Privacy Policy

In short: we never store your photo. It is processed in memory to make your passport photo, then discarded. No accounts, no cookies of our own, no analytics or ad trackers.

This website (PersonPhoto at personphoto.com, "we") is operated by Anubhav Tripathi. This policy explains exactly what happens to your data. It is written to meet India's Digital Personal Data Protection Act, 2023 and the IT Act, 2000.

1. Your photo

When you take or upload a photo, your browser resizes it and sends it over an encrypted (HTTPS) connection to our processing function.
The function finds your face, removes the background, adds white and frames the photo, all in the server's memory. It returns the result and then discards the photo and every processed image when the request ends.
Your photo is never written to disk, a database or cloud storage, never logged, never used to train AI, and never shared or sold.
It is processed twice: once for the free watermarked preview, and again when you download after paying (your browser sends the same photo again). Both times it is discarded immediately.

2. Photo fingerprint

When you pay, we attach a SHA-256 fingerprint of your photo file to the payment order, so a payment unlocks only that one photo. A fingerprint is a one-way code: your photo cannot be recreated or viewed from it. It is kept with the order record at Razorpay.

3. Payments

Payments are handled by Razorpay Software Pvt. Ltd., an RBI-authorised payment aggregator. We never see or store your UPI PIN, bank account or card details. Razorpay processes your payment details (such as UPI ID, phone number and transaction ID) under Razorpay's privacy policy and keeps payment records as required by law. Our Razorpay dashboard shows the order and payment record, which we use only for refunds and support.

4. What stays in your browser

While a payment is in progress, a copy of your photo and the preview are kept in your browser tab's session storage. This means a page reload (for example, after switching to your UPI app) doesn't lose your paid photo. It stays on your device and is deleted when you close the tab or tap "Use a different photo". The photo you download is saved only where you choose.

5. Camera

The camera is used only after you tap "Take a selfie" and allow it. The live view stays in your browser. Only the frame you capture is sent for processing, and the camera is switched off right after.

6. Hosting logs

The site is hosted on Vercel. Like any web server, it records basic technical request logs (IP address, time, page requested, browser type) for security and reliability, kept for a short period under Vercel's privacy policy. These logs never contain your photo.

7. Cookies and tracking

We set no cookies of our own and use no analytics, advertising or tracking scripts. Razorpay's checkout window may use its own cookies to process your payment and prevent fraud.

8. Children and other people's photos

A parent or guardian may make a photo for a child. Only upload photos of yourself, or of someone who has given you consent (or whose guardian you are).

9. Your rights

Under the DPDP Act, 2023 you can ask to access, correct or erase your personal data and raise a grievance. Because we don't keep your photo or any account, there is usually nothing for us to hold. Payment records are held by Razorpay as the law requires. For any request or complaint, write to our grievance contact: Anubhav Tripathi, anubhavtripathi0509@gmail.com. We reply within 7 days.

10. Changes

If this policy changes, we will update this page.