Privacy Policy

Last updated: [DATE]

TEMPLATE — replace everything in [brackets] and have it reviewed by a lawyer for the countries you sell in (e.g. GDPR in the EU/UK, CCPA in California) before going live.

This policy explains how [COMPANY NAME] ("we", "us"), operator of [WEBSITE DOMAIN], handles information when you use our ID photo service. Contact: [SUPPORT EMAIL], [COMPANY ADDRESS].

1. Your photos never leave your device

Face detection, background removal, cropping and all requirement checks run inside your web browser. Your photos are not uploaded to our servers or to anyone else, and we cannot see them. The finished photos you buy are created on your device.

2. Information we do process

• Payments. Payments are handled by Stripe, Inc. You enter your card or wallet details directly into Stripe's secure form; we never receive your full card number. Stripe shares with us the payment status, amount, date, the document type you chose, and the contact details you give Stripe (such as your email address, for the receipt). See Stripe's Privacy Policy.
• Technical data. Like any website, our hosting provider ([HOSTING PROVIDER, e.g. Cloudflare, Inc.]) processes your IP address and basic request data to deliver the site and protect it from abuse.
• Software libraries. To run the photo tools in your browser, your browser downloads open-source software and AI models from public content networks (jsDelivr, Google Cloud Storage and Hugging Face). These providers receive your IP address when you download those files. No photo data is sent to them.
• Support emails. If you email us, we keep the message and your email address to answer you.

3. Information stored on your device

Purchased photos are saved in your browser's local storage on your device so you can download them again under "My orders". You can delete them at any time by clearing your browser's site data. We do not use advertising or tracking cookies. Stripe may set cookies needed for fraud prevention during checkout.

4. Why we process data (legal bases)

• To provide the service you buy and process your payment (performance of a contract).
• To keep accounting and tax records (legal obligation).
• To keep the site secure and prevent fraud (legitimate interests).

5. Retention

We keep payment and order records for [NUMBER] years to meet accounting and tax obligations, and support emails for up to [NUMBER] months after the conversation ends.

6. Sharing

We do not sell your personal information. We share it only with the service providers listed above, and when required by law.

7. International transfers

Our providers may process data in the United States and other countries. Where required, transfers are protected by safeguards such as the EU Standard Contractual Clauses.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict processing, and to complain to your local data protection authority. To exercise these rights, email [SUPPORT EMAIL].

9. Children

Parents and guardians may use the service to create photos of their children. The service is not directed at children to use on their own.

10. Changes

We may update this policy. The date at the top shows the latest version.