Privacy Policy

ICAO Standard Photo (“we”, “us” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use and protect your information when you use our photo validation and processing service at icao-standard-photo.online.

Photos you upload

• Photos are uploaded solely for validation and processing.
• We analyse photos for compliance with official government specifications, including the US, UK, India and the Schengen area.
• Photos are never used for AI training, marketing or any other purpose.

Payment information

• Payments are handled by our third-party payment processor.
• We never store card numbers or full payment details on our servers.
• We receive only a transaction confirmation and payment status.

Usage data

• Browser type, device type and operating system.
• Pages visited and features used, in anonymised form.
• IP address, used only for security and fraud prevention.

Our photo privacy commitments:

• Auto-deletion: all uploaded photos are permanently deleted after 24 hours.
• Expiring links: download links are signed and expire after 60 minutes.
• No permanent storage: processed images are not kept after download.
• No sharing: photos are never shared with third parties.
• No AI training: photos are never used for machine learning.

We use essential cookies to keep your session working while your photo is processed. We may also use analytics cookies to understand how the service is used. You can turn off non-essential cookies in your browser settings.

We comply with the General Data Protection Regulation (GDPR) for EU residents and the California Consumer Privacy Act (CCPA) for California residents. You have the right to:

• Access a copy of the personal data we hold about you.
• Delete all of your data immediately and completely.
• Port your data in a machine-readable format.
• Object to any processing of your personal data.
• Correct inaccurate personal data.

To use any of these rights, email support@icao-standard-photo.online.

We use industry-standard safeguards, including encrypted connections (TLS), secure cloud infrastructure and access controls. Photo transfers are encrypted in transit and at rest. Read more on our data security page.

Some providers process limited data on our behalf: payment processors (for transactions), cloud hosting providers (for photo processing) and analytics services (for anonymous usage statistics). We only work with providers that meet GDPR requirements.

Our service is not directed to children under 13. A parent or guardian should use the service on behalf of a minor who needs a passport or visa photo.

We may update this policy from time to time. We will post a notice on our website about significant changes. Continuing to use the service after a change means you accept the updated policy.

For privacy questions, data deletion requests or GDPR and CCPA enquiries, email support@icao-standard-photo.online.