biometric data to any third party.
Your rights
Under the NZ Privacy Act 2020 and the Biometric Processing Privacy Code 2025, you have the right to:
| Right | Detail |
|---|---|
| Access | Request a description of any personal or biometric data Tabor8 holds about you. (In most cases, the answer will be: facial templates already deleted; clip files remain in the videographer's account.) |
| Deletion | Request deletion of any data Tabor8 holds. For biometric data, our deletion policy means there is typically nothing to delete. For clip files, deletion requests are directed to the videographer who uploaded the footage, as they are the data controller. |
| Correction | Request correction of any inaccurate personal data Tabor8 holds about you. |
| Complaint | Lodge a complaint with Tabor8 directly, or escalate to the relevant regulator (see below). |
How to make a request or complaint
Step 1 - Contact Tabor8: Email team.clipmine@gmail.com with a description of your request. We aim to respond within 5 working days. For deletion requests, please include a description of the event or footage you appeared in so we can identify the relevant project.
Step 2 - Escalate to a regulator: If we do not resolve your complaint to your satisfaction, you can contact:
- New Zealand: Office of the Privacy Commissioner - privacy.org.nz | 0800 803 909
- Australia: Office of the Australian Information Commissioner - oaic.gov.au | 1300 363 992
- Other jurisdictions: Contact your local data protection authority.
Regional applicability
Tabor8 is currently available in New Zealand only, for the duration of the beta. Visitors from any other country are shown a region restriction page and cannot create an account or upload footage - this is a beta-scope limitation, not a claim about whether Tabor8 would be compliant elsewhere. The rows below describe the specific jurisdictions we researched in preparing for future expansion, kept here so the assessment doesn't need to be redone from scratch when that happens.
| Jurisdiction | Position |
|---|---|
| New Zealand | This notice is designed to meet the notification requirements of Rule 3 of the NZ Biometric Processing Privacy Code 2025. |
| Australia (not currently served) | This notice would provide a baseline disclosure under the Privacy Act 1988 (Cth). Additional consent obligations may apply depending on the context of processing. |
| European Union / UK (not currently served) | GDPR Article 9 requires explicit consent from biometric data subjects before processing. Our current service does not meet that requirement, so this jurisdiction is not served during the New Zealand-only beta regardless. |
| Illinois / Texas / Washington (US) (not currently served) | State biometric privacy laws (Illinois BIPA, Texas CUBI, Washington My Health My Data Act) require prior written or electronic consent from biometric data subjects before collection. Not served during the New Zealand-only beta regardless. |
| California (US) (not currently served) | California residents have rights under the California Consumer Privacy Act (CPRA / CCPA). Biometric data is Sensitive Personal Information (SPI) under CPRA §1798.121: (a) know what personal data is collected about you; (b) request correction of inaccurate data; (c) request deletion of your data; (d) limit our use and disclosure of your SPI to purposes reasonably necessary to provide the service; and (e) non-discrimination for exercising your rights. Not served during the New Zealand-only beta regardless. |
| Rest of world (not currently served) | This notice provides a general disclosure baseline for if and when Tabor8 expands beyond New Zealand. Specific rights may vary by jurisdiction. |
Changes to this notice
We will update this notice if our processing practices change materially. The date at the top of this page reflects the most recent revision. Continued use of Tabor8 after an updated notice is published constitutes acceptance of the changes.
Related documents
- Terms of Service - includes the full data handling schedule and prohibited use restrictions.
- NZ Office of the Privacy Commissioner - Biometric Processing Privacy Code 2025: privacy.org.nz