Privacy Policy

PassportPhotoAI (passportphotoai.com) is a free online tool that generates compliant passport and visa photos. We are committed to protecting your privacy and processing your data transparently.

For privacy-related inquiries: privacy@passportphotoai.com

Photos you upload

When you upload a photo, it is sent to our servers exclusively for processing (cropping, resizing, background correction). The processed photo is returned to your browser. We do not store your photos anywhere — they are processed entirely in memory and immediately discarded after the response is sent.

The processed photo is held temporarily in your browser's memory (via Blob URL) for up to 1 hour, after which it is automatically revoked. We have no access to it once it has been sent to you.

Technical request data

Our servers log standard HTTP request metadata including your IP address, browser user-agent, and the country/type parameters you selected. This data is used solely for abuse prevention and service improvement. Logs are retained for a maximum of 30 days.

Analytics

We use Vercel Analytics, a privacy-first analytics tool that does not use cookies, does not track users across sites, and does not share data with third parties. It collects anonymized page-view metrics only. See Vercel's Analytics Privacy Policy.

For users in the European Economic Area (EEA), UK, or Switzerland:

• Legitimate interest — Processing images to provide the service you requested.
• Legitimate interest — IP logging for abuse prevention and security.
• Legitimate interest — Anonymized analytics to improve the service.

Your photos are never shared with any third-party service. They exist only in Vercel serverless function memory during processing (~1–3 seconds).

PassportPhotoAI does not use cookies for tracking, advertising, or analytics. Vercel Analytics uses a cookie-free approach. No consent banner is required.

Vercel's infrastructure is globally distributed. Your request may be processed on servers outside your country of residence, including servers in the United States. Vercel complies with GDPR Standard Contractual Clauses for international transfers.

You have the right to:

• Access — Request what personal data we hold about you.
• Erasure — Request deletion of your data (note: photos are never stored; IP logs are purged after 30 days automatically).
• Object — Object to processing based on legitimate interest.
• Portability — Request your data in a portable format.
• Complaint — Lodge a complaint with your local data protection authority.

To exercise these rights, email: privacy@passportphotoai.com

PassportPhotoAI is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data, contact us and we will take appropriate action.

We may update this policy occasionally. The “Last updated” date at the top reflects the most recent revision. Continued use of the service after changes constitutes acceptance.

For any privacy-related questions or requests:
privacy@passportphotoai.com