Privacy Policy

1. Overview

IDpho (“IDpho”, “we”, “us”) is a one-off tool: you pick a country and document type, upload a portrait, we reformat it to the published photo specification, and we email the result to you. This policy explains exactly what we do with the information involved in that.

There are no user accounts on IDpho. You do not create a profile, we do not build one for you, and we do not keep a library of your past orders. Using the Service means you accept this policy and our Terms of Service.

2. What We Collect

• The photo you upload — either a file you choose or a still captured from your webcam. Webcam frames are captured in your browser; nothing is sent to us until you continue to the next step.
• Your email address — so we can deliver the finished photo and so Stripe can send you a receipt.
• Order details — which country and document type you selected, and which package you bought.
• Your IP address — used to rate-limit our API so one visitor cannot overwhelm it. We do not use it to profile you.
• Aggregate page analytics — see Section 7.

We never see or receive your card details. Payment is handled entirely by Stripe on Stripe’s own checkout page.

3. How Your Photo Is Processed

Your photo is uploaded to our API, held in server memory while it is processed, and then discarded. We do not write it to disk, to a database, or to any file or object storage, and we do not keep a copy after your order is delivered. Because nothing is stored, we cannot retrieve a past order for you — if you need the photo again, you will need to run it through the Service again.

Processing happens on our own servers using open-source models that run locally: face and head detection to position and size you correctly, and background removal to produce the required plain background. Your photo is not sent to any third-party AI service, and it is never used to train or fine-tune any model. We do not modify your face or features — only the background, cropping, rotation, and output dimensions.

Uploads are limited to JPEG or PNG files up to 10 MB. Your photo is sent to our API twice during a normal order: once to generate the free watermarked preview, and once after payment to produce the final watermark-free file.

4. Data Stored In Your Own Browser

While you are being redirected to Stripe and back, your browser temporarily holds your order in local storage so it survives the round trip:

• IndexedDB holds your original photo, email address, and selections until checkout completes. It is cleared once your photo has been sent, and also if you cancel checkout or an error occurs.
• Session storage holds a short summary of the completed order (no photo) so the confirmation page can display it. It is cleared when you close the tab.

This data lives on your device, not on our servers. Clearing your browser data removes it.

5. Email Delivery

We deliver your finished photo as an attachment to an email sent through Resend, our transactional email provider. Your email address, the photo, and the print template (if you bought it) pass through Resend’s infrastructure.

That delivery email may also include an optional link to leave a review. Clicking the link is up to you; we do not send your email address to our review provider unless you open their form and choose to submit one.

Please understand what this means: once an email leaves our systems, copies of it and its attachments can persist in places we do not control — Resend’s delivery logs, intermediate mail servers, and your own inbox and its backups. We cannot delete those copies, and the retention period for each is set by whoever operates it. If you need the photo gone, delete the email from your own mailbox.

6. Reviews

Reviews are optional. If you submit one through the form linked from your delivery email, the review text and whatever name or email address the form asks for are sent to Senja, which hosts the form and stores the submission under its own terms and privacy policy. We may publish approved reviews on the IDpho homepage.

The homepage loads a Senja script so approved reviews can be displayed. That script runs in your browser and may use storage or similar mechanisms that Senja controls; we do not use it for advertising.

7. Service Providers

We are a small operation and we rely on a handful of providers to run the Service. Each is governed by its own terms and privacy policy:

• Stripe — payment processing. Stripe collects your payment details directly and keeps its own record of the transaction, including your email address, for its own legal and accounting purposes.
• Resend — transactional email, as described in Section 5.
• Senja — optional review collection and display, as described in Section 6.
• Vercel — hosting for this website, and Vercel Analytics, which counts page views and referrers in aggregate. It does not use cookies and does not identify individual visitors.
• Railway — hosting for the photo-processing API.
• Google Fonts — the typefaces used on this site are served by Google, which means your browser makes a request to Google when you load a page.

Our hosting providers keep standard server access logs, which typically include IP addresses and request details, under their own retention schedules.

8. Cookies

IDpho itself does not set cookies for advertising or cross-site tracking, which is why you do not see a cookie banner here. The browser storage described in Section 4 is functional only — the checkout flow cannot work without it. Third-party scripts we load for the Service, including Senja’s review widget on the homepage, may use their own cookies or similar storage under their policies.

9. Security and International Transfers

All traffic to and from the Service is encrypted in transit, and we keep the amount of data we hold deliberately small. That said, no internet service can promise perfect security, and you upload your photo at your own risk.

Our providers operate globally, so your information may be processed in a country other than the one you live in, including the United States. By using the Service you consent to that.

10. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the use of personal information we hold about you. In practice we hold very little: your photo is already gone, and what remains is the transaction record held by Stripe, the delivery record held by Resend, and — if you chose to leave a review — the submission held by Senja.

Email us at contact@idpho.com and we will do what we can, and tell you plainly when something is outside our control — for example, we cannot delete an email already sitting in your inbox, or a payment record Stripe is legally required to keep.

11. Children

IDpho is intended for adults. Children’s photos are a normal use of the Service — infant passport photos, for example — but the order must be placed by a parent or guardian, who is responsible for the upload and the consent behind it. We do not knowingly accept orders placed by children themselves.

12. Changes

If we change how we handle data, we will update this page and the date at the top. Continuing to use the Service after a change means you accept the updated policy.

13. Contact

Questions about this policy? Email contact@idpho.com or use our contact page.