Privacy Policy (AI Edit product)

Effective Date: August 18th 2026
Company: DACONTEXT, INC.
Service Name: Passport Photo Rescue
Contact: support@inbound.passport-photo-app.dacontext.ai

This Privacy Policy explains how DACONTEXT, INC. ("DACONTEXT," "we," "us," or "our") collects, uses, stores, shares, and deletes information when you use Passport Photo Rescue, including our website, mobile web application, upload tools, photo analysis tools, photo formatting tools, downloadable files, print-ready files, account features, payment flows, and related services (collectively, the "Service").

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

1. Summary

We help users prepare passport-style and identity-document photos. Because photos, face geometry, and identity-document-related images can be sensitive, we try to collect only what we need to provide the Service.

Key points:

We do not sell your personal information.
We do not sell your photos.
We do not use your photos to identify you.
We do not use your photos for advertising targeting.
We do not share your photos with advertisers or data brokers.
We do not share your personal information for cross-context behavioral advertising.
We may use third-party service providers, including cloud, payment, analytics, and AI/LLM providers, to operate the Service.
We may process photos and related data using AI or LLM providers for compliance analysis, but we do not authorize those providers to use your photos or personal information for their own training, advertising, resale, profiling, or independent business purposes.
For the AI Edit product, we may send photos to AI or LLM providers for generative image editing, background replacement, or other appearance-altering edits needed to operate the Service.
We do not intentionally store your photos or personal data with AI or LLM providers as a permanent storage location.
When you complete a payment, we create an account or saved user record so you can re-access your generated files.
Paid generated files are available for download for 1 year after purchase, unless you delete your account or request deletion earlier.
Temporary uploads, previews, and unpaid generated clean outputs are generally deleted within 7 days.
You may delete your account and request deletion of your personal information, including saved generated files, subject to legal, payment, tax, fraud-prevention, security, and dispute-resolution exceptions.
We use cookie and analytics controls, including consent-based deployment of non-essential analytics where required by law.
We do not use video session replays or screen recording tools to record photo upload, preview, processing, formatting, or download screens.

2. Information We Collect

2.1 Photos and Uploaded Content

When you use the Service, you may upload photos or images. These may include passport-style photos, photos of adults, photos of babies, children, or minors, background images or surrounding environment, image metadata if included in the file, original uploaded images, processed images, cropped images, generated images, output files, and print-ready 4x6 sheets.

2.2 Face Geometry and Image-Derived Information

To provide photo validation and formatting, we may analyze the uploaded photo to detect or estimate whether a face is present, number of faces, facial landmarks, head size, head position, eye position, face alignment, crop and framing, background characteristics, lighting, shadows, blur, expression indicators, pose indicators, and other visible image characteristics needed to provide the Service.

Some laws may treat face geometry, facial scans, facial landmarks, or similar image-derived information as biometric information. We process this information only for the purposes described in this Privacy Policy.

We do not use face geometry to identify you by name or to verify your identity against a database.

2.3 Account, Contact, and Order Information

We may collect email address, account login information, magic-link authentication data, saved user record information, order identifiers, payment status, purchase history, download or re-access information, refund request information, customer support messages, uploaded rejection notices or related documentation, and communications with us.

When you complete a payment, we may create an account or saved user record associated with your email address and purchase. This account allows you to re-access purchased outputs for 1 year after purchase, manage saved files, request support, and request deletion.

2.4 Payment Information

Payments may be processed by third-party payment providers, such as Stripe. We may receive limited payment-related information, such as payment status, transaction ID, amount paid, purchase date, refund status, chargeback status, billing email, and limited card information such as brand and last four digits if provided by the payment processor.

We do not store full credit card numbers.

2.5 Device, Usage, and Technical Information

We may collect technical and usage information, including IP address, device type, browser type, operating system, referring pages, pages viewed, session events, upload started/completed events, analysis completed events, checkout started/completed events, payment completed events, account created events, output downloaded events, account deletion events, errors and crash logs, approximate location derived from IP address, timestamps, and similar diagnostic information.

2.6 Cookies and Similar Technologies

We may use cookies, local storage, session storage, pixels, or similar technologies to keep the Service working, remember session state, support login, support account access, prevent fraud, understand usage, measure conversion, and improve reliability.

We do not use your uploaded photos for advertising targeting.

Where required by applicable law, we request your explicit consent through an interactive cookie preference interface before deploying non-essential analytics, telemetry, or marketing cookies on your device.

You may reject or disable non-essential cookies where the Service provides that choice. Essential cookies and similar technologies may still be used where necessary to operate the Service, provide security, remember your privacy choices, process payments, maintain sessions, or deliver features you requested.

3. How We Use Information

3.1 Provide the Service

We use your information to receive uploaded photos, analyze photo characteristics, detect likely compliance issues, provide retake guidance, crop, resize, align, and format photos, generate digital 2x2 outputs, generate print-ready 4x6 sheets, create an account or saved user record after payment, save generated files after payment for 1-year re-access, allow downloads and re-downloads, provide customer support, process refunds, process deletion requests, and maintain access to purchased outputs where applicable.

3.2 Account Creation After Payment; Saved Files

You may use some parts of the Service before creating an account, such as uploading a photo, previewing analysis, or reviewing a limited output preview.

When you complete a payment, we create an account or saved user record associated with the email address used for purchase. This allows us to deliver your purchased files, let you re-access generated files for 1 year after purchase, provide support, process refunds, maintain purchase history, prevent fraud or abuse, and comply with payment, tax, accounting, and legal obligations.

After payment, we may save the generated files associated with your purchase, including the final digital photo, final print-ready 4x6 sheet, related crop or formatting settings, order information, and download or re-access information.

Original uploaded photos are short-lived and are not the long-term download artifact. Paid re-access relies on generated output files, not the original upload.

You may delete your account or request deletion of your data as described in this Privacy Policy.

3.3 Face Geometry and Biometric Processing

We use face geometry and related image-derived information to detect the face, estimate head size and position, check framing and crop, assess likely compliance issues, generate output files, support quality control, investigate errors, prevent abuse or fraud, and improve the Service.

We do not use this information to identify you by name, create a face-recognition database, or track you across unrelated services.

3.4 AI, LLM, and Automated Processing

We may use AI, machine-learning, computer-vision, image-processing, and LLM providers to help analyze photos and operate the Service. This may include sending an uploaded photo, cropped or formatted image, image-derived measurements, user instructions, validation results, or related context to an AI or LLM provider for compliance analysis.

For the AI Edit product, we may send photos to AI or LLM providers for generative image editing, background replacement, subject reconstruction, or other appearance-altering edits needed to operate the Service.

We use these providers as service providers or processors. We do not authorize them to sell your data, use your photos for advertising, use your photos to train their general models, create a profile about you for their own purposes, retain your data for their own independent use, or disclose your data except as needed to provide services to us or comply with law.

We do not intentionally store your data with LLM providers as a permanent record. Data sent to an AI or LLM provider may be processed transiently or retained for a limited period according to the provider's service terms, security controls, and legal obligations. We seek to configure provider settings, where available, to prevent model training and minimize retention.

3.5 Internal Product Quality Monitoring

We monitor product quality using customer data internally. This may include reviewing uploaded photos, processed outputs, validation results, failure cases, support requests, refund requests, rejection reports, and user feedback to understand whether the Service is working correctly.

This quality monitoring is done internally by DACONTEXT personnel or authorized contractors. We do not sell, rent, or disclose quality-monitoring data to advertisers, data brokers, or unrelated third parties. Where practical, we limit access to customer data, use only the data needed for review, and avoid unnecessary exposure of sensitive images.

3.6 Security, Fraud Prevention, and Legal Compliance

We may use information to prevent abuse, detect fraud, protect accounts, secure uploaded files, monitor suspicious activity, enforce our Terms of Service, prevent unauthorized access, debug errors, comply with applicable law, respond to lawful requests, enforce legal rights, defend claims, process tax/accounting/financial records, comply with payment/refund/chargeback obligations, and maintain legally required records.

4. How We Share Information

We do not sell your personal information. We do not sell your photos. We do not share your photos with advertisers or data brokers.

We may share information only in limited circumstances:

Service providers: cloud hosting providers, image storage providers, AI, LLM, and computer-vision providers, payment processors, authentication providers, analytics providers, error monitoring providers, email providers, customer support tools, security providers, and professional advisors.
Payment processors: if you make a purchase, payment information is processed by our payment provider according to its own privacy policy and terms.
Printing and retail fulfillment: if the Service links you to, redirects you to, or integrates with a third-party print provider or retailer, that provider may collect information directly from you.
Legal, safety, and rights protection: we may disclose information if reasonably necessary to comply with law, respond to lawful requests, enforce our Terms, protect rights or safety, investigate fraud or security issues, prevent harm, or defend legal claims.
Business transfers: information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable law.
With your direction or consent: we may share information when you direct us to do so or consent to the sharing.

5. No Sale or Cross-Context Behavioral Advertising

We do not sell your personal information, photos, face geometry, biometric information, uploaded images, or output files.

We do not share your personal information for cross-context behavioral advertising as that term is used under California privacy law.

We do not allow advertisers or data brokers to access your uploaded photos.

6. Data Retention

We keep information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Because the Service handles sensitive photos, we aim to minimize unnecessary retention while still allowing paid users to re-access purchased files for 1 year.

6.1 Before Payment

For users who upload a photo but do not complete a purchase, we generally treat uploads, previews, and generated clean outputs as temporary session data.

Unless retention is needed for security, debugging, fraud prevention, abuse prevention, or legal compliance, we aim to delete:

uploaded photos within 7 days;
unpaid generated previews within 7 days;
unpaid generated clean outputs within 7 days; and
abandoned session records and related stage records within 7 days.

6.2 After Payment

When you complete a payment, we create an account or saved user record associated with your purchase.

For paid users, we retain generated files so you can re-access, re-download, or reprint them for 1 year after purchase, unless you delete your account or request deletion earlier.

Paid generated files may include final 2x2 digital photo files, final 4x6 print-ready sheets, order records, download records, saved output references, and related support records.

After the 1-year download window ends, generated files and account-access records for those downloads may be deleted or become unavailable. Account, order, payment, refund, tax, and transaction records may remain as described below.

6.3 Original Uploaded Photos

Original uploaded photos are retained for a shorter period than paid generated files.

Unless needed for support, refund review, reprocessing, fraud prevention, security, legal compliance, dispute resolution, or internal quality review, we aim to delete original uploaded photos within 7 days after upload.

6.4 Face Geometry and Biometric Information

We retain face geometry, facial landmark data, biometric information where applicable, and image-derived measurements only as long as reasonably necessary to provide the Service, support the user, maintain security, perform internal quality review, comply with law, or resolve disputes.

Unless longer retention is required for support, refund review, fraud prevention, legal compliance, dispute resolution, or account/order access, we aim to delete or de-identify face geometry and related image-derived biometric information when the related temporary session expires, when account deletion is completed, or when the paid 1-year download window ends, depending on the context and legal exceptions.

6.5 Account, Order, and Transaction Records

We may retain account, order, payment, refund, tax, and transaction records for as long as necessary for business, tax, accounting, legal, dispute-resolution, and compliance purposes.

These records may remain even after account deletion where retention is required or permitted by law.

6.6 Logs and Analytics

Technical logs, diagnostic information, and analytics data may be retained for security, debugging, fraud prevention, abuse prevention, and product improvement. Where practical, we aggregate, de-identify, or minimize logs.

Our use of product analytics and telemetry services is restricted to event-based tracking, system performance logs, error diagnostics, conversion metrics, and button-click or workflow-completion metrics.

We do not use video session replays, screen recording tools, or third-party tracking scripts to capture, view, or record the visual contents of your screen or the raw images being processed within the photo formatting pipeline.

We do not permit analytics or telemetry tools to record uploaded photos, generated images, biometric information, face geometry, or the visual contents of photo upload, preview, processing, formatting, or download screens.

7. Account Deletion and Right to Be Forgotten

You may request deletion of your account and personal information by contacting support@inbound.passport-photo-app.dacontext.ai. You may also use any account deletion feature we make available inside the Service.

When you request account deletion, we will delete or de-identify personal information associated with your account, including saved generated files, uploaded photos, and related image-derived data, unless retention is required or permitted by law.

Account deletion generally includes deletion of your account profile or saved user record, saved generated photo files, saved print-ready files, original uploaded photos where still retained, face geometry and image-derived biometric information where still retained, non-essential support records, and non-essential session records linked to your account.

Deleting your account removes paid generated files immediately, even if they are still inside the 1-year download window. After deletion, you may lose access to purchased files, downloads, order history, and support history. You should download any files you want to keep before deleting your account.

However, we may retain limited information where necessary to complete a transaction you requested, provide a refund or support response, detect security incidents, prevent fraud or abuse, debug errors, comply with tax/accounting/payment/chargeback/legal obligations, resolve disputes, enforce our Terms, maintain records of deletion requests, or exercise or defend legal rights.

If we retain information after an account deletion request, we will retain only the information reasonably necessary for the applicable purpose and will not use it for unrelated purposes.

We may need to verify your identity or authority before completing a deletion request.

8. Children's Privacy

The Service is not intended to be used directly by minors. A parent, legal guardian, or authorized adult may use the Service to prepare a photo of a baby, child, or minor.

By uploading a child's photo, you represent that you are the child's parent or legal guardian, or that you otherwise have the legal authority and consent required to upload and process the child's photo.

We do not knowingly allow minors to create accounts, make purchases, or use the Service directly. If you believe a minor has used the Service directly or provided personal information without appropriate authorization, contact us.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. These measures may include private storage for uploaded files, restricted access controls, secure upload and download mechanisms, encryption in transit, access logging, limited internal access, vendor controls, deletion or lifecycle policies, and security monitoring.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

10. International Users

The Service is intended primarily for users in the United States. If you access the Service from outside the United States, your information may be transferred to, processed in, and stored in the United States or other countries where we or our service providers operate.

11. State Privacy Rights

Depending on where you live, you may have privacy rights under state law. These may include the right to know what personal information we collect, access personal information, correct inaccurate personal information, request deletion, obtain a copy of personal information, opt out of sale of personal information, opt out of sharing for cross-context behavioral advertising, limit use of sensitive personal information where applicable, withdraw consent for certain processing where applicable, and appeal a denied privacy request where required by law.

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

To exercise privacy rights, contact support@inbound.passport-photo-app.dacontext.ai. We may need to verify your identity before responding.

12. California Privacy Notice

If you are a California resident, this section provides additional information under California privacy law.

12.1 Categories of Personal Information We May Collect

We may collect identifiers, customer records, commercial information, internet or electronic activity, approximate geolocation information, audio/electronic/visual or similar information such as uploaded photos and generated images, biometric information where applicable, inferences related to photo quality or likely compliance status, and sensitive personal information where applicable.

12.2 Sources of Personal Information

We collect information from you, your device, your uploaded photos, your interactions with the Service, payment providers, service providers, and support communications.

12.3 Purposes for Collection

We collect and use personal information for providing the Service, creating accounts after payment, saving generated files for 1-year re-access, photo analysis, compliance checks, output generation, payments, refunds, customer support, internal quality monitoring, security, fraud prevention, analytics, legal compliance, deletion requests, and enforcing our Terms.

12.4 Disclosure of Personal Information

We may disclose personal information to service providers, contractors, payment processors, cloud providers, AI/LLM providers, analytics providers, security providers, professional advisors, legal authorities, or business transaction parties as described in this Privacy Policy.

12.5 Sale and Sharing

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

12.6 Sensitive Personal Information

We use sensitive personal information only as reasonably necessary to provide the Service, perform requested processing, maintain security, prevent fraud, provide support, improve quality internally, process deletion requests, and comply with law.

We do not use sensitive personal information to infer characteristics about you for advertising purposes.

13. Global Privacy Control and Automated Opt-Out Signals

We honor automated browser-based opt-out preference signals where required by applicable law and technically feasible, including the Global Privacy Control ("GPC") signal.

If our system detects a valid GPC signal from your browser, we will treat it as a request to opt out of sale or sharing of personal information where applicable. Because we do not sell personal information or share personal information for cross-context behavioral advertising, the main effect of this signal is that we automatically opt you out of non-essential analytics and marketing cookies for that browser session where technically feasible.

GPC and similar signals may be browser-specific or device-specific. If you use a different browser, device, or privacy setting, you may need to enable the signal again.

14. Biometric Information Notice and Consent

Some laws may treat face geometry, facial landmarks, or facial scans derived from uploaded photos as biometric identifiers or biometric information.

Before your photograph is uploaded for server-side processing, we present a consent notice near the upload action. By clicking the designated confirmation button to upload and process your photograph, you provide your explicit, informed, and written consent to our collection, processing, use, storage, and deletion of face geometry and related image-derived information for the purposes described in this Privacy Policy.

Before that confirmation action, the photo may remain on your device and may not be sent to our servers for biometric or face-geometry analysis.

If you do not consent to this processing, do not click the upload/processing confirmation button and do not use the photo-processing features of the Service.

14.1 Purpose

We use face geometry and related image-derived information to detect whether a face is present, estimate head size, determine face position, align crop and framing, check likely compliance, generate output files, provide support, review quality internally, prevent fraud or abuse, and improve reliability.

14.2 Retention and Destruction

Unless retention is needed for support, refund review, fraud prevention, legal compliance, dispute resolution, or account/order access, we aim to delete or de-identify face geometry and related biometric information when the related temporary session expires, when account deletion is completed, or when the paid 1-year download window ends, depending on context and legal exceptions.

In all cases, we intend to permanently destroy biometric information when the initial purpose for collection has been satisfied, or within the period required by applicable law, unless a legal exception applies.

14.3 No Sale of Biometric Information

We do not sell, lease, trade, or otherwise profit from biometric information.

14.4 No Biometric Identification Database

We do not use uploaded photos or face geometry to build a biometric identification database. We do not compare your face geometry against other users to identify you.

15. AI and LLM Provider Processing

We may use third-party AI, LLM, computer-vision, or image-processing providers to operate parts of the Service. Information sent to these providers may include uploaded photos, cropped or formatted images, image-derived measurements, compliance check results, user-selected document type, user instructions, support context, and technical metadata needed to process the request.

We use these providers to analyze photos and operate the Service on our behalf. For the AI Edit product, we may send photos to these providers for generative image editing, background replacement, subject reconstruction, or other appearance-altering edits needed to provide the Service. We do not authorize these providers to sell your data, train their general-purpose models on your data, use your data for advertising, identify you, profile you for their own purposes, or retain your data for their own independent business purposes.

Where available, we configure AI and LLM providers to disable training on customer data and minimize retention.

16. Internal Human Review

In some cases, authorized DACONTEXT personnel or contractors may review uploaded photos, outputs, validation results, support messages, or refund-related materials to provide support, investigate bugs, evaluate refund requests, improve product quality, check whether outputs are working correctly, review edge cases, improve internal procedures, or prevent fraud or abuse.

Internal review is limited to people who need access for legitimate business purposes. We do not share internal review materials with advertisers, data brokers, or unrelated third parties.

17. De-Identified, Aggregated, and Statistical Data

We may create de-identified, aggregated, or statistical information from Service usage, such as upload completion rates, common rejection reasons, analysis failure rates, refund rates, checkout conversion, output download rates, account deletion rates, technical error rates, and model or heuristic performance.

We may use this information to improve the Service, monitor quality, and make business decisions. We will not attempt to re-identify de-identified data except as permitted by law, such as to test whether de-identification is effective.

18. Your Choices

You may choose not to upload a photo. If you do not upload a photo, we may not be able to provide the Service.

You may request deletion of your data by contacting us. You may delete your account using any account deletion feature we make available.

You may disable cookies or browser storage through your browser settings, but some Service features may not work correctly.

You may choose not to proceed with purchase after using the preview or analysis features.

You may reject or disable non-essential analytics, telemetry, or marketing cookies where the Service provides that option.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a new effective date. If we make material changes, we may provide additional notice where required by law.

Your continued use of the Service after an updated Privacy Policy is posted means you accept the updated Privacy Policy.

20. Contact Us

For privacy questions, deletion requests, account deletion requests, support requests, or concerns, contact:

DACONTEXT, INC.
Email: support@inbound.passport-photo-app.dacontext.ai