A Castro bar patron was refused service after Patronscan's Guard+ scanner flagged them at the door — the first publicly documented individual refusal tied to the kiosks spreading through the neighborhood. Here's who makes the system, what it actually collects, and why the company's official privacy claims don't square with its own marketing.

A Castro bar refused a patron service this weekend after Patronscan's Guard+ system flagged them at the door, SFGate reported Saturday — the first publicly documented individual refusal tied to the face-scanning kiosks that have spread through at least nine of the neighborhood's venues over the past 18 months. The incident puts a face, of a sort, on a piece of technology whose maker insists, officially, that it collects no faces at all.

Patronscan Inc. is a trade name for Servall Data Systems Inc., a bootstrapped Calgary startup founded in 2005 as, by one account, "a six-month coding project to help bars and nightclubs in Edmonton track violent incidents and repeat offenders." No venture capital has been disclosed. The company runs on venue subscriptions of roughly $4,200 a year, and with 2,000-plus venues globally, it has built a real if unglamorous business — though a long way from a typical Bay Area pitch.

The company's public position: "Patronscan does not use facial recognition or collect biometric data." The company's marketing tagline, on its own website: "a bouncer that never forgets a face." The gap between those two sentences is not subtle.

A 2023 Illinois BIPA class action, Norman v. Servall Biometrics (Cook County Circuit Court, 2023-CH-02874), alleged that Guard+ captures and stores facial geometry — a biometric identifier under Illinois law — without written consent. Patronscan settled in June 2024 for $3,000, while disclosing that it spent more than $100,000 on legal defense. The settlement required no admission of liability and no change in practices.

The precise technical question — whether Guard+ stores biometric templates (mathematical facial encodings) or raw photographs — is unresolved in public record. That distinction is what Patronscan appears to be exploiting when it says "not facial recognition." The two descriptions can describe different technical implementations of the same intake screen.

Data retention is where the advertised picture diverges most sharply from the product reality. Patronscan tells California customers that patron data is deleted after 21 days. That applies to unflagged patrons. The 50,000-person flagged database is retained for up to five years; the 18 percent of flags that are networked across venues follow a patron to every bar on the platform. A 2018 audit of the Sacramento market, reported by OneZero, found average ban durations of 19 years and 62 percent of flags listed as "private" — with no disclosure to the flagged individual.

California's AB 2769, on the books since 2019, restricts what Patronscan may network-flag patrons for — fraud, abuse, and material misrepresentation only, a narrower category than the company allows in other jurisdictions. Even so, Sacramento police received Patronscan data 53 times since 2016, per OneZero's reporting, without warrants.

Canadian regulators reached the company before California did. The Privacy Commissioner of Canada, along with the Alberta and B.C. commissioners, issued a cease-and-desist letter to Servall Data Systems in January 2020 for displaying government logos on its materials, creating what the commissioner called "a misleading and false impression" of regulatory endorsement. The logos came down.

As of this writing, no California attorney general action against Patronscan's private-venue deployments has been initiated. The Dissent first reported in June that San Francisco's 2019 facial recognition ban applies only to government use, leaving private venues uncovered.

What remains unconfirmed: the specific details of Saturday's refusal — which bar, what the flag said, whether the patron was ever told why. Patronscan offers a 10-business-day dispute process; outcomes are not publicly disclosed. The company did not respond to a request for comment.