How we handle your photo

The photo is the sensitive part of this service. Face landmarks used for framing are computed in your browser. The image itself is uploaded so we can remove the background, measure it against the published specification, and — if you pay — deliver the file, the print sheet, and the specification report.

We do not use your photo to identify you, to build a face database, or to train models. We do not sell photographs. We do not run ads against them.

Depending on how you use the site, we may hold:

• The original upload, a cutout, the exported photo, an optional print sheet, and a specification report.
• Crop coordinates and face measurements needed to check the file against the spec.
• The email collected at Dodo checkout, so we can send the download link and restore it if you lose the tab.
• Payment references from Dodo (status, amount, a payment id). Card numbers never reach our servers.
• An anonymous browser identifier and the landing page of a visit, so we can see which checks convert. This is not tied to your name.
• Optional account data (email, Google sign-in) if you create an account. Checkout does not require one.
• If you tell us whether a consulate accepted the photo, that outcome — without the image — so we can see whether a rule version is working.
• IP address, used only to rate-limit abuse.

To run the check you asked for, to take payment, to deliver files, to email the download link, to stop automated abuse, and to see whether the product is doing its job. We do not use this data for marketing lists or third-party advertising.

If you are in a region that requires a legal basis: performing the contract when you pay; legitimate interests for security, rate limits, and product analytics that do not identify you; and your request when you upload a photo for a free check.

• Working uploads (the original and cutout) are dropped after a day or two.
• Unpaid checkouts, including rendered files, are dropped after 48 hours.
• Paid files stay available for 30 days from payment, then are deleted. The download link dies with them.
• Funnel events and optional acceptance outcomes are kept without the image so we can judge the product over time.

If you want a paid order removed sooner, email hello@solidflow.co from the address used at checkout.

We use processors to run the site. They see only what they need to do that job:

• Vercel hosts the application.
• Supabase stores files, orders, and optional accounts.
• Dodo Payments runs checkout and handles card details. Their terms and privacy policy apply to the payment itself.
• Resend sends the download email.
• Background removal runs on our own rembg service where possible. If that is unavailable, the photo may be sent to remove.bg solely to produce a cutout, then discarded by us on the usual schedule.
• Google, only if you choose to sign in with Google.

We disclose information if required by law, or to protect the service against fraud or abuse. We do not sell personal information.

If you sign in, we set session cookies so you stay signed in. For everyone else we store a random identifier and first-touch attribution in local storage — not a third-party advertising cookie. Checkout happens on Dodo’s page, which may set its own cookies.

You can ask what we hold, ask us to correct it, or ask us to delete it. Email hello@solidflow.co. We will need enough to find the order — usually the checkout email or the download link — and we will not invent a record that is not there.

If you are in the EEA, UK, or a similar regime, you may also object to or restrict certain processing, and you may complain to a supervisory authority. California residents: we do not sell or share personal information as those terms are used in the CPRA, and we do not use it for cross-context behavioural advertising.

Visa photos are often of minors. A parent or guardian must upload and pay. We do not knowingly collect an account from a child. Face photos of children are treated as the same sensitive uploads as any other photograph, with the same deletion schedule.

SolidFlow operates solidflow.co. Privacy questions go to hello@solidflow.co. The Terms cover what you are buying and what we do not promise.