Privacy policy
Last updated: April 2026
What we collect
We collect only the data needed to deliver your passport photo:
- Your photo — captured in-browser, uploaded to our processing endpoint for AI compliance check and cropping.
- Your email — provided at checkout for receipts and download links.
- Billing details — processed by Stripe. We never see your full card number.
- Shipping address — only if you choose the printed product; handed to Gelato for local fulfillment.
- Technical logs — IP address, browser, and timestamp, for security and debugging (retained 30 days).
What we don't do
- We do not sell your data. Ever.
- We do not train AI models on your photos.
- We do not use ad-tracking cookies.
- We do not share data with third parties except the processors required to deliver your order (Stripe for payments, Anthropic for AI compliance, Gelato for printing, Resend for email, remove.bg for background replacement).
How long we keep it
- Processed photos: 30 days, then permanently deleted from our Blob storage.
- Order records (email, product, amount): 7 years, as required by tax law.
- Technical logs: 30 days.
Your rights (GDPR)
You have the right to access, correct, or delete your personal data, and to receive a copy of what we have about you. Email us at support@foto2pass.com and we'll reply within 7 days.
Cookies
We use a small number of essential cookies / local-storage entries to keep the checkout flow working (your processed image preview, language preference). We do not use analytics cookies or third-party tracking.
Contact
Privacy questions: support@foto2pass.com