Privacy policy

Who is responsible

Files you upload

The service receives the photo, PDF or document images you choose, together with the selected document profile and editing settings. These data are needed to crop, resize, remove or replace a background, compress, merge, convert and perform the checks you request. Generated previews and downloads are also held temporarily. Files and the associated in-memory processing record expire after 15 minutes.

Private report builders

The Evidence Pack, Estate Inventory, Field Report and Care Timeline builders work locally in your browser. Source images, extracted EXIF metadata, SHA-256 digests and report notes are not uploaded to Photo & PDF Desk. The browser downloads the completed PDF directly. Refreshing or closing the page clears the working session. GPS coordinates are excluded from the report unless you actively select the location option.

Automated photo checks

Face landmarks and image measurements are used to estimate framing, head position, eye position, pose, tilt and background uniformity. These checks help prepare the file and do not identify the person or make a legal decision. The receiving authority always decides whether to accept a submission.

Payments and orders

Stripe hosts the secure checkout and collects payment and billing information directly. Photo & PDF Desk receives the payment event, customer email address and the technical reference needed to unlock and deliver the purchased file. The prepared file is sent to that address through Resend immediately after payment confirmation. Stripe handles payment security and retains transaction records under its own privacy terms. Photo & PDF Desk never receives your full card number.

Support, email copies and feedback

If you use the contact form, request an emailed copy or submit feedback, the service processes the information you enter for that purpose. Support messages may be retained as reasonably needed to answer the request, prevent abuse and keep support records. Email delivery is provided through Resend. Marketing updates are sent only when you actively select the optional updates checkbox, and you may withdraw that choice.

Hosting, security and browser resources

The website uses Cloudflare for DNS, security and network delivery and Railway for application hosting. These providers may process connection data such as IP address, request time, browser information and security events. Face-analysis and background-removal code runs in your browser; required software and model files are loaded from jsDelivr and Google-hosted model storage, which may receive ordinary connection data when those resources load. The uploaded image itself is not sent to those model hosts by Photo & PDF Desk.

Cookies and local storage

Photo & PDF Desk does not currently use advertising or behavioural analytics cookies. The browser stores your language preference and a short-lived indication that a download was started. Payment providers may use their own strictly necessary security and checkout technologies when you open their checkout.

Purpose and legal basis

Data needed to prepare and deliver a requested file is processed to provide the service and perform the purchase contract. Security, abuse prevention and limited support records are processed for legitimate operational interests. Transaction information may be retained where required by law. Optional marketing messages rely on your choice and can be stopped at any time.

International providers

Some service providers operate in multiple countries. Where personal data is transferred internationally, it is handled under the provider's applicable contractual and legal safeguards. Avoid including unnecessary sensitive information in support messages.

Your rights

Subject to applicable law, you may request information about personal data relating to you, correction, deletion, restriction, portability or object to processing. You may also withdraw an optional consent. Contact [email protected]. You may lodge a complaint with the competent data-protection authority. Because processing files are deleted after 15 minutes, Photo & PDF Desk will normally be unable to retrieve an expired upload.