Trust & safety
Data security and privacy safeguards
Uploading an ID photo takes trust. We protect your photos and details with strong encryption, short-lived processing, automatic deletion and a strict no-data-selling policy.
- TLS encryption
- 256-bit
- Level 1 payments
- PCI-DSS
- Auto image purge
- 24 hours
- Data sold or shared
- 0%
Our 5 data security guarantees
How your data, payment and photos are protected at every step.
01
Bank-grade encryption
Every transfer between your device and our servers uses TLS 1.3. During processing, files are encrypted at rest with AES-256 in isolated, firewalled environments.
- TLS 1.3 for all uploads and downloads
- AES-256 encryption at rest during processing
- HTTPS-only with HSTS enforced
- Isolated processing with no public exposure
02
Payment security
Payments are handled by PCI-DSS Level 1 certified gateways such as Stripe. ICAO Standard Photo never receives or stores card numbers, CVVs or bank credentials.
- No card data stored on our servers
- Tokenised checkout handled by the payment provider
- Encrypted card and digital wallet processing
- Instant digital receipt and fraud protection
03
Temporary image retention
Images are kept only as long as needed for checks, background removal and sizing. Download links are cryptographically signed and expire after 60 minutes.
- Stored only until processing and download finish
- Signed download links that expire after 60 minutes
- No permanent cloud storage or archives
- Staff never view photos without your consent
04
Automatic permanent deletion
An automated process permanently deletes uploads, processed files and caches within 24 hours. Deleted files cannot be recovered by anyone, including our engineers.
- Automated deletion running around the clock
- Full cache purge within 24 hours
- Instant delete option on your preview screen
- No backup snapshots of biometric photos
05
No selling data, no AI training
Your photos, facial data, email address and personal information are never sold, rented or shared with advertisers, data brokers or marketers, and never used to train AI models.
- We sell photo processing, not your data
- No sharing with ad networks or data brokers
- No use of photos for AI or facial recognition training
- Compliant with GDPR (EU) and CCPA/CPRA (California)
How we compare
ICAO Standard Photo versus typical unverified online photo tools.
| Feature | ICAO Standard Photo | Typical alternatives |
|---|---|---|
| Encryption | TLS 1.3 + AES-256 | Basic SSL or none |
| Photo deletion | Within 24 hours, or instantly | Stored indefinitely |
| Card handling | Never stored (tokenised) | Unclear |
| Selling user data | Never | Often used for ads |
| AI training on photos | Never | Unclear or permitted |
Security questions
Is it safe to upload my passport or ID photo?
Yes. Photos are sent over encrypted connections, held only while they are checked and processed, and permanently deleted within 24 hours.
Do you store my card details?
No. Payments are processed by a PCI-DSS Level 1 certified provider. Your card details are encrypted by the provider and never reach our servers.
How quickly are my photos deleted?
Uploads and processed photo sheets are deleted automatically within 24 hours. You can also delete them instantly from the preview screen after downloading.
Can your staff see my photo?
No. Processing is fully automated. Our team only looks at a photo if you ask us to investigate a processing problem.
Will my photo be used to train AI or facial recognition?
Never. We do not use customer photos for AI training, datasets or facial recognition.
Need help with your data?
For security questions, urgent deletion or GDPR and CCPA requests, email support@icao-standard-photo.online.