Privacy Notice

What we collect, why, how long we keep it, and the rights you have over it.

Last updated: July 17, 2026

Who we are

Cognau (an Altailab product) provides liveness verification — a short camera check that confirms a live human is present. Contact for anything in this notice: privacy@cognau.com.

Two roles apply. When you complete a verification inside another organization's product, that organization is the controller and Cognau is its processor. For this website (and our waitlist), Cognau is the controller.

Verification sessions

  • What: live video of your face during the check, signals derived from it, basic device and connection information (browser type, screen properties, IP address), and the verification result.
  • Why: to verify that a live human is present and to protect the check against fraud. The analysis is automated — you are informed of this at the time of the check, and no verification runs without your explicit consent given on the consent screen.
  • Legal basis: your explicit consent (GDPR Art. 9(2)(a)) for biometric processing; legitimate interest for fraud-prevention signals that are not biometric.
  • How long: video frames are automatically deleted within 24 hours; full schedule — including the optional, opt-in face template — is published in our Biometric Data Policy.

We never collect your name, government ID, or address during a liveness check, we do not compare your face against any database unless you explicitly opt in to re-recognition, and we never sell personal data.

This website

If you join the waitlist we store the contact details you submit and use them only to contact you about Cognau. We use privacy-respecting analytics to understand aggregate site usage.

Who processes data for us

We use a small number of infrastructure providers (hosting, databases) under contracts that require confidentiality and compliance with applicable data-protection law. A current list of sub-processors is available on request at privacy@cognau.com.

Your rights

Depending on where you live (including under GDPR and US state biometric-privacy laws), you can: access the data we hold about you, correct it, delete it, object to or restrict processing, receive a portable copy, and withdraw consent at any time — withdrawing is as easy as giving it and doesn't affect completed verifications. To exercise any of these, email privacy@cognau.com or contact the organization you verified with. You also have the right to complain to your data-protection authority.

Changes

We'll update this page and its “last updated” date before any material change takes effect.