Privacy Policy

Draft. This policy describes how PassFino works today and must be reviewed by counsel before launch.

What this policy covers

This policy covers the PassFino website at passfino.com, operated by the company named at the bottom of this page.

The short version

PassFino reads, crops, checks and lays out your photo inside your browser. Until you pay, nothing is uploaded and we cannot see your photo. When you pay, the finished files (not the photo you started from) are stored for 30 days so we can email them to you, and on the Pro plan a person looks at them. Then they are deleted.

Photos you choose

When you take or choose a photo, your browser decodes it, finds the face and head with a detection model that runs on your device, computes the crop, checks it against the rules for your document and creates the files you download.

• Background replacement. If you choose to replace the background, the cut-out model is downloaded to your browser and runs there. The photo is not sent anywhere for this.
• Working memory. Photos, crops and print sheets stay in your browser's memory while the page is open. A photo you pick on the home page is handed to the photo tool in memory, not stored.
• Print hand-off. When you open your finished photos in the print-sheet tool, they are kept in your browser's session storage until the tool reads them or you close the tab.
• Closing or reloading the tab clears the working session. The photo you took or chose is never uploaded, paid or not.

Your country and currency

To show prices in your currency, our host (Cloudflare) tells us which country your connection comes from. We use it for that page view only and do not store it.

When you buy

• Payment. Stripe runs the checkout and receives your card details directly; we never see them. Stripe tells us your email address, what you bought and the amount.
• Your files. After payment your browser uploads the finished files of your order: the digital photo for each person, the print sheet and, if you replaced a background, the untouched crop. They are stored with our host (Cloudflare) so we can email you a link and you can download them again. With them we keep each person's document, age group and the results of the automatic checks. If you typed a name for a person, it is used in the file names and stored with the order.
• Your order link. The link in your email opens your files without a password. Anyone who has the link can open them, so keep it to yourself.
• Pro review. On the Pro plan a person working for PassFino looks at each finished photo and writes what they found. The review screen shows the photos, the document and the check results, not your email address or payment details. Reviewers never edit a photo. Staff who handle orders and refunds can see your email address and what you paid, never your card details.
• Deletion. 30 days after payment the files, the names and the check results are deleted automatically. A new photo taken as a free retake replaces the earlier files at once. To have your files deleted sooner, write to support@passfino.com from the address you paid with.
• What we keep. The order record without photos (order number, email address, plan, amount, dates, the outcome of a review and any refund) is kept as long as tax and accounting rules require, and so we can honour the Pro refund promise.
• Email. We send you the link to your files and, on Pro, the review result. We do not send marketing email.

Preferences and browser storage

The site stores small preferences in your browser, such as light or dark mode and a language you chose. See the cookie policy for the full list.

Analytics

If privacy-limited analytics are enabled, they record coarse product actions (for example "photo downloaded") and never contain photos, file names or anything visible in a photo.

Changes and contact

We will update this page when the service changes. Questions: support@passfino.com.