Aragon
Aragon · Image and video · US · www.aragon.ai
services/aragon.yamlVendor data-handling terms
“We contractually prohibit our AI service providers from using face data to train generalized AI models or create pooled face training datasets. / Aragon does not identify or authenticate people in the images or videos you upload, nor are we training our technologies to do so.”
The policy states permanent deletion or anonymisation within thirty days after the earliest of delivery of the requested content, or the end of an active subscription, or an organisation-configured period.
“When face data is deleted, it is permanently erased such that it cannot be recovered or reconstructed.”
“Our Services are hosted in the United States.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| aragon.ai | app | observed |
Assessment
Reasoning: An AI headshot generator: the only content is faces, which are biometric data when used for identification and sensitive in any case. The policy is specific about face data (no pooled training sets, 30-day deletion, US hosting), which is better than most image tools. Exposure is staff photos leaving the EU.
Flags: Facial images (GDPR Art. 9 where used for identification) · GDPR Chapter V (US hosting) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Face-data training, retention, and hosting terms verified against the Aragon privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.