Privacy Policy

Who we are

Visa Photo Pass (visaphotopass.com) is operated by NEXTLINE YAZILIM LİMİTED ŞİRKETİ, a company registered in Türkiye ('we', the data controller). For anything in this policy: privacy@visaphotopass.com. This policy is written to meet the transparency requirements of the EU GDPR and Türkiye's KVKK.

The short version

The free photo check runs entirely in your browser. Your photo is processed on your own device — it is not uploaded, streamed, or sent anywhere while you preview and check it.

Only if you decide to buy the clean file does your photo leave your device: at the moment of checkout it is uploaded over an encrypted connection so our server can render your compliant files. Those files — and your original — are automatically deleted within 24 hours (the original within at most 72 hours, kept slightly longer only so you can use your one free regeneration).

How your photo is processed (including AI)

Free check: an AI background-removal model and a face-landmark model run locally inside your browser. They measure geometry only — head height, eye position, background uniformity — to compare your photo against the published government spec. During this step your photo never leaves your device.

Paid render: your photo is uploaded encrypted to our servers in the EU and processed by our image-processing provider fal.ai (AI background removal), then sized and compressed by our own software to the portal's specification.

We do not perform face recognition or identification of any kind, we make no decisions about you — the software only formats your photo — and neither we nor our providers use your photos to train AI models.

What we collect, why, and on what legal basis

If you only use the free check: nothing. No account, no tracking cookies, no photo upload.

If you buy: your email address (collected by our payment provider Paddle at checkout; used to deliver your download link — legal basis: performance of a contract), your uploaded photo and the rendered files (to produce and deliver your order — performance of a contract), and the technical measurements of your photo (kept as evidence for our money-back policy — legitimate interest in preventing fraud and handling disputes).

Payments are processed by Paddle.com as our Merchant of Record — we never see or store your card details.

Who processes your data (subprocessors)

Vercel (website hosting, EU region Frankfurt) · Supabase (order data and photo file storage, EU Frankfurt) · fal.ai (AI background removal for paid renders) · Paddle (payments, as Merchant of Record) · Resend (delivery emails) · Umami (cookie-free, anonymous analytics). Each acts under a data-processing agreement.

Primary storage is in the EU. Some providers (fal.ai, Resend) may process data on infrastructure in the United States; such transfers rely on their standard contractual clauses (SCCs).

How long we keep things

Rendered files: deleted within 24 hours of purchase. Your original photo: deleted within at most 72 hours (kept only for the one free regeneration). The order record (email, order id, measurements — not the photo) is retained as required for accounting and refund evidence.

Your rights

Under the GDPR and KVKK you can request access to, correction of, or deletion of your data, restriction of or objection to processing, and a portable copy. Email privacy@visaphotopass.com with your order ID — though note your photo self-deletes within 24–72 hours regardless. You also have the right to complain to your local data-protection authority.

What we never do

We never run face recognition or identification. We never sell or share your photo or email. We never use your photos for advertising or AI training. We never keep your photo beyond the deletion schedule.

Analytics

We use Umami, a cookie-free analytics tool that stores no personal data and requires no consent banner. It tells us which pages are used — not who you are.

Changes and contact

If this policy changes materially, the date above changes with it. Questions about your data: privacy@visaphotopass.com.