Privacy Policy

What we collect

• Email address — to deliver your order and send transactional emails.
• Uploaded photos — to process and generate your passport photo.
• Delivery address (Printed & Ready orders) — store selection only; we do not store home addresses.
• Payment information — handled entirely by Stripe. We never see or store card numbers.

Photo retention

All uploaded and processed photos are deleted within 48 hours of your order being fulfilled. We do not retain photos for longer than necessary to complete your order.

How we use your data

• Processing your passport photo and checking compliance.
• Delivering your digital download or coordinating store pickup.
• Sending transactional emails related to your order.

We do not sell your personal data to third parties. We do not send marketing emails without your consent.

Third-party services

• Stripe — payment processing. No card data touches our servers.
• Supabase — database and file storage (US-based).
• AWS Rekognition — face detection for compliance checking. Images are not retained by AWS after processing.
• PhotoRoom — background removal. Images are processed and not retained.
• Resend — transactional email delivery.

Your rights (GDPR & CCPA)

You have the right to request access to, correction of, or deletion of your personal data at any time. To exercise these rights, email us at privacy@expresspassportphoto.com. We will respond within 30 days.

California residents: we do not sell personal information as defined under the CCPA.

Contact

Privacy questions: privacy@expresspassportphoto.com