Privacy & consent
How Visage3D handles facial photographs, 3D models and consultation records.
This page describes how the product is designed to work. It is not a legal privacy notice, and the presence of these controls does not by itself make any deployment legally compliant.
What we store
Account details, patient profiles, cases, guided photos (re-encoded without location or camera metadata), documents you upload, 3D models, consultation versions (as adjustment parameters), appointments, messages, consent records and an audit trail.
Who can see it
A patient sees their own cases. A clinic sees a case only through an explicit grant — created when the clinic registers the patient, or when the patient shares from their portal. Each clinic's notes, proposals and messages are private to that clinic. Platform administrators cannot see patient content unless a clinic owner approves a time-limited, audited support request.
Sharing and revocation
Patients can share a case with several clinics and revoke any of them at any time. Revocation is checked on every file request, so access ends immediately. It cannot undo what a clinic has already viewed, and clinics keep their own consultation records.
Photo processing
Photos are processed only with recorded consent. 3D reconstruction runs on a separately hosted service that receives short-lived, single-purpose download links, never storage credentials. In demo mode no reconstruction happens: a licensed sample model is attached and labelled as such.
Retention and deletion
When a patient requests deletion of a case, every clinic's access is revoked, processing stops, and case files become unreadable immediately; stored files are erased after a 30-day grace period. Audit records are kept without the files.
Gallery content
Consent to publish images in a clinic's public gallery is separate from consent to process photos, is off by default, and would require a further approval for each image.
Security measures
Private object storage with short-lived signed links, server-side authorization on every read and change, rate limiting, safe logging without images or tokens, and secrets held only in server configuration.
Clinical limits
Previews are consultation visualisations. They are not diagnoses, surgical plans or predictions, and contain no measurements.