Privacy Policy
Last updated: September 30, 2026
Our privacy commitment
Passport and identity photographs are sensitive. PassportPhoto99 limits processing to providing, securing and improving the service. We do not sell identity photos, use them for advertising profiles or use them to train artificial-intelligence models.
Information we process
Depending on the feature used, information may include an uploaded or captured photograph, selected country and document, crop and quality settings, delivery email, order reference, payment status, business-account details, device information and security logs. Payment card details are processed by the payment provider and are not stored by PassportPhoto99.
Camera, photos and mobile permissions
The website and mobile apps request camera or photo-library access only when you choose those features. Access can be removed in your browser or device settings. Location, contacts and microphone access are not required for the standard photo workflow.
Purpose and legal basis
We process information to perform the requested service, protect accounts, prevent fraud, comply with legal obligations and pursue legitimate interests in service security and reliability. Where consent is legally required, it can be withdrawn without affecting earlier lawful processing.
If you choose to receive offers, we record your name, email and the time and wording version of your permission with your order. This is separate from photo storage. Contact support to withdraw permission. Delivery email alone does not sign you up for offers.
Ratings and messages are private feedback linked to your order and follow its retention period. A shared reward link grants one free photo; it does not grant access to your original photo or email address. Share only the QR code or reward link.
Retention and deletion
Photos are designed for temporary processing. The active service will disclose its retention period before upload and automatically remove photos after that period. Order, billing, fraud-prevention and audit records may be retained longer where reasonably required by law. You may request early deletion through the data-deletion page.
Service providers and transfers
We may use hosting, encrypted storage, payment, email, monitoring and customer-support providers under contractual safeguards. If information is processed outside your state or country, appropriate legal transfer protections will be used where required.
Children
A parent, guardian or properly authorized business must handle photographs of minors. The service is not directed to children creating accounts independently. Contact us if you believe a child’s information was submitted without proper authorization.
Your privacy rights
Depending on where you live, you may request access, correction, deletion, restriction, portability or an appeal, and may object to certain processing. We do not discriminate for exercising applicable privacy rights. Email [email protected] with your order reference, but do not attach the photograph.
U.S. state privacy choices
Cookie and tracking choices are available in every state. Use the Do Not Sell or Share My Personal Information control in the footer, or enable Global Privacy Control. Access, correction, deletion, portability, authorized-agent and appeal rights depend on applicable law. To appeal a privacy decision, email [email protected] with the subject Privacy appeal and the earlier request reference. We assess requests under the deadlines and exceptions that apply to you.
Security
Protections include encrypted connections, restricted administrative access, secure sessions, rate controls, security logging and short-lived photo handling. No online service can promise absolute security; suspected vulnerabilities should be reported to [email protected].
Changes and contact
Material changes will be posted with a revised date. Privacy questions may be sent to [email protected].